HP HP ProCurve Series 6600 Manual do Utilizador descarregar pdf (Página 12)

To make the login process easier it is possible to let the switch enter the privileged mode upon the first login.

The administrator accessing the switch does not need to re-enter the login data to enter the privileged mode

(the enable command). This must be allowed on the switch by the following command:

hp-test(config)# aaa authentication login privilege-mode

The radius server side must deliver the following attribute upon login:

Service-TYPE = Administrative-User

The resulting user definition for FreeRadius may look like this:

"admin-user" Auth-Type := System

Service-TYPE = Administrative-User

1.13

SSH to Access the Switch Management

Before turning on the SSH service, you must generate the private and public keys for SSH. The command to

generate the key varies according to the switch type.

HP26xx, HP28xx, HP6108, HP2510-xx, HP54xx, HP3500, HP6600:

hp-test(config)# crypto key generate ssh

For hp2524:

hp-test(config)# crypto key generate

To turn the SSH service on:

hp-test(config)# ip ssh

1.14

Limiting Access via Insecure Protocols

The default switch configuration runs services that allow access to the switch management via insecure

protocols, namely the telnet and http protocols. The telnet protocol may be replaced by the SSH service, and

the http protocol may be replaced by the https protocol.

hp-test(config)# no web-management plaintext

hp-test(config)# no telnet-server

1 2 ... 7 8 9 10 11 12 13 14 15 16 17 ... 31 32

Sem comentários

HP HP ProCurve Series 6600 Manual do Utilizador Página 12