TACACS+ (Terminal Access Controller Access Control System) is an authentication protocol that allows a remote access server to forward a user's logon password to an authentication server to determine whether access can be allowed to a given system. TACACS+ and Remote Authentication Dial-In User Service (RADIUS) protocols are more secure than the TACACS encryption protocol. TACACS+ is described in RFC 1492.

TACACS+ protocol is more reliable than RADIUS, as TACACS+ uses the Transmission Control Protocol (TCP) whereas RADIUS uses the User Datagram Protocol (UDP). Also, RADIUS combines authentication and authorization in a user profile, whereas TACACS+ separates the two operations.

TACACS+ offers the following advantages over RADIUS as the authentication device:

TACACS+ is TCP-based, so it facilitates connection-oriented traffic.

It supports full-packet encryption, as opposed to password-only in authentication requests.

It supports decoupled authentication, authorization, and accounting.

The following table describes the TACACS+ Server Configuration Menu options.

Table 82 TACACS+ Server Configuration Menu options

Command

Description

 

 

prisrv <IP address>

Defines the primary TACACS+ server address.

 

 

secsrv <IP address>

Defines the secondary TACACS+ server address.

 

 

secret <1-32 characters>

This is the shared secret between the switch and the TACACS+ server(s).

 

 

secret2 <1-32 characters>

This is the secondary shared secret between the switch and the TACACS+

 

server(s).

 

 

port <TCP port number>

Enter the number of the TCP port to be configured, between 1 - 65000. The

 

default is 49.

 

 

retries <1-3>

Sets the number of failed authentication requests before switching to a different

 

TACACS+ server. The range is 1-3 requests. The default is 3 requests.

 

 

timeout <4-15>

Sets the amount of time, in seconds, before a TACACS+ server authentication

 

attempt is considered to have failed. The range is 4-15 seconds. The default is 5

 

seconds.

 

 

telnet enabledisable

Enables or disables the TACACS+ back door for telnet. The telnet command

 

also applies to SSH/SCP connections and the Browser-based Interface (BBI). This

 

command does not apply when secure backdoor (secbd) is enabled.

secbd enabledisable

Enables or disables the TACACS+ back door using secure password for telnet/SSH/ HTTP/HTTPS. This command does not apply when backdoor (telnet) is enabled.

cmap enabledisable

Enables or disables TACACS+ privilege-level mapping. The default value is disabled.

usermap <0-15>

Maps a TACACS+ authorization level to a GbE2c user level. Enter a TACACS+

 

useroperadminnone

authorization level (0-15), followed by the corresponding GbE2c user level.

 

 

 

 

on

Enables the TACACS+ server.

 

 

 

 

off

Disables the TACACS+ server.

 

 

 

 

cur

Displays current TACACS+ configuration parameters.

 

 

 

 

 

 

 

IMPORTANT: If TACACS+ is enabled, you must login using TACACS+ authentication when connecting via the console or Telnet/SSH/HTTP/HTTPS. Backdoor for console is always enabled, so you can connect using notacacs and the administrator password even if the backdoor (telnet) or secure backdoor (secbd) are disabled.

If Telnet backdoor is enabled (telnet ena), type in notacacs as a backdoor to bypass TACACS+ checking, and use the administrator password to log into the switch. The switch allows this even if TACACS+ servers are available.

If secure backdoor is enabled (secbd ena), type in notacacs as a backdoor to bypass TACACS+ checking, and use the administrator password to log into the switch. The switch allows this only if TACACS+ servers are not available.

Configuration Menu 95

Page 95
Image 95
HP GbE2c manual Port TCP port number, Telnet enabledisable

GbE2c specifications

The HP GbE2c is a high-performance Ethernet Switch designed to meet the increasing demands of data center environments. As a critical component in Hewlett-Packard's networking lineup, the GbE2c provides a seamless blend of speed, reliability, and advanced networking capabilities, making it an essential tool for enterprises aiming to enhance their network infrastructure.

One of the standout features of the HP GbE2c is its support for Gigabit Ethernet, which allows for high-speed data transmission and reduced latency. This switch is designed to support the growing bandwidth needs of modern applications, ensuring that data is transmitted quickly and efficiently across the network. The GbE2c is particularly beneficial for organizations implementing virtualization technologies, as its Gigabit interfaces help in optimizing data flow between virtual machines.

The GbE2c also incorporates advanced Layer 2 and Layer 3 switching capabilities. This ensures that it can handle both basic and more complex networking tasks, such as routing traffic between different VLANs and enabling Internet Protocol (IP) addressing. The switch supports various protocols, enabling seamless integration into a wide range of network environments.

Additionally, the HP GbE2c is equipped with a robust management system that allows network administrators to easily configure and monitor network settings. With its user-friendly interface, administrators can gain insights into traffic patterns, performance metrics, and potential issues, helping to maintain optimal network performance.

Power efficiency is another key characteristic of the HP GbE2c. The switch is designed to minimize power consumption without sacrificing performance, making it a more sustainable choice for data centers aiming to reduce their carbon footprint. This energy-efficient design is crucial for enterprises looking to lower operational costs while maintaining a high level of service.

The HP GbE2c also boasts high availability features, including redundant power supplies and failover options, ensuring that the network remains operational even in the event of a component failure. This reliability is critical for businesses that require uninterrupted network access for their daily operations.

In summary, the HP GbE2c Ethernet Switch combines speed, versatility, and efficiency, making it an ideal choice for businesses seeking to enhance their networking capabilities. Its robust feature set, advanced management options, and focus on energy efficiency position it as a top-tier solution in the competitive networking landscape. Organizations can rely on the GbE2c to deliver high performance and reliability, thus meeting the demands of today's data-intensive environments.