HP ProCurve 2510G Series User Manual

4-15
TACACS+ Authentication
Configuring TACACS+ on the Switch
The following examples illustrate the use of access options:
Using the Privilege-Mode Option for Single Login
When using TACACS+ to control user access to the switch, you must first login
with your username at the Operator privilege level using the password for
Operator privileges, and then login again with the same username but using
the Manager password to obtain Manager privileges. You can avoid this double
login process by entering the privilege-mode option with the aaa authentication
login command to enable TACACS+ for a single login. The switch authenti-
cates your username/password, then requests the privilege level (Operator or
Manager) that was configured on the TACACS+ server for this username/
Console Login (Operator or Read-Only) Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication console login tacacs local
Console Enable (Manager or Read/Write) Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication console enable tacacs local
Telnet Login (Operator or Read-Only) Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication Telnet login tacacs local
Telnet Enable (Manager or Read/Write Access: Primary using TACACS+ server.
Secondary using Local.
ProCurve (config)# aaa authentication telnet enable tacacs local
Deny Access and Close the Session After Failure of Two Consecutive Username/Password Pairs:
ProCurve (config)# aaa authentication num-attempts 2

HP ProCurve 2510G Series Specifications

General

Brand	HP
Model	ProCurve 2510G Series
Category	Network Router
Language	English