Getting Started

Introduction

Introduction

This Access Security Guide describes how to use ProCurve’s switch security features to protect access to your switch. This guide is intended to support the following switches:

■ProCurve Switch 2510-24

■ProCurve Switch 2510-48

For an overview of other product documentation for the above switches, refer to “Product Documentation” on page xi.

You can download a copy from the ProCurve Networking website,

www.procurve.com.Overview of Access Security Features

The access security features covered in this guide include:

■Local Manager and Operator Passwords (page 2-1): Control access and privileges for the CLI, menu, and web browser interfaces.

■TACACS+ Authentication (page 4-1): Uses an authentication appli- cation on a server to allow or deny access to a switch.

■RADIUS Authentication and Accounting (page 5-1): Like TACACS+, uses an authentication application on a central server to allow or deny access to the switch. RADIUS also provides accounting services for sending data about user activity and system events to a RADIUS server.

■Secure Shell (SSH) Authentication (page 6-1): Provides encrypted paths for remote access to switch management functions.

■Secure Socket Layer (SSL) (page 7-1): Provides remote web access to the switch via encrypted authentication paths between the switch and management station clients capable of SSL/TLS operation.

1-2