IronPort Systems 4108GL Bedienungsanleitung Seite 168
- Seite / 483
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
9-14
Using Passwords and TACACS+ To Protect Against Unauthorized Access
TACACS+ Authentication for Central Control of Switch Access Security
Using Passwords and
TACACS+
Configuring TACACS+ on the Switch
Before You Begin
If you are new to TACACS+ authentication, HP recommends that you read the
“General Authentication Setup Procedure” on page 9-11 and configure your
TACACS+ server(s) before configuring authentication on the switch.
The switch offers three command areas for TACACS+ operation:
■ show authentication and show tacacs: Displays the switch’s TACACS+
configuration and status.
■ aaa authentication: A command for configuring the switch’s authenti-
cation methods
■ tacacs-server: A command for configuring the switch’s contact with
TACACS+ servers
CLI Commands Described in this Section
Viewing the Switch’s Current Authentication Configuration
This command lists the number of login attempts the switch allows in a single
login session, and the primary/secondary access methods configured for each
type of access.
Syntax: show authentication
show authentication below
show tacacs page 9-15
aaa authentication pages page 9-16 through page 9-18
console pages page 9-16 through page 9-18
Telnet pages page 9-16 through page 9-18
num-attempts <1..10> pages page 9-16 through page 9-18
tacacs-server pages page 9-19
host <ip addr> pages page 9-19
key page 9-23
timeout <1 ..255> page 9-24
- HP Procurve Switch 4108GL 3
- Documentation 5
- Time Protocols 10
- Unauthorized Access 10
- Security 11
- Trunking 11
- HP Procurve Stack Management 13
- Spanning Tree Protocol (STP) 14
- Troubleshooting 15
- File Transfers 16
- MAC Address Management 16
- Selecting a Management 19
- Interface 19
- Advantages of Using the CLI 20
- Browser Interface 21
- Hubs & Switches 22
- Using the Menu Interface 25
- Main Menu Features 31
- Rebooting the Switch 36
- Menu Features List 38
- Where To Go From Here 39
- Accessing the CLI 42
- Using the CLI 42
- Privilege Levels at Logon 43
- Privilege Level Operation 44
- Manager Privileges 45
- How To Move Between Levels 47
- ? symbol lists the 48
- Using the Command Line 49
- Interface (CLI) 49
- Command Option Displays 50
- Using the CLI 52
- Configuration Modes 53
- CLI Control and Editing 56
- General Features 59
- Session with the Switch 61
- Using the HP Web Browser 63
- Interface Session 64
- Using the Passwords 67
- Using the User Names 67
- If You Lose a Password 68
- Support/Mgmt URLs Feature 69
- Support URL 70
- Status Reporting Features 72
- Port Utilization 73
- The Alert Log 76
- Alert Types 77
- The Status Bar 79
- Switch Memory and 85
- Using the CLI To Implement 86
- Configuration Changes 86
- Reboot Switch option 92
- Image Options 93
- OS Downloads 96
- Caution--No 98
- Operating Notes 101
- Chapter Contents 103
- Overview 104
- Web, and Inbound Telnet 105
- Interface Access 106
- Parameters 106
- System Information 107
- HP4108(config)# telnet-server 107
- Interface Access and 107
- ■ VT100 operation 108
- ■ 19,200 baud 108
- ■ No flow control 108
- ■ 10-minute inactivity time 108
- ■ Critical log events 108
- Configuring IP Addressing 117
- IP Configuration 119
- Just Want a Quick Start? 120
- Live (TTL) 121
- (TTL), and Timep 123
- DHCP/Bootp Operation 126
- Overview: Selecting a Time 133
- Time Protocol Operation 133
- Configuring 134
- – TIMEP 136
- Table 8-2.Timep Parameters 144
- SNTP Servers 150
- Address Prioritization 151
- Configured 153
- Contents 155
- Menu: Configuring Passwords 159
- Commands Used in This Section 160
- Using Passwords and 161
- General System Requirements 164
- Note on Privilege Levels 166
- Before You Begin 168
- Configuration 169
- Note on 174
- Encryption 174
- First-Choice TACACS+ Server 176
- How Authentication Operates 178
