HP ProCurve 7000dl Series Basic Management And Configuration Manual page 126

Controlling Management Access to the ProCurve Secure Router
Contents
2-2
Configuring Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-24
Creating a Named List to Allow Authorized Users to Access
the Basic Mode Context or the Enable Mode Context . . . . . . . . 2-24
Create a Named List That Allows Authorized Users to
Immediately Enter into the Enable Mode Context . . . . . . . . . . . 2-25
Assign the Named List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26
Enable Authorization Commands for Console Line . . . . . . . . . . 2-27
Configuring AAA Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-27
Creating a Named List to Track When Users Access the
Basic or Enable Mode Context . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-28
Create a Named List to Track New Connections or
Outbound Telnet Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-29
Assign the Named List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30
Configure Update Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-31
Do Not Send Records for Null Users . . . . . . . . . . . . . . . . . . . . . . . 2-31
Configuring a RADIUS Server for Authentication . . . . . . . . . . . . . . . 2-31
Define the RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-31
Define a Group of RADIUS Servers . . . . . . . . . . . . . . . . . . . . . . . . 2-33
Configure Global Settings for RADIUS Servers . . . . . . . . . . . . . . 2-34
Configuring the TACACS+ Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35
Define the TACACS+ Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35
Creating a TACACS+ Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-37
Configure Global Settings for TACACS+ Servers . . . . . . . . . . . . 2-38
Troubleshooting AAA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-39
debug aaa Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-39
Troubleshooting the RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . 2-40
debug radius Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-41
Troubleshooting the TACACS+ Server . . . . . . . . . . . . . . . . . . . . . . . . . 2-41
Using SNMP to Manage the ProCurve Secure Router . . . . . . . . . . . . . . . . 2-44
SNMP Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-44
SNMP Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-45
SNMP Support in the ProCurve Secure Router . . . . . . . . . . . . . . . . . . 2-47
Enabling the SNMP Agent on the ProCurve Secure Router . . . . . . . 2-47