Question: How to change the role of a particular user for troubleshooting ?
Environment :This article applies to all the versions of Aruba OS and all the controller models.
Below is the command used to change the role of a particular user for troubleshooting purposes(Aruba) #aaa user add <IP address of the user> role <New role for the user>(Aruba) #show user Users----- IP MAC Name Role Age(d:h:m) Auth VPN link AP name Roaming Essid/Bssid/Phy Profile Forward mode Type Host Name---------- ------------ ------ ---- ---------- ---- -------- ------- ------- --------------- ------- ------------ ---- ---------1.1.1.1 10:6e:23:fc:10:5d logon 00:00:01 vlan 0 Wired tunnel User Entries: 1/1 Curr/Cum Alloc:2/2 Free:0/0 Dyn:2 AllocErr:0 FreeErr:0 (Aruba) #aaa user add 1.1.1.1 role authenticated (Aruba) #show user Users----- IP MAC Name Role Age(d:h:m) Auth VPN link AP name Roaming Essid/Bssid/Phy Profile Forward mode Type Host Name---------- ------------ ------ ---- ---------- ---- -------- ------- ------- --------------- ------- ------------ ---- ---------1.1.1.1 10:6e:23:fc:10:5d authenticated 00:00:01 vlan 0 Wired tunnel User Entries: 1/1 Curr/Cum Alloc:2/2 Free:0/0 Dyn:2 AllocErr:0 FreeErr:0Note: This command should only be used for troubleshooting issues with a specific client or device. This command allows you to manually assign a client or device to a role. For example, you can create a role “debugging” that includes a policy to mirror session packets to a specified destination for further examination, then use this command to assign the “debugging” role to a specific client. Use the aaa user delete command to remove the client or device from the role. Note that issuing this command does not affect ongoing sessions that the client may already have.
© Copyright 2024 Hewlett Packard Enterprise Development LPAll Rights Reserved.