CLI Reference Guide

aaa authentication stateful-ntlm
aaa authentication stateful-ntlm <profile-name>
clone
default-role <role>
enable
server-group <server-group>
timeout <timeout>
Description
This command configures stateful NT LAN Manager (NTLM) authentication.
Syntax
Parameter Description Range Default
clone
Create a copy of an existing stateful NTLM profile — —
default-role
Select an existing role to assign to authenticated users. — guest
no
Negates any configured parameter. — —
server-group <server-
group>
Name of a server group. — default
timeout <timeout>
Amount of time, in seconds, before the request times
out.
1-20
seconds
10 seconds
Usage Guidelines
NT LAN Manager (NTLM) is a suite of Microsoft authentication and session security protocols. You can use a
stateful NTLM authentication profile to configure a controller to monitor the NTLM authentication messages
between clients and an authentication server. The controller can then use the information in the Server Message
Block (SMB) headers to determine the client's username and IP address, the server IP address and the client's current
authentication status. If the client successfully authenticates via an NTLM authentication server, the controller can
recognize that the client has been authenticated and assign that client a specified user role. When the user logs off
or shuts down the client machine, the user will remain in the authenticated role until the user’s authentication is
aged out.
The Stateful NTLM Authentication profile requires that you specify a server group which includes the servers
performing NTLM authentication, and a default role to be assigned to authenticated users. For details on defining a
windows server used for NTLM authentication, see aaa authentication-server windows.
Example
The following example configures a stateful NTLM authentication profile that authenticates clients via the server
group “Windows1.” Users who are successfully authenticated are assigned the “guest2” role.
aaa authentication stateful-ntlm
default-role guest2
server-group Windows1
Command History
Command introduced in ArubaOS 3.4.1
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide aaa authentication stateful-ntlm | 41