HP ProCurve 3400cl-24G Access Security Guide

RADIUS Authentication and Accounting
Configuring RADIUS Accounting
(For 802.1x information for the switch, refer to chapter 10, “Configuring
Port-Based and Client-Based Access Control (802.1X)” .)
■ Exec accounting: Provides records holding the information listed
below about login sessions (console, Telnet, and SSH) on the switch:
• Acct-Session-Id
• Acct-Delay-Time
• NAS-IP-Address
• Acct-Status-Type
• Acct-Session-Time
• NAS-Identifier
• Acct-Terminate-Cause
• Username
• Calling-Station-Id
• Acct-Authentic
• Service-Type
■ System accounting: Provides records containing the information
listed below when system events occur on the switch, including
system reset, system boot, and enabling or disabling of system
accounting.
• Acct-Session-Id
• Acct-Delay-Time
• NAS-Identifier
• Acct-Status-Type
• Username
• Calling-Station-Id
• Acct-Terminate-Cause
• Service-Type
• Acct-Authentic
• NAS-IP-Address
The switch forwards the accounting information it collects to the designated
RADIUS server, where the information is formatted, stored, and managed by
the server. For more information on this aspect of RADIUS accounting, refer
to the documentation provided with your RADIUS server.
Operating Rules for RADIUS Accounting
■ You can configure up to three types of accounting to run simulta-
neously: exec, system, and network.
■ RADIUS servers used for accounting are also used for authentication.
■ The switch must be configured to access at least one RADIUS server.
■ RADIUS servers are accessed in the order in which their IP addresses
were configured in the switch. Use show radius to view the order.
As long as the first server is accessible and responding to authentica-
tion requests from the switch, a second or third server will not be
accessed. (For more on this topic, refer to “Changing RADIUS-Server
Access Order” on page 6-60.)
6-49

HP ProCurve 3400cl-24G Specifications

General

Brand	HP
Model	ProCurve 3400cl-24G
Category	Switch
Language	English