Controller Based WLANs

Question: How to change the role of a particular user for troubleshooting ?

Environment :This article applies to all the versions of Aruba OS and all the controller models.

Below is the command used to change the role of a particular user for troubleshooting purposes

(Aruba) #aaa user add  <IP address of the user>  role  <New role for the user>


(Aruba) #show user
 
Users
-----
    IP             MAC                     Name     Role      Age(d:h:m)  Auth  VPN link     AP name      Roaming  Essid/Bssid/Phy     Profile  Forward mode  Type  Host Name
----------       ------------                 ------       ----       ----------        ----     --------        -------           -------      ---------------             -------   ------------             ----     ---------
1.1.1.1       10:6e:23:fc:10:5d                   logon     00:00:01                                    vlan 0        Wired                                         tunnel
 
User Entries: 1/1
 Curr/Cum Alloc:2/2 Free:0/0 Dyn:2 AllocErr:0 FreeErr:0
 
(Aruba) #aaa user add 1.1.1.1 role authenticated
 
(Aruba) #show user
 
Users
-----
    IP           MAC                Name       Role            Age(d:h:m)     Auth  VPN link  AP name     Roaming  Essid/Bssid/Phy      Profile         Forward mode  Type  Host Name
----------     ------------            ------         ----              ----------          ----    --------       -------         -------       ---------------            -------            ------------         ----  ---------
1.1.1.1     10:6e:23:fc:10:5d            authenticated  00:00:01                                  vlan 0       Wired                                                       tunnel
 
User Entries: 1/1
 Curr/Cum Alloc:2/2 Free:0/0 Dyn:2 AllocErr:0 FreeErr:0

Note: This command should only be used for troubleshooting issues with a specific client or device. This command allows you to manually assign a client or device to a role. For example, you can create a role “debugging” that includes a policy to mirror session packets to a specified destination for further examination, then use this command to assign the “debugging” role to a specific client. Use the aaa user delete command to remove the client or device from the role. Note that issuing this command does not affect ongoing sessions that the client may already have.