Concept Guide

aaa ipv6 user add
aaa ipv6 user add <ipv6addr>
authentication-method {dot1x|stateful-dot1x}
mac <macaddr>
name <username>
profile <aaa-profile>
role <role>
Description
This command manually assigns a user role or other values to a specified IPv6 client.
Syntax
Parameter Description
<ipv6addr>
IPv6 address of the user to be added.
authentication-method
Authentication method for the client.
dot1x
802.1X authentication.
stateful-dot1x
Stateful 802.1X authentication.
mac <macaddr>
MAC address of the client.
name <username>
Name of the client.
profile <aaa-profile>
AAA profile for the client.
role <role>
User role for the client.
Usage Guidelines
This command should only be used for troubleshooting issues with a specific IPv6 client. This command allows
you to manually assign a client to a role. For example, you can create a role “debugging” that includes a policy
to mirror session packets to a specified destination for further examination, then use this command to assign
the “debugging” role to a specific client. Use the aaa ipv6 user delete command to remove the client or
device from the role.
Note that issuing this command does not affect ongoing sessions that the client may already have. For
example, if a client is in the “employee” role when you assign them to the “debugging” role, the client continues
any sessions allowed with the “employee” role. Use the aaa ipv6 user clear-sessions command to clear
ongoing sessions.
Example
The following commands create a role that logs HTTPS traffic, then assign the role to a specific IPv6 client:
ip access-list session ipv6-log-https
any any svc-https permit log
user-role ipv6-web-debug
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa ipv6 user add | 87