6-1
6
RADIUS Authentication, Authorization, and
Accounting
Overview
RADIUS (Remote Authentication Dial-In User Service) enables you to use
up to fifteen servers and maintain separate authentication and accounting for
each RADIUS server employed. For authentication, this allows a different
password for each user instead of having to rely on maintaining and distrib-
uting switch-specific passwords to all users. For accounting, this can help you
track network resource usage.
Authentication Services
You can use RADIUS to verify user identity for the following types of primary
password access to the HP switch:
â– Serial port (Console)
â– Telnet
â– SSH
â– SFTP/SCP
â– Web Agent (8212zl, 5400zl, 4200vl, 2800s as of software version I.08.60,
and 2600s as of software version H.08.58 switches)
â– Port-Access (802.1X)
Feature Default Menu CLI WebAgent
Configuring RADIUS Authentication None n/a 6-7 n/a
Configuring RADIUS Accounting None n/a 6-52 n/a
Configuring RADIUS Authorization None n/a 6-38 n/a
Viewing RADIUS Statistics n/a n/a 6-67 n/a