5406zl User Management

[cnoslig]

We are begging the roll-out of the ProCurve 5406zl switches for our customer.  One of the requirement is that the access be restricted to the switch.  It appears that only an Operator or a Manager user is available.  Is it possible to remove both of these users and add/created named users, similar to what is done on a Cisco Router? 

For instance, say I have 5 admins that will need access to the switch, I would need to have 5 seperate login accounts (named accounts) that would allow them to have USER access.  From there, I would need to allow them to move to Privileged (Manager) access (similar to the Enable command and password prompt on Cisco).

Is this possible?  The switch is currently running Firmware Version K.15.06.0017

Thanks

[Aarón · Accepted solution]

Hello cnoslig,

all I can think of is to use an external authentication method:

TEST(config)# aaa authentication ssh enable 
 local                 Use local switch user/password database.
 tacacs                Use TACACS+ server.
 radius                Use RADIUS server.
 peap-mschapv2         Use RADIUS server with PEAP-MSChapv2.
 public-key            Use local switch public key authentication database.

You can change de default usernames manager and operator but it would still be only one username for operator access and one for manager access:

TEST(config)# password manager user-name ee plaintext test 
 <cr>

Hope this helps!

Aarón

[cnoslig]

Aaron-

  Thanks, that is pretty much what I thought, just wanted to verify  I was not looking at it wrong. 

  I am hoping I will be able to use TACACS+ as that would solve the issue and would fall within my STIG requirement.

  Again, thanks for the response.