Manualshelf

Users Guide

ManualsBrandsDell ManualsAccess PlatformsW-Series Controller AOS
821822823824825826827828829830
Table Of Contents
3. Configure the username, role and client certificate.
In the WebUI
1. Navigate to the Configuration > Management > General page.
2. Under SSH (Secure Shell) Authentication Method, select Client Public Key. You can optionally select
Username/Password to use both username/password and public key authentication for SSH access.
3. Click Apply.
4. To configure the user, navigate to the Configuration > Management > Administration page.
a. Under Management Users, click Add.
b. Select Certificate Management.
c. Select SSH Public Key.
ArubaOS recommends that the username and role for SSH be the same as for the WebUI Certificate. You can
optionally use the checkbox to copy the username and role from the Web Certificate section to the SSH Public Key
section.
d. Select the management role assigned to the user upon validation of the client certificate.
e. Select the client certificate.
f. Click Apply.
In the CLI
ssh mgmt-auth public-key [username/password]
mgmt-user ssh-pubkey client-cert <certificate> <username> <role>
Disabling Console Access for Controllers
A new command is introduced to disable the console-login. The purpose of this command is to introduce an
ability to lock down all console ports, for example, micro USB, mini USB on the controller to enable high level
security. This also ensures that no SSH access is allowed at the remote branch office. The SSH is only allowed
from the headquarters via the IPSEC tunnel.
With this command, only console access over serial port, USB, and mini USB will be blocked. SSH/ telnet are still
allowed.
In the CLI
To disable the console:
(host) (config) #mgmt-user console-block
PLEASE SAVE THE CONFIGURATION. CONSOLE WILL BE BLOCKED ONCE USER LOGS OUT FROM SERIAL-
CONSOLE.
To re-enable the console:
(host) (config) #no mgmt-user console-block
WebUI Session Timer
The controller supports two types of WebUI session timer. They are:
l Idle Session Timeout: This setting specifies the time of inactivity after which the WebUI session times out
and requires login for continued access.
Dell Networking W-Series ArubaOS 6.5.x | User Guide Management Access | 826