HP StorageWorks 2.32 Edge Switch - Manual (Page 88)

Configuring the switch 88
• Some Radius servers store passwords unencrypted in plain text files. If Local Only were used,
there would be no unencrypted central repository of the password information as your HAFM
encrypts this information.
• If you want to specify Radius authentication, you must first define at least one Radius Server. If no
Radius Servers have been configured, then the only option presented is Local only.
Using the Users tab
The Users tab ( Figure 24 ) lets the security administrator set up role-based user access to the selected
switch through other management interfaces, such as HAFM Basic or Telnet.
Figure 24 Configure Security Authentication Users tab
If the HAFM Basic or Telnet check box is not selected, then no user can log in to the switch through
this interface. When the interfaces are enabled, HAFM Basic and Telnet can be set to authenticate
to a local database on the switch, a Radius server, or a local database then a Radius server. If the
SSH check box is selected then all management data between the workstation and the switch
through Telnet is encrypted using the SSH protocol.
If Radius Only is selected from the list, your HAFM appliance checks the Radius information to see
whether or not any Radius server has been specified. If not, the application prevents the user from
selecting this option and a message is displayed.
If the Radius server is already set, the security administrator is alerted that the user information on
the Radius server needs to be entered manually, because that information cannot be populated
automatically by the HAFM appliance.
Assigning users to a switch
For the user role, there are two options available from a list, Administrator and Operator. The ID of
the user is
Administrator
and the password is
password
. The third and fourth column indicate
whether a user has access to the switch through the HAFM Basic or Telnet interface, or through both
of them.