Wireless Access

Hi,

I'm new to Aruba.  I have a 650 controller.  Users have to login every 90 minutes.  How can I increase the timers?

Oh yeah...my web browsers will not allow me to access the GUI.  Can you provide the CLI commands?

(ottedwifi01) #show aaa timers

Global User idle timeout = 300 seconds
Auth Server dead time = 10 minutes
Logon user lifetime = 5 minutes
User Interim stats frequency = 600 seconds

(ottedwifi01) #

Thank you,

Adrian

If your output is correct, users have to login after 5 minutes of inactivity, not 90 minutes.  I am not sure if you have something else going on.

To change it to 90 minutes, you would change this parameter (in seconds):

(Aruba7005-US) (config) #configure t             
Enter Configuration commands, one per line. End with CNTL/Z

(Aruba7005-US) (config) #aaa timers idle-timeout ?
<1-15300>               User idle timeout value. Valid range is 30-15300 
                        seconds in multiples of 30 seconds or 1-255 minutes. 
                        Default is 300 seconds

Colin,

Thank you for your reply.  I"m using Version 6.3.1.6.  Will this config change be specific to the user to is it a global command?

Than you once again,

Adrian 

It will apply to all users.  The consequence is that users will also appear longer in the user table after they are really gone.  That means the timer is now, but if they shut down their laptop, they will appear in the user table for 5 minutes more.  If you increase that parameter for an hour, the user table will be artificially inflated by the users that appear in the user table for an hour more.  If your controller is always close to the user platform limits for that device, it could become an issue.  The Captive Portal Authentication Profile also has a user idle timeout parameter which would only apply to the SSID that it is tied to.  That might be an acceptable alternative...

Colin,

You stated... If your controller is always close to the user platform limits for that device, it could become an issue.  The Captive Portal Authentication Profile also has a user idle timeout parameter which would only apply to the SSID that it is tied to.  That might be an acceptable alternative...

How do I check if the controller is close the the user platform limit?

Hopefully that is the last question.

Thank you,

Adrian

What is your controller model?

Aruba Operating System Software.
ArubaOS (MODEL: Aruba650), Version 6.3.1.6

512 users:  https://community.arubanetworks.com/aruba/attachments/aruba/ProductDataSheets/26/1/aruba_mobility_650-651_datasheet.pdf