HP 4100gl manual Port-Access, Radius Authentication and Accounting

RADIUS Authentication and Accounting

Overview

Note

Overview

Feature	Default	Menu	CLI	Web
Configuring RADIUS Authentication	None	n/a	3-6	n/a
Configuring RADIUS Accounting	None	n/a	3-16	n/a
Viewing RADIUS Statistics	n/a	n/a	3-23	n/a

RADIUS (Remote Authentication Dial-In User Service) enables you to use up to three servers (one primary server and one or two backups) and maintain separate authentication and accounting for each RADIUS server employed. For authentication, this allows a different password for each user instead of having to rely on maintaining and distributing switch-specific passwords to all users. For accounting, this can help you track network resource usage.

Authentication. You can use RADIUS to verify user identity for the follow- ing types of primary password access to the HP switch:

■Serial port (Console)

■Telnet

■SSH

■Port-Access

The switch does not support RADIUS security for SNMP (network manage- ment) access or web browser interface access. For steps to block unautho- rized access through the web browser interface, see “Controlling Web Browser Interface Access When Using RADIUS Authentication” on page 3-15.

Accounting. RADIUS accounting on the switch collects resource consump- tion data and forwards it to the RADIUS server. This data can be used for trend analysis, capacity planning, billing, auditing, and cost analysis.

3-2