ProCurve 2610 Manual page 124

RADIUS Authentication and Accounting
Configuring the Switch for RADIUS Authentication
Syntax: aaa authentication < console | telnet | ssh | web > < enable | login > < local |
C a u t i o n
5-10
radius>>>< web-based | mac-based> <chap-radius>>
Configures RADIUS as the primary password authentication
method for console, Telnet, SSH and/or the Web browser interface.
(The default primary < enable | login > authentication is local.)
<console | telnet | ssh | web>
[< local | none | authorized >]
Provides options for secondary authentication (default:
none). Note that for console access, secondary authenti­
cation must be local if primary access is not local. This
prevents you from being completely locked out of the
switch in the event of a failure in other access methods.
The authorized option allows users unconditional access
to the network when the primary authentication method
fails. See Caution below.
<web-based | mac-based> <chap-radius>>
Password authentication for web-based or mac-based
port access to the switch.
[none | authorized]
Provides options for secondary authentication. The none
option specifies that a backup authentication method is
not used. The authorized option allows access without
authentication.
Default: none
In certain situations, RADIUS servers can become isolated from the network.
Users are not able to access the network resources configured with RADIUS
access protection and are rejected. To address this situation, configuring the
authorized secondary authentication method allows users unconditional
access to the network when the primary authentication method fails because
the RADIUS servers are unreachable.
Configuring authorized as the secondary authentication method used when
there is a failure accessing the RADIUS servers allows clients to access the
network unconditionally. Use this method with care.