RADIUS Authentication and Accounting

Overview

Overview

 

 

Feature

Default

Menu

CLI

Web

 

 

Configuring RADIUS Authentication

None

n/a

5-6

n/a

 

 

Configuring RADIUS Accounting

None

n/a

5-17

n/a

 

 

Viewing RADIUS Statistics

n/a

n/a

5-25

n/a

 

 

 

 

 

RADIUS (Remote Authentication Dial-In User Service) enables you to use

 

 

up to three servers (one primary server and one or two backups) and maintain

 

 

separate authentication and accounting for each RADIUS server employed.

 

 

For authentication, this allows a different password for each user instead of

 

 

having to rely on maintaining and distributing switch-specific passwords to

 

 

all users. For accounting, this can help you track network resource usage.

 

 

Authentication. You can use RADIUS to verify user identity for the follow-

 

 

ing types of primary password access to the ProCurve switch:

 

 

 

■

Serial port (Console)

 

 

 

 

 

 

■

Telnet

 

 

 

 

 

 

■

SSH

 

 

 

 

 

 

■ Web (Series 2600, 2600-PWR, and 2800 switches)

 

 

 

 

■

Port-Access

 

 

 

 

 

 

 

Note

 

The switch does not support RADIUS security for SNMP (network manage-

 

 

ment) access or, for the 4100gl and 6108 switches, web browser interface

access. For information on blocking unauthorized access through the web browser interface, refer to “Controlling Web Browser Interface Access When Using RADIUS Authentication” on page 5-17.

Accounting. RADIUS accounting on the switch collects resource consumption data and forwards it to the RADIUS server. This data can be used for trend analysis, capacity planning, billing, auditing, and cost analysis.

5-2