5-2
RADIUS Authentication and Accounting
Overview
Overview
RADIUS (Remote Authentication Dial-In User Service) enables you to use
up to three servers (one primary server and one or two backups) and maintain
separate authentication and accounting for each RADIUS server employed.
For authentication, this allows a different password for each user instead of
having to rely on maintaining and distributing switch-specific passwords to
all users. For accounting, this can help you track network resource usage.
Authentication. You can use RADIUS to verify user identity for the follow-
ing types of primary password access to the ProCurve switch:
■ Serial port (Console)
■ Telnet
■ SSH
■ Web
■ Port-Access
Note The switch does not support RADIUS security for SNMP (network manage-
ment) access. For information on blocking unauthorized access through the
web browser interface, refer to “Controlling Web Browser Interface Access
When Using RADIUS Authentication” on page 5-17.
Accounting. RADIUS accounting on the switch collects resource consump-
tion data and forwards it to the RADIUS server. This data can be used for trend
analysis, capacity planning, billing, auditing, and cost analysis.
Feature Default Menu CLI Web
Configuring RADIUS Authentication None n/a 5-6 n/a
Configuring RADIUS Accounting None n/a 5-17 n/a
Viewing RADIUS Statistics n/a n/a 5-25 n/a