- Local Authentication Process 179
- Using the Encryption Key 180
- TACACS+ Authentication 182
- Messages 182
- Management Security 185
- Using Authorized IP 187
- Managers 187
- Using Authorized IP Managers 188
- Access Levels 189
- Building IP Masks 194
- Control and Port Trunking 199
- Ports: Traffic Control 201
- Port Trunking 208
- Trunk Configuration Methods 210
- Trunk Group 216
- Default Port Operation 225
- LACP Notes and Restrictions 226
- technol 227
- Applications 231
- Monitoring and Managing 233
- SNMP Communities 235
- Advanced Management: RMON 241
- Introduction 242
- CDP Terminology 243
- General CDP Operation 243
- Outgoing Packets 244
- Incoming CDP Packets 245
- Configuring CDP on the Switch 248
- Configuring CDP Operation 251
- Transmission 253
- Outbound CDP Packets 254
- HP Procurve Stack 263
- Management 263
- General Stacking Operation 264
- Operating Rules for Stacking 265
- Specific Rules 266
- Configure Stacking 272
- Auto Join and Transmission 274
- Interval 274
- – To change 276
- Save) to 278
- Back) to return to 280
- 4. Stack Management 280
- Monitoring Stack Status 285
- For status descriptions 286
- 9. Stacking 288
- Stacking 289
- listing 296
- MAC Address for 298
- Stack Commander 298
- Auto Join parameter 300
- The switch number 302
- (SN) for the “North 302
- Sea” switch is “3” 302
- Transmission Interval 304
- Status Messages 306
- Port-Based Virtual LANs 311
- (VLANs) and GVRP 311
- Switch 4108 312
- Overview of Using VLANs 313
- General Steps for Using VLANs 316
- Notes on Using VLANs 316
- An asterisk indicates 318
- VLANs setting 318
- Adding or Editing VLAN Names 319
- Example of a New 320
- VLAN and ID 320
- Creating the new VLAN 326
- Showing the result 326
- ■ Add VLANs 328
- ■ Rename VLANs 328
- ■ Remove VLANs 328
- ■ Configure GVRP mode 328
- ■ Select a new Primary VLAN 328
- VLAN Tagging Information 329
- ■ In switch X: 330
- ■ In switch Y: 330
- IP Interfaces 333
- VLAN MAC Addresses 334
- Port Trunks 334
- Port Monitoring 334
- VLAN Restrictions 335
- General Operation 337
- GVRP Enabled 340
- (Required for Unknown 340
- VLAN operation.) 340
- Unknown VLAN Settings 340
- Default: 340
- GVRP and VLAN Access Control 342
- Planning for GVRP Operation 343
- Configuring GVRP On a Switch 343
- GVRP Operating Notes 348
- Multimedia Traffic Control 353
- IGMP Terms 354
- Basic Operation 355
- Enhancements 355
- How IGMP Operates 361
- Automatic Fast-Leave IGMP 363
- Forced Fast-Leave IGMP 364
- Note on VLAN 365
- Numbers: 365
- Using the Switch as Querier 368
- Multicast Filtering 369
- Spanning Tree Protocol 373
- Menu: Configuring STP 374
- CLI: Configuring STP 375
- How STP Operates 379
- STP Fast Mode 380
- Status and Counters Data 387
- General System Information 389
- Menu Access 390
- CLI Access 390
- Module Information 391
- Port Status 392
- Control Status 393
- Monitoring and Analyzing 395
- Switch Operation 395
- Menu Access to STP Data 401
- CLI Access to STP Data 402
- VLAN Information 404
- Port Monitoring Features 407
- Troubleshooting Approaches 415
- Unusual Network Activity 418
- Troubleshooting CDP Operation 419
- IGMP-Related Problems 420
- Stacking-Related Problems 421
- TACACS-Related Problems 421
- VLAN-Related Problems 423
- ■ All events recorded 430
- Diagnostic Tools 431
- CLI: Ping or Link Tests 434
- Restoring a Flash Image 439
- Primary or Secondary Flash 450
- Switch-to-Switch Download 451
- Host, PC, or Unix Workstation 458
- Determining MAC Addresses 462
- Switches 467
- Daylight Savings Time on HP 469
- Procurve Switches 469
- Numerics 471
- 2 – Index 472
- Index – 3 473
- 4 – Index 474
- Index – 5 475
- 6 – Index 476
- Index – 7 477
- 8 – Index 478
- Index – 9 479
- 10 – Index 480
- Index – 11 481
- *5969-2378* 483
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.043 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern