Reference Guide

396 | mgmt-user Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
Syntax
Usage Guidelines
You can configure client certificate authentication of WebUI or SSH management users (by default, only
username/password is used). To configure certificate authentication for the WebUI or SSH, use the web-server
mgmt-auth certificate or ssh mgmt-auth public-key commands, respectively.
Parameter Description Default
<username> Name of the user.
You can create a maximum of 10 management users.
NOTE: If you configure a root management user, you can use special
characters except for double-byte characters.
—
<role> Role assigned to the user. Predefined roles include:
 guest-provisioning: Allows the user to create guest accounts on a
special WebUI page.
 location-api-mgmt: Permits access to location API information. You
can log into the CLI; however, you cannot use any CLI commands.
 network-operations: Permits access to Monitoring, Reports, and
Events pages in the WebUI. You can log into the CLI; however, you can
only use a subset of CLI commands to monitor the controller.
 read-only: Permits access to CLI show commands or WebUI
monitoring pages only.
 root: Permits access to all management functions on the controller.
—
<password> NOTE: You are prompted for the <password> for this user after you type in
<role> and press Enter.
The password must have a minimum of six characters.
You can use special characters in the management user password. The
restrictions are as follows:
 You cannot use double-byte characters
 You cannot use the question mark (?)
 You cannot use white space <space >
—
localauth-disable Disables authentication of management users based on the results
returned by the authentication server.
To cancel this setting, use the no form of the command:
no mgmt-user localauth-disable
To verify if authentication of local management user accounts is enabled or
disabled, use the following command:
show mgmt-user local-authentication-mode
Enabled
ssh-pubkey Configures certificate authentication of administrative users using the CLI
through SSH.
—
client-cert Name of the X.509 client certificate for authenticating administrative users
using SSH.
—
<username> Name of the user. —
<role> Role assigned to the authenticated user. —
webui-cacert The client certificate for authenticating administrative users using the
WebUI.
—
<certificate_name> The CA certificate. If configured, certificate authentication and
authorization are automatically completed using an authentication server.
—
serial Serial number of the client certificate. —
<username> Name of the user. —
<role> Role assigned to the authenticated user. —