HP procurve 2500 Manuale Utente

177    

Enhancements in Release F.02.02
TACACS+ Authentication for Centralized Control of Switch Access Security

Configuring the Switch’s TACACS+ Server Access

The tacacs-server command configures these parameters:

■

 for up to three TACACS+ servers; one first-choice and up to two 

backups. Designating backup servers provides for a continuation of authentication services 
in case the switch is unable to contact the first-choice server.

■

 This key helps to improve security, and must match the 

encryption key used in your TACACS+ server application. In some applications, the term 
"secret key" or "secret" may be used instead of "encryption key". If you need only one 
encryption key for the switch to use in all attempts to authenticate through a TACACS+ 
server, configure a global key. However, if the switch is configured to access multiple 
TACACS+ servers having different encryption keys, you can configure the switch to use 
different encryption keys for different TACACS+ servers.

■

 in seconds for attempts to contact a TACACS+ server. If the switch sends 

an authentication request, but does not receive a response within the period specified by the 
timeout value, the switch resends the request to the next server in its Server IP Addr list, if 
any. If the switch still fails to receive a response from any TACACS+ server, it reverts to 
whatever secondary authentication method was configured using the 

 

tacacs-server host <ip-addr> [key < key-string >] Adds a TACACS+ server and optionally

[no] tacacs-server host <ip-addr>

.

tacacs-server key <key-string>

[no] tacacs-server key 

tacacs-server timeout < 1 . . 255 >