Users Guide

258 | Authentication Servers Dell Networking W-Series ArubaOS 6.4.x| User Guide
Code Description
0 Authentication OK.
1 Authentication failed :user/password combination not correct.
2 Authentication request timed out :No response from server.
3 Internal authentication error.
4 Bad Response from RADIUS server :verify shared secret is correct.
5 No RADIUS authentication server is configured.
6 Challenge from server. (This does not necessarily indicate an error condition.)
Table 45: RADIUS Authentication Response Codes
RADIUS Server Fully Qualified Domain Names
If you define a RADIUS server using the FQDN of the server rather than its IP address, the controller
periodically generates a DNS request and caches the IP address returned in the DNS response. To view the IP
address that currently correlates to each RADIUS server FQDN, access the command-line interface in config
mode and issue the following command:
show aaa fqdn-server-names
DNS Query Intervals
If you define a RADIUS server using the FQDN of the server rather than its IP address, the controller
periodically generates a DNS request and caches the IP address returned in the DNS response. DNS requests
are sent every 15 minutes by default.
You can use either the WebUI or the CLI to configure how often the controller will generate a DNS request to
cache the IP address for a RADIUS server identified via its fully qualified domain name (FQDN).
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Advanced page.
2. In the DNS Query Interval (min) field, enter a new DNS query interval, from 1-1440 minutes, inclusive.
3. Click Apply.
Using the CLI
(host)(config) #aaa dns-query-interval <minutes>
Configuring Username and Password for CPPM Authentication
The controller authenticating to CPPM is enhanced to use configurable username and password instead of
support password. The support password is vulnerable to attacks as the server certificate presented by CPPM
server is not validated.
In the WebUI:
1. Navigate to Configuration > Security> Authentication>Servers.
2. Under Radius Server, select the server name.