Aruba Networks AirOS v2.3, User Manual

Page: 89 / 254

Configuring AAA Servers 79
Chapter 6
The parameters are:
Rule type
This can be one of Role Assignment or Vlan Assignment. With Role
assignment, a user can be assigned a specific role based on the RADIUS
attributes returned. In case of VLAN assignment, the user can be placed in a
specific VLAN based on the RADIUS attributes returned.
Attribute
This is the attribute that is returned by the RADIUS server based on whose
value the user is assigned a role or a VLAN
Condition
The condition specifies the match method using which the string in Value is
matched with the attribute value returned by the AAA server.
z
contains – the rule is applied if and only if the attribute value contains the
string in parameter
Value.
z
Starts-with – the rule is applied if and only if the attribute value returned
starts with the string in parameter
Value
z
Ends-with – the rule is applied if and only if the attribute value returned
ends with the string in parameter
Value
z
Equals - rule is applied if and only if the attribute value returned equals
with the string in parameter
Value
z
Not-equals - rule is applied if and only if the attribute value returned is not
equal to the string in parameter
Value
z
Value-of – This is a special condition. What this implies is that the role or
VLAN is set to the value of the attribute returned. For this to be success-
ful, the role and the VLAN ID returned as the value of the attribute
selected must be already configured on the switch when the rule gets
applied.