Release Notes

93 | aaa profile Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Parameter Description Default
devtype-classification
The device identification feature can
automatically identify different client device
types and operating systems by parsing the
User-Agent strings in a client’s HTTP packets.
When the devtype-classification parameter is
enabled, the output of the show user and
show user-table commands shows each
client’s device type, if that client device can be
identified.
enabled
dot1x-default-role <role>
Configured role assigned to the client after
802.1X authentication. If derivation rules are
present, the role assigned to the client
through these rules take precedence over the
default role.
NOTE: This parameter requires the PEFNG
license.
guest
dot1x-server-group <group>
Name of the server group used for 802.1X
authentication. See aaa server-group on page
102.
—
enforce-dhcp
When you enable this option, clients must
complete a DHCP exchange to obtain an IP
address. Best practices are to enable this
option, when you use the aaa derivation-rules
command to create a rule with the
DHCP-Option rule type. This parameter is
disabled by default.
disabled
download-role
Enables role download from ClearPass Policy
Manager (CPPM) if not defined.
disabled
initial-role <role>
Role for unauthenticated users. logon
l2-auth-fail-through
To select different authentication method if
one fails
disabled
mac-default-role <role>
Configured role assigned to the user when
the device is MAC authenticated. If derivation
rules are present, the role assigned to the
client through these rules take precedence
over the default role.
NOTE: This parameter requires the PEFNG
license.
guest
mac-server-group group
Name of the server group used for MAC
authentication. See aaa server-group on page
102.
—
multiple-server-accounting
If enabled, the controller sends RADIUS
accounting to all servers in RADIUS account-
ing server group.
disabled
no
Negates any configured parameter. —
pan-integration
The profile requires mapping at a Palo Alto Net-
works (PAN) firewall
disabled