User's Manual

228 | Authentication Servers Dell Networking W-Series ArubaOS 6.4.x| User Guide
Parameter Description
l If you do not associate the Source Interface with a configured server (leave the field
blank), the IP address of the global Source Interface is used.
Use MD5 Use MD5 hash of cleartext password.
Default: Disabled
Mode Enables or disables the server.
Default: Enabled
RADIUS Server VSAs
Vendor-Specific Attributes (VSAs) are a method for communicating vendor-specific information between
Network Access Servers and RADIUS servers, allowing vendors to support their own extended attributes. You
can use DellVSAs to derive the user role and VLAN for RADIUS-authenticated clients; however the VSAs must be
present on your RADIUS server. This requires that you update the RADIUS dictionary file with the vendor name
(Aruba) and/or the vendor-specific code (14823), the vendor-assigned attribute number, and the attribute
format (such as string or integer) for each VSA. For more information on VSA-derived user roles, see
Configuring a VSA-Derived Role on page 376
The following table describes Dell-specific RADIUS VSAs. For the current and complete list of all RADIUS VSAs
available in the version of ArubaOS currently running on your controller, access the command-line interface
and issue the command show aaa radius attributes.
VSA
Type Value
Description
Aruba-User-Role String 1 This VSA returns the role, to be assigned to the user post authen-
tication. The user will be granted access based on the role attrib-
utes defined in the role.
Aruba-User-Vlan Integer 2 This VSA returns the VLAN to be used by the client. Range: 1–
4094.
Aruba-Priv-
Admin-User
Integer 2 If this VSA is set in the RADIUS accept message, the user can
bypass the enable prompt.
Aruba-Admin-
Role
String 4 This VSA returns the management role to be assigned to the user
post management authentication. This role can be seen using the
command show mgmt-role in the command-line interface.
Aruba-Essid-
Name
String 5 String that identifies the name of the ESSID.
Aruba-Location-Id String 6 String that identifies the name of the AP location.
Aruba-Port-Id String 7 String that identifies the Port ID.
Aruba-Template-
User
String 8 String that identifies the name of a Dell user template.
Table 37: RADIUS VSAs