HP StorageWorks IP Storage Router - Manual (Page 150)

Configuring Authentication
150 IP Storage Router SR2122-2 User Guide
Configuring Security Services
Configuring security services consists of setting the appropriate parameters for the
various service options that can be used by the storage router. The SR2122-2 can
use any or all of the supported security services.
Use the procedures that follow to configure the storage router to use the
appropriate security services:
■ RADIUS Servers
■ TACACS+ Hosts
■ Local Username Database
RADIUS Servers
To configure RADIUS security services:
1. enable — Enter Administrator mode.
2. radius-server host 10.5.0.53
— Specify the RADIUS server to
be used for AAA authentication services. For example, specify the RADIUS
server at
10.5.0.53 for use by the storage router. Because no port is specified,
the authentication requests use the default UDP
port 1645. Global timeout
and retransmit values are also used.
3. radius-server host 10.6.0.61
— Specify a secondary RADIUS
server. RADIUS servers are accessed in the order in which they are defined.
For example, specify the RADIUS server at
10.6.0.61 as the second
RADIUS server to be used for AAA authentication services.
4. radius-server key rad123SN
— Configure the global authentication
and encryption key to be used for all RADIUS communications between the
storage router and the RADIUS daemon. For example, set the key to
rad123SN. This key must match the key used on the RADIUS daemon.