Release Notes

103 | aaa server-group Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Parameter Description Default
match-fqdn <string>
This option associates the authentication server with a
specified domain. An authentication request is sent to the
server only if there is an exact match between the specified
domain and the <domain> portion of the user information
sent in the authentication request. With this option, the
user information must be in one of the following formats:
<domain>\<user>
<user>@<domain>
—
position <number>
Position of the server in the server list. 1 is the top. (last)
trim-fqdn
This option causes the user information in an
authentication request to be edited before the request is
sent to the server. Specifically, this option:
removes the <domain>\ portion for user information in the
<domain>\<user> format
removes the @<domain> portion for user information in
the <user>@<domain> format
—
clone
Name of an existing server group from which parameter
values are copied.
—
load-balance
Enables load-balancing functionality. —
no
Negates any configured parameter. —
set role|vlan
Assigns the client a user role, VLAN ID or VLAN name
based on attributes returned for the client by the
authentication server. Rules are ordered: the first rule that
matches the configured condition is applied.
VLAN IDs and VLAN names cannot be listed together.
—
condition
Attribute returned by the authentication server. —
contains
The rule is applied if and only if the attribute value contains
the specified string.
—
ends-with
The rule is applied if and only if the attribute value ends
with the specified string.
—
equals
The rule is applied if and only if the attribute value equals
the specified string.
—
not-equals
The rule is applied if and only if the attribute value is not
equal to the specified string.
—
starts-with
The rule is applied if and only if the attribute value begins
with the specified string.
—
set-value
User role or VLAN applied to the client when the rule is
matched.
—
value-of
Sets the user role or VLAN to the value of the attribute
returned. The user role or VLAN ID returned as the value of
the attribute must already be configured on the controller
when the rule is applied.
—