HP Q.11.XX Manual page 89

Console Login (Operator or Read-Only) Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication console login tacacs local
Console Enable (Manager or Read/Write) Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication console enable tacacs local
Telnet Login (Operator or Read-Only) Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication Telnet login tacacs local
Telnet Enable (Manager or Read/Write Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication telnet enable tacacs local
Deny Access and Close the Session After Failure of Two Consecutive Username/Password Pairs:
ProCurve (config)# aaa authentication num-attempts 2
For example, here is a set of access options and the corresponding commands
to configure them:
Using the Privilege-Mode Option for Single Login
When using TACACS+ to control user access to the switch, you must first login
with your username at the Operator privilege level using the password for
Operator privileges, and then login again with the same username but using
the Manager password to obtain Manager privileges. You can avoid this double
login process by entering the privilege-mode option with the aaa authentication
login command to enable TACACS+ for a single login. The switch authenti-
cates your username/password, then requests the privilege level (Operator or
Manager) that was configured on the TACACS+ server for this username/
TACACS+ Authentication
Configuring TACACS+ on the Switch
4-15