Concept Guide

Parameter default-dot1x
default-
mac-auth
default-
open
mac-server-group
default default default
radius-accounting
N/A N/A N/A
rfc-3576-server
N/A N/A N/A
user-derivation-rules
N/A N/A N/A
wired-to-wireless roam
enabled enabled enabled
Usage Guidelines for max-ip ipv4 wireless
Changing the max-ip ipv4 wireless parameter from the default value is recommended for special
deployments. If your WLAN has multiple device IP associated to single MAC address, you can increase the this
value from the default value of 2.
The default value is 2 IPv4 users per wireless user. Total number of IPv4 users created can be a maximum of
two times the license. If you configure 32 max-ip IPv4 users , total number of IPv4 users is 32 times the license.
This can prevent the controller from scaling to the maximum limit of IP users. Total number of IPv4 users
should be scaled down to offset this issue.
Increasing the value of the max-ip ipv4 wireless parameter may increase the look-up time due to an increase
in the creation and deletion of IPv4 users on the controller. In a deployment where there is Captive Portal and
802.1X authentication implemented, increasing the number of IPv4 users can further deplete performance.
Example
The following command configures an AAA profile that assigns the “employee” role to clients after they are
authenticated using the 802.1X server group “radiusnet”.
aaa profile corpnet
dot1x-default-role employee
dot1x-server-group radiusnet
Command History
Version Description
ArubaOS 3.0 Command introduced.
ArubaOS 3.4.1 License requirements changed in ArubaOS 3.4.1, so the sip-
authentication-role parameter required the Policy Enforcement Firewall
license instead of the Voice Services Module license required in earlier
versions.
ArubaOS 6.1 The radius-interim-accounting, devtype-classification and enforce-
dhcp parameters were introduced.
ArubaOS 6.3 The user-idle-timeout parameter was introduced.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa profile | 100