Wired Intelligent Edge

I need to create several local users in a sw 2930F, by default the swicth only allows me the manager and the operator. How can I create multiple users?

--Moving this thread to the appropriate forum--

You can use "role based access control", which let's you create up to 64 different admin roles. Check chapter 15 of the "Access Security guide" (attached).

Attachment(s)

AOS-SW-Access Security Guide-v16.05.pdf   6.45 MB 1 version

Good afternoon,

Thank you very much for your answer, it is true that for this to work it is necessary to have clearpass?

I hope to receive your comments.

Greetings and blessings.

Greetings!

ClearPass is not required to create a local user on the switch.  You can use a command similar to the following to create a local switch user assigned a predefined role (roles are listed in the user guide linked above):

ArubaSwitch(config)# aaa authentication local-user localadmin group Level-15 password plaintext 
New password for localadmin: ********
Please retype new password for localadmin: ********

Thank you very much, today I did the tests on the switch and if it worked.

Hi, how remove local user?

To remove a local user account created using the 'aaa authentication local-user' command, simply use the 'no' form of the command:

switch(config)# no aaa authentication local-user localuser

To remove password protection for the built-in manager or operator users, use one of the following:

switch(config)# no password operator

switch(config)# no password manager

THX

the users created by 'aaa authentication local-user username ....' command, when I want to use this user to login by https,  it is not allowed. when no operator password is set, I fall in the operator role.

when operator password is set, the webgui login with local user is denied.

This is a known issue with the AAA local user feature, and we are poking the developers with pointy sticks——err, working with the developers to get them to fix it. No ETA on a fix, however.

Any update on the Web UI? 

oi j'ai creer l'utilisateur, par contre j'arrive pas a acceder avec cet utilisateur au switch via ssh