Reference Guide

Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide aaa authentication via connection-profile | 35
auto-login Enable or disable VIA client to auto login and establish a
secure connection to the controller.
Enabled
auto-upgrade Enable or disable VIA client to automatically upgrade when an
updated version of the client is available on the controller.
Enabled
client-logging Enable or disable VIA client to auto login and establish a
secure connection to the controller.
Enabled
client-netmask <client-
netmask>
The network mask that has to be set on the client after the VPN
connection is established.
255.255.255.255
client-wlan-profile <client-
wlan-profile>
A list of VIA client WLAN profiles that needs to be pushed to
the client machines that use Windows Zero Config (WZC) to
configure or manage their wireless networks.
position <position>
clone Create a copy of connection profile from an another VIA
connection profile.
server
 Address: This is the public IP address or the DNS
hostname of the VIA controller. Users connect to remote
server using this IP address or the hostname.
 Internal IP Address: This is the IP address of any of the
VLAN interface IP addresses belongs to this controller.
 Description: This is a human-readable description of the
controller.
addr <addr>
<internal-ip <internal-ip>
desc <description>
csec-gateway-url Specify the content security service providers URL here. You
must provide a fully qualified domain name.
csec-http-ports Specify the ports (separated by comma) that are be monitored
by the content security service provider.
Do not add space before or after the comma.
dns-suffix-list <dns-suffix-
list>
The DNS suffix list (comma separated) that has be set on the
client once the VPN connection is established.
.
None
enable-csec Use this option to enable the content security service.
ext-download-url <ext-
download-url>
End users use this URL to download VIA on their computers.
ike-policy <ike-policy> List of IKE policies that the VIA Client has to use to connect to
the controller.
ikev2-policy List of IKE V2 policies that the VIA Client has to use to connect
to the controller
ikev2-proto Enable this to use IKEv2 protocol to establish VIA sessions. Disabled
ikev2auth Use this option to set the IKEv2 authentication method. By
default user certificate is used for authentication. The other
supported methods are EAP-MSCHAPv2, EAP-TLS. The EAP
authentication is done on an external RADIUS server.
User Certificates
ipsec-cryptomap List of IPsec crypto maps that the VIA client uses to connect to
the controller. These IPsec Crypto Maps are configured in CLI
using the crypto-local ipsec-map <ipsec-map-
name> command.
map <map>
number <number>
ipsecv2-cryptomap List of IPSec V2 crypto maps that the VIA client uses to
connect to the controller.
max-reconnect-attempts <max-
reconnect-attempts>
The maximum number of re-connection attempts by the VIA
client due to authentication failures.
3
Parameter Description Default