Concept Guide

aaa authentication stateful-ntlm
aaa authentication stateful-ntlm <profile-name>
clone
default-role <role>
enable
server-group <server-group>
timeout <timeout>
Description
This command configures stateful NT LAN Manager (NTLM) authentication.
Syntax
Parameter Description Range Default
clone
Create a copy of an existing stateful NTLM
profile
— —
default-role
Select an existing role to assign to
authenticated users.
— guest
no
Negates any configured parameter. — —
server-group <server-group>
Name of a server group. — default
timeout <timeout>
Amount of time, in seconds, before the
request times out.
1-20
seconds
10
seconds
Usage Guidelines
NT LAN Manager (NTLM) is a suite of Microsoft authentication and session security protocols. You can use a
stateful NTLM authentication profile to configure a controller to monitor the NTLM authentication messages
between clients and an authentication server. The controller can then use the information in the Server
Message Block (SMB) headers to determine the client's username and IP address, the server IP address and the
client's current authentication status. If the client successfully authenticates via an NTLM authentication
server, the controller can recognize that the client has been authenticated and assign that client a specified user
role. When the user logs off or shuts down the client machine, the user will remain in the authenticated role
until the user’s authentication is aged out.
The Stateful NTLM Authentication profile requires that you specify a server group which includes the servers
performing NTLM authentication, and a default role to be assigned to authenticated users. For details on
defining a windows server used for NTLM authentication, see aaa authentication-server windows.
Example
The following example configures a stateful NTLM authentication profile that authenticates clients via the
server group “Windows1.” Users who are successfully authenticated are assigned the “guest2” role.
aaa authentication stateful-ntlm
default-role guest2
server-group Windows1
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa authentication stateful-ntlm | 54