Filter
Top Products
(host)(config) #ip access-list session guest
user host 10.1.1.25 svc-dhcp permit time-range working-hours
user host 10.1.1.25 svc-dns permit time-range working-hours
user alias “Internal Network” any deny
user any svc-http permit time-range working-hours
user any svc-https permit time-range working-hours
user any any deny
(host)(config) #user-role guest
session-acl guest
Creating Roles and Policies for Sysadmin and Computer
l The allowall policy, a predefined policy, allows unrestricted access to the network. The allowall policy is mapped
to both the sysadmin user role and the computer user role.
In the WebUI
1. Navigate to Configuration > Security > Access Control > User Roles page. Click Add to create the sysadmin
role.
2. For Role Name, enter sysadmin.
3. Under Firewall Policies, click Add. In Choose from Configured Policies, select the predefined allowall policy.
Click Done.
4. Click Apply.
In the CLI
(host)(config) #user-role sysadmin
session-acl allowall
Using the WebUI to create the computer role
1. Navigate to Configuration > Security > Access Control > User Roles page. Click Add to create the computer
role.
2. For Role Name, enter computer.
3. Under Firewall Policies, click Add. In Choose from Configured Policies, select the predefined allowall policy.
Click Done.
4. Click Apply.
Using the CLI to create the computer role
(host)(config) #user-role computer
session-acl allowall
Creating an Alias for the Internal Network Using the CLI
(host)(config) #netdestination “Internal Network”
network 10.0.0.0 255.0.0.0
network 172.16.0.0 255.255.0.0
Configuring the RADIUS Authentication Server
Configure the RADIUS server IAS1, with IP address 10.1.1.21 and shared key. The RADIUS server is configured to
sent an attribute called Class to the controller; the value of this attribute is set to either “student,” “faculty,” or
“sysadmin” to identify the user’s group. The controller uses the literal value of this attribute to determine the role
name.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide 802.1XAuthentication | 208