Reference Guide

Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide aaa server-group | 74
Syntax
Parameter Description Default
<group> Name that identifies the server group. The name must be 32 characters
or less.
—
allow-fail-through When this option is configured, an authentication failure with the first
server in the group causes the controller to attempt authentication
with the next server in the list. The controller attempts authentication
with each server in the ordered list until either there is a successful
authentication or the list of servers in the group is exhausted.
disabled
auth-server <name> Name of a configured authentication server. —
match-authstring This option associates the authentication server with a match rule that
the controller can compare with the user/client information in the
authentication request. With this option, the user/client information in
the authentication request can be in any of the following formats:
<domain>\<user>
<user>@<domain>
host/<pc-name>.<domain>
An authentication request is sent to the server only if there is a match
between the specified match rule and the user/client information.You
can configure multiple match rules for an authentication server.
—
contains contains: The rule matches if the user/client information contains the
specified string.
equals The rule matches if the user/client information exactly matches the
specified string.
starts-with The rule matches if the user/client information starts with the specified
string.
match-fqdn <string> This option associates the authentication server with a specified
domain. An authentication request is sent to the server only if there is
an exact match between the specified domain and the <domain>
portion of the user information sent in the authentication request. With
this option, the user information must be in one of the following
formats:
<domain>\<user>
<user>@<domain>
—
position <number> Position of the server in the server list. 1 is the top. (last)
trim-fqdn This option causes the user information in an authentication request to
be edited before the request is sent to the server. Specifically, this
option:
removes the <domain>\ portion for user information in the
<domain>\<user> format
removes the @<domain> portion for user information in the
<user>@<domain> format
—
clone Name of an existing server group from which parameter values are
copied.
—
no Negates any configured parameter. —
set role|vlan Assigns the client a user role, VLAN ID or VLAN name based on
attributes returned for the client by the authentication server. Rules are
ordered: the first rule that matches the configured condition is applied.
VLAN IDs and VLAN names cannot be listed together.
—
condition Attribute returned by the authentication server. —
contains The rule is applied if and only if the attribute value contains the
specified string.
—