Reference Guide

36 | aaa authentication via connection-profile Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
Usage Guidelines
Issue this command to create a VIA connection profile. A VIA connection profile contains settings required by
VIA to establish a secure connection to the controller. You can configure multiple VIA connection profiles. A
VIA connection profile is always associated to a user role and all users belonging to that role uses the configured
settings. If you do not assign a VIA connection profile to a user role, the default connection profile is used.
Example
The following example shows a simple VIA connection profile:
(host) (config) #aaa authentication via connection-profile "via"
(host) (VIA Connection Profile "via") #controller addr 202.100.10.100 internal-ip
10.11.12.13 desc "VIA Primary Controller" position 0
(host) (VIA Connection Profile "via") #auth-profile "default" position 0
(host) (VIA Connection Profile "via") #tunnel address 10.0.0.0 netmask 255.255.255.0
(host) (VIA Connection Profile "via") #split-tunneling
(host) (VIA Connection Profile "via") #windows-credentials
(host) (VIA Connection Profile "via") #client-netmask 255.0.0.0
(host) (VIA Connection Profile "via") #dns-suffix-list mycorp.com
(host) (VIA Connection Profile "via") #dns-suffix-list example.com
(host) (VIA Connection Profile "via") #support-email [e-mail]
max-timeout value <value> The maximum time (minutes) allowed before the VIA session is
disconnected.
1440 min
minimized Use this option to keep the VIA client on a Microsoft WIndows
operating system minimized to system tray.
save-passwords Enable or disable users to save passwords entered in VIA. Enabled
split-tunneling Enable or disable split tunneling.
 If enabled, all traffic to the VIA tunneled networks goes
through the controller and the rest is just bridged directly
on the client.
 If disabled, all traffic flows through the controller.
off
suiteb-crypto Use this option to enable Suite-B cryptography. See RFC 4869
for more information about Suite-B cryptography.
Disabled
support-email The support e-mail address to which VIA users send client
logs.
None
tunnel address <address> A list of network destination (IP address and netmask) that the
VIA client tunnels through the controller. All other network
destinations are reachable directly by the VIA client. Enter
tunneled IP address and its netmask.
address <address>
netmask <netmask>
validate-server-cert Enable or disable VIA from validating the server certificate
presented by the controller.
Enabled
windows-credentials Enable or disable the use of the Windows credentials to login
to VIA. If enabled, the SSO (Single Sign-on) feature can be
utilized by remote users to connect to internal resources.
Enabled
Parameter Description Default