Concept Guide

show aaa derivation-rules
show aaa derivation-rules [server-group <group-name>|user <name>]
Syntax
Parameter Description
<group-name>
Name of a server group
<name>
Name of a user rule group
Description
Show derivation rules based on user information or configured for server groups.
Example
The output of the following command shows that the server group group1 has the internal database
configured as its authentication server, and that there is a single rule assigned to that group. You can omit the
<group-name> parameter to show a table of all your server groups.
(host) #show aaa derivation-rules server-group group1
Server Group
Name Inservice trim-FQDN match-FQDN
---- --------- --------- ----------
Internal Yes No
Server Rule Table
-----------------
Priority Attribute Operation Operand Action Value Total Hits New Hits
-------- --------- --------- ------- ------ ----- ---------- --------
1 Filter-Id equals nsFilter set vlan 111 24 0
Rule Entries: 1
The following data columns appear in the output of this command:
Parameter Description
Name
Name of the authentication server assigned to this server group
Inservice
Specifies if the server is in service or out-of-service.
trim-FDQN
If enabled, user information in an authentication request is edited before the
request is sent to the server.
match-FDQN
If enabled, the authentication server is associated with a specified domain.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide show aaa derivation-rules | 840