HP (Hewlett-Packard) MSM7XX Switch User Manual


 
Working with public access attributes
Attribute definitions
ID Cause Notes
17 User Error Supported. An 802.1X client initiated a second
authentication request for a user, and this request was
refused.
18 Host Request Not Supported. (not applicable)
0x8744
(34628
decimal)
Termination HP ProCurve Networking-specific termination cause.
Accounting response
No attributes are supported.
Administrator attributes
If you want to support multiple administrator names and passwords, you must use a RADIUS
server to manage them. The service controller only supports a single admin name and
password internally (defined on the Management > Management tool page).
Note Improper configuration of the administrator profile could expose the service controller to
access by any user with a valid account. The only thing that distinguishes an administrative
account from that of a standard user account is the setting of the service type. Make sure that
a user is not granted access if service type is not Administrative, This is the reason why it may
be prudent to use a different RADIUS server to handle administrator logins. This practice
reduces the risk of a bad configuration on the RADIUS server side creating a security hole.
The following attributes are supported for administrator accounts.
Access Request Access Accept
Framed-MTU Vendor-specific (Colubris)
NAS-Identifier
Access Reject
User-Name
No attributes are supported.
Service-Type
Access Challenge
Vendor-specific (Microsoft)
No attributes are supported.
MSCHAP-Challenge
Accounting Request
MSCHAP-Response
No attributes are supported.
Accounting Response
No attributes are supported.
9-27