HP StorageWorks 2/64 HP StorageWorks Fabric OS 5.x Advanced Web Tools Administ - Page 68

Enabling and disabling RADIUS service, Configuring the RADIUS server

Get HP StorageWorks 2/64 - Core Switch PDF manuals and user guides View all HP StorageWorks 2/64 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 68 highlights

Enabling and disabling RADIUS service At least one RADIUS server must be configured before you can enable RADIUS service. 1. Launch the Switch Admin module as described on page 36. 2. Click the AAA Service tab. 3. To enable RADIUS service, select a RADIUS service from the Primary AAA Service drop-down list, select None or Switch Database from the Secondary AAA Service drop-down list. To disable RADIUS service, select Switch Database from the Primary AAA Service drop-down list and select None from the Secondary AAA Service drop-down list. 4. Click Apply. Configuring the RADIUS server The configuration is chassis-based, so it applies to all logical switches (domains) on the switch and replicates itself on a standby CP, if one is present. It is saved in a configuration upload, and so it can be applied to other switches in a configuration download. You should configure at least two RADIUS servers so that if one fails, the other assumes service. You can configure the RADIUS server even if it is disabled. You can configure up to five RADIUS servers. You must be logged in as admin or switchAdmin to configure the RADIUS server. To configure the RADIUS server 1. Launch the Switch Admin module as described on page 36. 2. Click the AAA Service tab. 3. Click Add. The RADIUS Configuration dialog box opens. NOTE: You can configure up to five RADIUS servers. If five RADIUS servers are already configured, the Add button is disabled. 4. Enter the RADIUS server name, which is a valid IP address or Dynamic Name Server (DNS) string. Each RADIUS server must have a unique IP address or DNS name for the RADIUS server. 5. Optional: Enter the port number. 6. Optional: Enter the secret string. 7. Optional: Enter the timeout time in minutes. 8. Optional: Select an authentication protocol from CHAP or PAP. The default value is CHAP; if you do not change it, CHAP becomes the authentication protocol. 9. Click OK to return to the AAA Service tab. 10.Click Apply. Modifying the RADIUS server Use the following procedure to change the parameters of a RADIUS server that is already configured. 1. Launch the Switch Admin module as described on page 36. 2. Click the AAA Service tab. 3. Click a RADIUS server from the RADIUS Configuration list. 4. Click Modify. The RADIUS Configuration dialog box opens. 5. Enter new values for the port number, secret string, and timeout time (in minutes). 6. Select an authentication protocol from CHAP or PAP. The default value is CHAP; if you do not change it, CHAP becomes the authentication protocol. 7. Click OK to return to the AAA Service tab. 8. Click Apply. 68 Configuring standard security features

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
68
Configuring standard security features
Enabling and disabling RADIUS service
At least one RADIUS server must be configured before you can enable RADIUS service.
1.
Launch the Switch Admin module as described on
page 36
.
2.
Click the
AAA Service
tab.
3.
To enable RADIUS service, select a RADIUS service from the Primary AAA Service drop-down list,
select
None
or
Switch Database
from the Secondary AAA Service drop-down list.
To disable RADIUS service, select
Switch Database
from the Primary AAA Service drop-down list and
select
None
from the Secondary AAA Service drop-down list.
4.
Click
Apply
.
Configuring the RADIUS server
The configuration is chassis-based, so it applies to all logical switches (domains) on the switch and
replicates itself on a standby CP, if one is present. It is saved in a configuration upload, and so it can be
applied to other switches in a configuration download. You should configure at least two RADIUS servers
so that if one fails, the other assumes service.
You can configure the RADIUS server even if it is disabled. You can configure up to five RADIUS servers.
You must be logged in as admin or switchAdmin to configure the RADIUS server.
To configure the RADIUS server
1.
Launch the Switch Admin module as described on
page 36
.
2.
Click the
AAA Service
tab.
3.
Click
Add
.
The RADIUS Configuration dialog box opens.
NOTE:
You can configure up to five RADIUS servers. If five RADIUS servers are already configured, the
Add button is disabled.
4.
Enter the RADIUS server name, which is a valid IP address or Dynamic Name Server (DNS) string.
Each RADIUS server must have a unique IP address or DNS name for the RADIUS server.
5.
Optional: Enter the port number.
6.
Optional: Enter the secret string.
7.
Optional: Enter the timeout time in minutes.
8.
Optional: Select an authentication protocol from CHAP or PAP.
The default value is CHAP; if you do not change it, CHAP becomes the authentication protocol.
9.
Click
OK
to return to the AAA Service tab.
10.
Click
Apply
.
Modifying the RADIUS server
Use the following procedure to change the parameters of a RADIUS server that is already configured.
1.
Launch the Switch Admin module as described on
page 36
.
2.
Click the
AAA Service
tab.
3.
Click a RADIUS server from the RADIUS Configuration list.
4.
Click
Modify
.
The RADIUS Configuration dialog box opens.
5.
Enter new values for the port number, secret string, and timeout time (in minutes).
6.
Select an authentication protocol from CHAP or PAP.
The default value is CHAP; if you do not change it, CHAP becomes the authentication protocol.
7.
Click
OK
to return to the AAA Service tab.
8.
Click
Apply
.