Concept Guide

97| aaa profile Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Default
devtype-classification
The device identification feature can
automatically identify different client device
types and operating systems by parsing the
User-Agent strings in a client’s HTTP
packets. When the devtype-classification
parameter is enabled, the output of the
show user and show user-table
commands shows each client’s device type,
if that client device can be identified.
enabled
dot1x-default-role <role>
Configured role assigned to the client after
802.1X authentication. If derivation rules
are present, the role assigned to the client
through these rules take precedence over
the default role.
NOTE: This parameter requires the PEFNG
license.
guest
dot1x-server-group <group>
Name of the server group used for 802.1X
authentication. See aaa server-group on
page 107.
—
enforce-dhcp
When you enable this option, clients must
complete a DHCP exchange to obtain an IP
address. Best practices are to enable this
option, when you use the aaa derivation-
rules command to create a rule with the
DHCP-Option rule type. This parameter is
disabled by default.
disabled
download-role
Enables role download from ClearPass Policy
Manager (CPPM) if not defined.
disabled
initial-role <role>
Role for unauthenticated users. logon
l2-auth-fail-through
To select different authentication method if
one fails
disabled
mac-default-role <role>
Configured role assigned to the user when
the device is MAC authenticated. If
derivation rules are present, the role
assigned to the client through these rules
take precedence over the default role.
NOTE: This parameter requires the PEFNG
license.
guest
mac-server-group group
Name of the server group used for MAC
authentication. See aaa server-group on
page 107.
—
max-ip ipv4 wireless <max_ipv4_users>
Control the number of IPv4 addresses that
can be associated to single wireless user.
2