HP 12500 Configuration Manual page 4

RBAC configuration example for RADIUS authentication users ················································································ 27
Network requirements ··········································································································································· 27
Configuration procedure ······································································································································ 28
Verifying the configuration ··································································································································· 29
RBAC configuration example for HWTACACS authentication users ······································································· 30
Network requirements ··········································································································································· 30
Configuration procedure ······································································································································ 30
Verifying the configuration ··································································································································· 32
Troubleshooting RBAC ··················································································································································· 33
Local users have more access permissions than intended ················································································ 33
Login attempts by RADIUS users always fail ······································································································ 34
Login overview ··························································································································································· 35
Logging in through the console port for the first device access ·············································································· 37
Logging in to the CLI ·················································································································································· 40
CLI overview ··································································································································································· 40
CLI user interfaces ················································································································································· 40
Login authentication modes ·································································································································· 41
User roles ······························································································································································· 41
Logging in through the console/AUX port locally ······································································································ 42
Configuring none authentication for console/AUX login ················································································· 42
Configuring password authentication for console/AUX login ········································································· 43
Configuring scheme authentication for console/AUX login ············································································· 44
Configuring common console/AUX user interface settings ·············································································· 45
Logging in through Telnet ·············································································································································· 47
Configuring Telnet login on the device ··············································································································· 47
Using the device to log in to a Telnet server ······································································································ 51
Logging in through SSH ················································································································································ 52
Configuring SSH login on the device ·················································································································· 52
Using the device to log in to an SSH server ······································································································· 53
Displaying and maintaining CLI login ························································································································· 53
Accessing the device through SNMP ······················································································································· 55
Configuring SNMPv3 access ········································································································································ 55
Configuring SNMPv1 or SNMPv2c access ················································································································· 56
Controlling user access ·············································································································································· 57
Controlling Telnet/SSH logins ······································································································································ 57
Configuration procedures ····································································································································· 57
Configuration example ········································································································································· 57
Controlling SNMP access·············································································································································· 58
Configuration procedure ······································································································································ 58
Configuration example ········································································································································· 59
Configuring command authorization ··························································································································· 60
Configuration procedure ······································································································································ 60
Configuration example ········································································································································· 60
Configuring command accounting ······························································································································· 62
Configuration procedure ······································································································································ 62
Configuration example ········································································································································· 62
Configuring FTP ·························································································································································· 64
Using the device as an FTP server ································································································································ 64
Configuring basic parameters ····························································································································· 64
Configuring authentication and authorization ··································································································· 65
Manually releasing FTP connections ··················································································································· 65
ii