HP ProCurve 2810 Series Access Security Guide

4-21
TACACS+ Authentication
Configuring TACACS+ on the Switch
Figure 4-6. Using a TACACS+ Server for Authentication
Using figure 4-6, above, after either switch detects an operator’s logon request
from a remote or directly connected terminal, the following events occur:
1. The switch queries the first-choice TACACS+ server for authentication
of the request.
• If the switch does not receive a response from the first-choice
TACACS+ server, it attempts to query a secondary server. If the
switch does not receive a response from any TACACS+ server,
then it uses its own local username/password pairs to authenti-
cate the logon request. (See “Local Authentication Process” on
page 4-22.)
• If a TACACS+ server recognizes the switch, it forwards a user-
name prompt to the requesting terminal via the switch.
2. When the requesting terminal responds to the prompt with a username,
the switch forwards it to the TACACS+ server.
3. After the server receives the username input, the requesting terminal
receives a password prompt from the server via the switch.
4. When the requesting terminal responds to the prompt with a password,
the switch forwards it to the TACACS+ server and one of the following
actions occurs:
• If the username/password pair received from the requesting
terminal matches a username/password pair previously stored in
the server, then the server passes access permission through the
switch to the terminal.
ProCurve Switch
Configured for
TACACS+ Operation
First-Choice
TACACS+ Server
B
ProCurve Switch
Configured for
TACACS+ Operation
Terminal “A” Directly Accessing This
Switch Via Switch’s Console Port
Terminal “B” Remotely
Accessing This Switch Via Telnet
A
Second-Choice
TACACS+ Server
(Optional)
Third-Choice
TACACS+ Server
(Optional)

HP ProCurve 2810 Series Specifications

General

Brand	HP
Model	ProCurve 2810 Series
Category	Switch
Language	English