CLI Reference Guide

aaa authentication mgmt
aaa authentication mgmt
default-role {guest-provisioning|location-api-mgmt|network-operations|no-access|read-
only|root}
enable
no ...
server-group <group>
Description
This command configures authentication for administrative users.
Syntax
Parameter Description Range Default
default-role
Select a predefined management role to assign
to authenticated administrative users:
— default
default
Default superuser role
— —
guest-provisioning
Guest provisioning role
— —
location-api-mgmt
Location API role
— —
network-operations
Network operations role
— —
no-access
No commands are accessible for this role
— —
read-only
Read-only role
— —
enable
Enables authentication for administrative users. enabled|
disabled
disabled
mchapv2
Enable MSCHAPv2 enabled|
disabled
disabled
no
Negates any configured parameter. — —
server-group <group>
Name of the group of servers used to
authenticate administrative users. See "aaa
server-group" on page 82.
— default
Usage Guidelines
If you enable authentication with this command, users configured with the mgmt-user command must be
authenticated using the specified server-group.
You can configure the management authentication profile in the base operating system or with the PEFNG license
installed.
Example
The following example configures a management authentication profile that authenticates users against the
controller’s internal database. Users who are successfully authenticated are assigned the read-only role.
aaa authentication mgmt
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide aaa authentication mgmt | 27