Reference Guide

35 | aaa authentication via connection-profile Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide
Usage Guidelines
Issue this command to create a VIA connection profile. A VIA connection profile contains settings required by
VIA to establish a secure connection to the controller. You can configure multiple VIA connection profiles. A
VIA connection profile is always associated to a user role and all users belonging to that role will use the
configured settings. If you do not assign a VIA connection profile to a user role, the default connection profile is
used.
Example
The following example shows a simple VIA connection profile:
(host) (config) #aaa authentication via connection-profile "via"
(host) (VIA Connection Profile "via") #controller addr 202.100.10.100 internal-ip
10.11.12.13 desc "VIA Primary Controller" position 0
(host) (VIA Connection Profile "via") #auth-profile "default" position 0
(host) (VIA Connection Profile "via") #tunnel address 10.0.0.0 netmask 255.255.255.0
(host) (VIA Connection Profile "via") #split-tunneling
(host) (VIA Connection Profile "via") #windows-credentials
(host) (VIA Connection Profile "via") #client-netmask 255.0.0.0
(host) (VIA Connection Profile "via") #dns-suffix-list mycorp.com
(host) (VIA Connection Profile "via") #dns-suffix-list example.com
(host) (VIA Connection Profile "via") #support-email [e-mail]
Command History
Command introduced in 5.0
Command Information
split-tunneling Enable or disable split tunneling.
z If enabled, all traffic to the VIA tunneled networks will go
through the controller and the rest is just bridged directly
on the client.
z If disabled, all traffic will flow through the controller.
off
support-email The support e-mail address to which VIA users will send client
logs.
None
tunnel address <address> A list of network destination (IP address and netmask) that the
VIA client will tunnel through the controller. All other network
destinations will be reachable directly by the VIA client. Enter
tunneled IP address and its netmask.
address <address>
netmask <netmask>
validate-server-cert Enable or disable VIA from validating the server certificate
presented by the controller.
Enabled
windows-credentials Enable or disable the use of the Windows credentials to login
to VIA. If enabled, the SSO (Single Sign-on) feature can be
utilized by remote users to connect to internal resources.
Enabled
Platforms Licensing Command Mode
All platforms Base operating system Config mode on master or local controllers
Parameter Description Default