Users Guide

Table Of Contents
Dell PowerConnect ArubaOS 5.0 | User Guide Authentication Servers | 245
In the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select Server Group to display the Server Group list.
3. Enter the name of the new server group and click Add.
4. Select the name to configure the server group.
5. Under Servers, click New to add a server to the group.
a. Select a server from the drop-down menu and click Add.
b. Repeat the above step to add other servers to the group.
6. Under Server Rules, click New to add server derivation rules for assigning a user role or VLAN.
a. Enter the attribute.
b. Select the operation from the drop-down menu.
c. Enter the operand.
d. Select Set VLAN or Set Role from the drop-down menu.
e. Enter the value (either user role or VLAN) to be assigned.
f. Click Add.
g. Repeat the above steps to add other rules for the server group.
7. Click Apply.
In the CLI
aaa server-group <name>
auth-server <name>
set {role|vlan} condition <condition> set-value {<role>|<vlan>}
[position number]
Configuring a Role Derivation Rule for the Internal Database
When you add a user entry in the controller’s internal database, you can optionally specify a user role (see
“Internal Database” on page236). In order for the role specified in the internal database entry to be assigned to
the authenticated client, you must configure a server derivation rule as shown in the following sections:
In the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select Server Group to display the Server Group list.
3. Select the internal server group.
4. Under Server Rules, click New to add a server derivation rule.
a. For Condition, enter Role.
b. Select value-of from the drop-down menu.
Value The user role or the VLAN applied to the client when the rule is matched.
position Position of the condition rule. Rules are applied based on the first match principle. 1 is the top.
Default: bottom
Table 49 Server Rule Configuration Parameters (Continued)
Parameter Description