Reference Guide

Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide aaa authentication stateful-ntlm | 31
aaa authentication stateful-ntlm
aaa authentication stateful-ntlm <profile-name>
clone
default-role <role>
enable
server-group <server-group>
timeout <timeout>
Description
This command configures stateful NT LAN Manager (NTLM) authentication.
Syntax
Usage Guidelines
NT LAN Manager (NTLM) is a suite of Microsoft authentication and session security protocols. You can use a
stateful NTLM authentication profile to configure an Dell controller to monitor the NTLM authentication
messages between clients and an authentication server. The controller can then use the information in the Server
Message Block (SMB) headers to determine the client's username and IP address, the server IP address and the
client's current authentication status. If the client successfully authenticates via an NTLM authentication server,
the controller can recognize that the client has been authenticated and assign that client a specified user role.
When the user logs off or shuts down the client machine, the user remains in the authenticated role until the
user’s authentication is aged out.
The Stateful NTLM Authentication profile requires that you specify a server group which includes the servers
performing NTLM authentication, and a default role to be assigned to authenticated users. For details on
defining a windows server used for NTLM authentication, see aaa authentication-server windows.
Example
The following example configures a stateful NTLM authentication profile that authenticates clients via the server
group “Windows1.” Users who are successfully authenticated are assigned the “guest2” role.
aaa authentication stateful-ntlm
default-role guest2
server-group Windows1
Command History
Command introduced in ArubaOS 3.4.1
Parameter Description Range Default
clone Create a copy of an existing stateful NTLM profile — —
default-role Select an existing role to assign to authenticated users. — guest
no Negates any configured parameter. — —
server-group
<server-group>
Name of a server group. — default
timeout <timeout> NTLM authentication request, timeout period, in seconds. 1-20 seconds 10 seconds