Release Notes
Parameter Description Default
radius-accounting <group>
Name of the server group used for RADIUS
accounting. See aaa server-group on page
102.
—
radius-interim-accounting
By default, the RADIUS accounting feature
sends only start and stop messages to the
RADIUS accounting server. Issue the interim-
radius-accounting command to allow the
controller to send Interim-Update messages
with current user statistics to the server at
regular intervals.
disabled
rfc-3576-server <ip-addr>
IP address of a RADIUS server that can send
user disconnect, session timeout and change-
of-authorization messages, as described in
RFC 3576, “Dynamic Authorization Extensions
to Remote Dial In User Service (RADIUS)”. See
aaa rfc-3576-server on page 100.
NOTE: This parameter requires the PEFNG
license.
—
sip-authentication-role <role>
Configured role assigned to a session
initiation protocol (SIP) client upon
registration.
NOTE: This parameter requires the PEFNG
license.
guest
user-derivation-rules <profile>
User attribute profile from which the user role
or VLAN is derived.
—
user-idle-timeout
The user idle timeout for this profile. Specify
the idle timeout value for the client in
seconds. A value of 0, deletes the user
immediately after disassociation from the
wireless network. Valid range is 30-15300 in
multiples of 30 seconds. Enabling this option
overrides the global settings configured in the
AAA timers. If this is disabled, the global
settings are used.
disabled
wired-to-wireless-roam
Keeps user authenticated when roaming from
the wired side of the network.
enabled
xml-api-server <ip-addr>
IP address of a configured XML API server.
See aaa xml-api on page 121.
NOTE: This parameter requires the PEFNG
license.
—
Usage Guidelines
The AAA profile defines the user role for unauthenticated users, the default user role for MAC or 802.1X
authentication, and user derivation rules. The AAA profile contains the authentication profile and
authentication server group.
There are predefined AAA profiles available, default-dot1x, default-mac-auth, and default-open. These profiles
have the parameter values shown in the following table.
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide aaa profile | 94










