HP 4108GL Management And Configuration Manual page 174

Procurve switch
Table of Contents

Advertisement

Using Passwords and TACACS+ To Protect Against Unauthorized Access
TACACS+ Authentication for Central Control of Switch Access Security
Syntax:tacacs-server host <ip-addr>
N o t e o n
Encryption keys configured in the switch must exactly match the encryption
E n c r y p t i o n
keys configured in TACACS+ servers the switch will attempt to use for
K e ys
authentication.
If you configure a global encryption key, the switch uses it only with servers
for which you have not also configured a server-specific key. Thus, a global
key is more useful where the TACACS+ servers you are using all have an
identical key, and server-specific keys are necessary where different
TACACS+ servers have different keys.
If TACACS+ server "X" does not have an encryption key assigned for the
switch, then configuring either a global encryption key or a server-specific key
in the switch for server "X" will block authentication support from server "X".
9-20
[key <key-string>]
[no] tacacs-server host <ip-addr> Removes a TACACS+ server
tacacs-server key <key-string>
[no] tacacs-server key
tacacs-server timeout <1 . . 255> Changes the wait period for a TACACS
Adds a TACACS+ server and optionally
assigns a server-specific encryption key.
assignment (including its server-
specific encryption key, if
Enters the optional global encryption key.
Removes the optional global encryption
key. (Does not affect any server-specific
encryption key assignments.)
server response. (Default: 5 seconds.)
any).

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents