Controller Based WLANs

Support parameters for downloadable user-role in the Aruba controller
Q:


What are the supported parameter for downloadable user-role that can be pushed from the cppm to the controller?



A:

The downloadable user-roles are pushed from the CPPM server to the Aruba controllers after successful authentication.

The below parameters are only supported to be pushed from the cppm to the controller and rest all are not supported. 

Net service
Net destination
mac/eth/session ACL 
user-role

The other parameters in the cppm are intended for MAS and not for controllers.

If we try to push the unsupported parameters from the cppm server to the controller then we will the following error logs in the controller.

Apr 24 15:55:38  authmgr[3417]: <199802> <ERRS> |authmgr|  auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line 'qos-profile HIGH-Q', contains unsupported keyword 
Apr 24 15:55:38  authmgr[3417]: <199802> <ERRS> |authmgr|  auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Itraffic-class 7', contains unsupported keyword 
Apr 24 15:55:38  authmgr[3417]: <199802> <ERRS> |authmgr|  auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Idrop-precedence low', contains unsupported keyword 
Apr 24 15:55:38  authmgr[3417]: <199802> <ERRS> |authmgr|  auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Idscp 63', contains unsupported keyword 
Apr 24 15:55:38  authmgr[3417]: <199802> <ERRS> |authmgr|  auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Idot1p 7', contains unsupported keyword 
Apr 24 15:55:38  authmgr[3417]: <199802> <ERRS> |authmgr|  auth_cppm.c, auth_cppm_transform_writebuf:1492: Dldb Role aruba-3106-9: Rejected line '^Ivlan 100', contains unsupported keyword 'vlan'

Version history
Revision #:
2 of 2
Last update:
‎07-29-2015 04:02 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.