Concept Guide

aaa user add
aaa user add <ipaddr> [<nusers>] [authentication-method {dot1x|mac|stateful-dot1x|vpn|
web}] [mac-addr <macaddr>] [name <username>] [profile <aaa_profile>] [role <role>]
Description
This command manually assigns a user role or other values to a specified client or device.
Syntax
Parameter Description
<ipaddr>
IP address of the user to be added.
<nusers>
Number of users to create starting with <ipaddr>.
authentication-method
Authentication method for the user.
dot1x
802.1X authentication.
mac-addr
MAC authentication.
stateful-dot1x
Stateful 802.1X authentication.
vpn
VPN authentication.
web
Captive portal authentication.
mac <macaddr>
MAC address of the user.
name <username>
Name for the user.
profile <aaa_profile>
AAA profile for the user.
role <role>
Role for the user.
Usage Guidelines
This command should only be used for troubleshooting issues with a specific client or device. This command
allows you to manually assign a client or device to a role. For example, you can create a role “debugging” that
includes a policy to mirror session packets to a specified destination for further examination, then use this
command to assign the “debugging” role to a specific client. Use the aaa user delete command to remove the
client or device from the role.
Note that issuing this command does not affect ongoing sessions that the client may already have. For
example, if a client is in the “employee” role when you assign them to the “debugging” role, the client continues
any sessions allowed with the “employee” role. Use the aaa user clear-sessions command to clear ongoing
sessions.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa user add | 117