Reference Guide

31 | aaa authentication stateful-ntlm Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide
aaa authentication stateful-ntlm
aaa authentication stateful-ntlm
default-role <role>
enable
server-group <server-group>
timeout <timeout>
Description
This command configures stateful NT LAN Manager (NTLM) authentication.
Syntax
Usage Guidelines
NT LAN Manager (NTLM) is a suite of Microsoft authentication and session security protocols. You can use a
stateful NTLM authentication profile to configure an Dell controller to monitor the NTLM authentication
messages between clients and an authentication server. The controller can then use the information in the Server
Message Block (SMB) headers to determine the client's username and IP address, the server IP address and the
client's current authentication status. If the client successfully authenticates via an NTLM authentication server,
the controller can recognize that the client has been authentication and assign that client a specified user role.
When the user logs off or shuts down the client machine, the user will remain in the authenticated role until the
user’s authentication is aged out.
The Stateful NTLM Authentication profile requires that you specify a server group which includes the servers
performing NTLM authentication, and a default role to be assigned to authenticated users. For details on
defining a windows server used for NTLM authentication, see aaa authentication-server windows.
Example
The following example configures a stateful NTLM authentication profile that authenticates clients via the server
group “Windows1.” Users who are successfully authenticated are assigned the “guest2” role.
aaa authentication stateful-ntlm
default-role guest2
server-group Windows1
Command History
Command introduced in ArubaOS 3.4.1
Command Information
Parameter Description Range Default
default-role Select an existing role to assign to authenticated users. — guest
no Negates any configured parameter. — —
server-group
<server-group>
Name of a server group. — default
timeout <timeout> NTLM authentication request, timeout period, in seconds. 1-20 seconds 10 seconds
Platforms Licensing Command Mode
All platforms Base operating system Config mode on master controllers