Reference Guide

Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide aaa user add | 82
aaa user add
aaa user add <ipaddr> [<number>] [authentication-method {dot1x|mac|stateful-dot1x|vpn|
web}] [mac <macaddr>] [name <username>] [profile <aaa_profile>] [role <role>]
Description
This command manually assigns a user role or other values to a specified client or device.
Syntax
Usage Guidelines
This command should only be used for troubleshooting issues with a specific client or device. This command
allows you to manually assign a client or device to a role. For example, you can create a role “debugging” that
includes a policy to mirror session packets to a specified destination for further examination, then use this
command to assign the “debugging” role to a specific client. Use the aaa user delete command to remove the
client or device from the role.
Note that issuing this command does not affect ongoing sessions that the client may already have. For example, if
a client is in the “employee” role when you assign them to the “debugging” role, the client continues any sessions
allowed with the “employee” role. Use the aaa user clear-sessions command to clear ongoing sessions.
Example
The following commands create a role that logs HTTPS traffic, then assign the role to a specific client:
ip access-list session log-https
any any svc-https permit log
user-role web-debug
session-acl log-https
In enable mode:
aaa user add 10.1.1.236 role web-debug
Command History
This command was available in ArubaOS 3.0.
Parameter Description
<ipaddr> IP address of the user to be added.
<number> Number of users to create starting with <ipaddr>.
authentication-method Authentication method for the user.
dot1x 802.1x authentication.
mac MAC authentication.
stateful-dot1x Stateful 802.1x authentication.
vpn VPN authentication.
web Captive portal authentication.
mac <macaddr> MAC address of the user.
name <username> Name for the user.
profile <aaa_profile> AAA profile for the user.
role <role> Role for the user.