Access Security Guide K/KA/KB.15.15

Table 2 Affected commands
New Equivalent OptionExisting Command
HP Switch(config)# radius-server
encrypted-key
U2FsdGVkX18XWadTeFN+bxHxKA/q+s5cV1NiYvx+TuA=
HP Switch(config)# radius-server key
secret1
HP Switch(config)# radius-server host
10.0.0.1 encrypted-key
HP Switch(config)# radius-server host
10.0.0.1 key secret1
U2FsdGVkX18XWadTeFN+bxHxKA
q+s5cV1NiYvx+TuA=
HP Switch(config)# tacacs-server
encrypted-key
U2FsdGVkX18XWadTeFN+bxHxKA/q+s5cV1NiYvx+TuA=
HP Switch(config)# tacacs-server key
secret1
HP Switch(config)# tacacs-server host
10.0.0.1 encrypted-key
HP Switch(config)# tacacs-server host
10.0.0.1 key secret1
U2FsdGVkX18XWadTeFN+bxHxKA/
q+s5cV1NiYvx+TuA=
HP Switch(config)# key-chain example key
1 encrypted-key U2FsdGVkX18XWadTeFN+bxHxKA/
q+s5cV1NiYvx+TuA=
HP Switch(config)# key-chain example key
1 key-string secret1
HP Switch(config)# aaa port-access
supplicant 24 identity id1 encrypted-secret
HP Switch(config)# aaa port-access
supplicant 24 secret secret1
secret1
U2FsdGVkX18XWadTeFN+bxHxKA/q+s5cV1NiYvx+TuA=
HP Switch(config)# sntp authentication
key-id 33 authentication-mode md5
HP Switch(config)# sntp authentication
key-id 33 authentication-mode md5 key-value
secret1 encrypted-key
U2FsdGVkX18XWadTeFN+bxHxKA/q+s5cV1NiYvx+TuA=
HP Switch(config)# encrypted-password
manager
U2FsdGVkX18XWadTeFN+bxHxKA/q+s5cV1NiYvx+TuA=
HP Switch(config)# password manager
plaintext secret1
Front panel security
Front panel security
The front panel security features provide the ability to independently enable or disable some of
the functions of the two buttons located on the front of the switch for clearing the password
(Clearbutton) or restoring the switch to its factory default configuration (Reset+Clear buttons together).
The ability to disable password recovery is also provided for situations which require a higher
level of switch security.
The front-panel security features are designed to prevent malicious users from:
• Resetting the password(s) by pressing the Clear button
• Restoring the factory default configuration by using the Reset+Clear button combination.
• Gaining management access to the switch by having physical access to the switch itself
When security is important
Some customers require a high level of security for information. For example, the Health Insurance
Portability and Accountability Act (HIPAA) of 1996 requires that systems handling and transmitting
confidential medical records must be secure.
It used to be assumed that only system and network administrators would be able to get access to
a network switch because switches were typically placed in secure locations under lock and key.
38 Configuring Username and Password Security