Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Authentication Servers | 279
Configuring a Role Derivation Rule for the Internal Database
When you add a user entry in the controller’s internal database, you can optionally specify a user role (see
“Internal Database” on page269). In order for the role specified in the internal database entry to be assigned to
the authenticated client, you must configure a server derivation rule as shown in the following sections:
In the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select Server Group to display the Server Group list.
3. Select the internal server group.
4. Under Server Rules, click New to add a server derivation rule.
a. For Condition, enter Role.
b. Select value-of from the drop-down menu.
c. Select Set Role from the drop-down menu.
d. Click Add.
5. Click Apply.
In the CLI
aaa server-group internal
set role condition Role value-of
Assigning Server Groups
You can create server groups for the following purposes:
 user authentication
 management authentication
 accounting
You can configure all types of servers for user and management authentication (see Table 53). Accounting is only
supported with RADIUS and TACACS+ servers when RADIUS or TACACS+ is used for authentication.
User Authentication
For information about assigning a server group for user authentication, see the configuration chapter for the
authentication method.
Table 53 Server Types and Purposes
RADIUS TACACS+ LDAP Internal Database
User authentication Yes Yes Yes Yes
Management authentication Yes Yes Yes Yes
Accounting Yes Yes No No