Filter
Top Products
183 | AuthenticationServers DellPowerConnectW-SeriesArubaOS6.2 | User Guide
Parameter Description
returned as the value of the attribute selected must be already configured on the
controller when the rule is applied.
Operand This is the string to which the value of the returned attribute is matched.
Value The user role or the VLAN name applied to the client when the rule is matched.
position Position of the condition rule. Rules are applied based on the first match principle. 1 is the
top.
Default: bottom
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select Server Group to display the Server Group list.
3. Enter the name of the new server group and click Add.
4. Select the name to configure the server group.
5. Under Servers, click New to add a server to the group.
a. Select a server from the drop-down menu and click Add.
b. Repeat the above step to add other servers to the group.
6. Under Server Rules, click New to add server derivation rules for assigning a user role or VLAN.
a. Enter the attribute.
b. Select the operation from the drop-down menu.
c. Enter the operand.
d. To set the role, select set role from the Setdrop-down menu and enter the value to be assigned from the
Value drop-down menu.
e. Or, to set the vlan, select set vlanfrom the Set drop-down menu and select the VLAN name or ID from the
Value drop-down menu and click the left-arrow.
f. Click Add.
g. Repeat the above steps to add other rules for the server group.
7. Click Apply.
Using the CLI
(host) (config) #aaa server-group name
(host) (Server Group name) #set {role|vlan} condition condition contains operand set-value
<
set-value-str> position number
Configuring a Role Derivation Rule for the Internal Database
When you add a user entry in the controller’s internal database, you can optionally specify a user role (see "Managing
the Internal Database" on page 175). In order for the role specified in the internal database entry to be assigned to
the authenticated client, you must configure a server derivation rule as shown in the following sections:
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select Server Group to display the Server Group list.
3. Select the internal server group.