Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

bypass enable mode password for user group

This thread has been viewed 0 times

  • 1.  bypass enable mode password for user group

    Posted Apr 28, 2014 06:45 AM

    hi

     

    can we bypass enable mode authentication on controller for particular set of users or a single user..

     

    -Harshad



  • 2.  RE: bypass enable mode password for user group

    EMPLOYEE
    Posted Apr 28, 2014 07:33 AM

    Bypass enable is a global command.



  • 3.  RE: bypass enable mode password for user group
    Best Answer

    Posted Apr 28, 2014 08:00 AM

    If you use an external RADIUS server for the users, you can return the Aruba VSA:  Aruba-Priv-Admin-User.   Just return any integer; I usually just use 1.  This will put the user in enable mode by default without having to bypass enable globally.



  • 4.  RE: bypass enable mode password for user group

    Posted May 05, 2014 08:37 AM

     

    for this attribute to work do I need to put any server derived rule..

     

    also can we do it for user created in controller internal database??

     

     



  • 5.  RE: bypass enable mode password for user group

    Posted May 05, 2014 09:04 AM

    No, you should not have to define it in the server derived rules.

    No, the VSA needs to be returned from RADIUS; there is no equivalent option for an internal user, VSA or otherwise.