HP (Hewlett-Packard) MSM7XX Switch User Manual


 
Management
Management tool
Administrative user authentication
Login credentials for administrative users can be verified using local account settings and/or
an external RADIUS sever.
Local account settings: A single manager and operator account can be configured
locally under Manager account and Operator account on this page.
RADIUS server: Using a RADIUS server enables you to have multiple accounts, each
with a unique login name and password. Identify manager accounts using the vendor
specific attribute web-administrative-role. Valid values for this attribute are Manager
and Operator. For attribute information, see Administrator attributes on page 9-27. To
use a RADIUS server, you must define a RADIUS profile on the Service Controller >>
Authentication > RADIUS profiles page.
If both options are enabled, the RADIUS server is always checked first. If login is refused by
the local account, then the RADIUS server checked.
Authenticating administrative credentials using an external RADIUS
server
Configure RADIUS authentication as follows:
1. Define an account for the administrator on the RADIUS server. See Administrator
attributes on page 9-27.
2. On the service controller, create a RADIUS profile that will connect the service controller
to the RADIUS server. See Configuring a RADIUS server profile on the service
controller on page 6-5.
3. Under Administrator authentication, set Authenticate via to the RADIUS profile you
created. In this example, the profile is called Rad1.
4. Test the RADIUS account to make sure it is working before you save your changes.
Specify the appropriate username and password and click Test.
(As a backup measure you can choose to enable Local. This will allow you to log in using
the local account if the connection to the RADIUS server is unavailable.)
4-4