Dell PowerConnect W-7200 Series, Reference Manual

Page: 65 / 1538

aaa ipv6 user add
aaa ipv6 user add <ipv6addr>
authentication-method {dot1x|stateful-dot1x}
mac <macaddr>
name <username>
profile <aaa-profile>
role <role>
Description
This command manually assigns a user role or other values to a specified IPv6 client.
Syntax
Parameter Description
<ipv6addr>
IPv6 address of the user to be added.
authentication-method
Authentication method for the client.
dot1x
802.1X authentication.
stateful-dot1x Stateful 802.1X authentication.
mac <macaddr>
MAC address of the client.
name <username>
Name of the client.
profile <aaa-profile>
AAA profile for the client.
role <role> User role for the client.
Usage Guidelines
This command should only be used for troubleshooting issues with a specific IPv6 client. This command allows you
to manually assign a client to a role. For example, you can create a role “debugging” that includes a policy to mirror
session packets to a specified destination for further examination, then use this command to assign the “debugging”
role to a specific client. Use the
aaa ipv6 user delete command to remove the client or device from the role.
Note that issuing this command does not affect ongoing sessions that the client may already have. For example, if a
client is in the “employee” role when you assign them to the “debugging” role, the client continues any sessions
allowed with the “employee” role. Use the
aaa ipv6 user clear-sessions command to clear ongoing sessions.
Example
The following commands create a role that logs HTTPS traffic, then assign the role to a specific IPv6 client:
ip access-list session ipv6-log-https
any any svc-https permit log
user-role ipv6-web-debug
session-acl ipv6-log-https
In enable mode:
aaa ipv6 user add
2002:d81f:f9f0:1000:e409:9331:1d27:ef44
role ipv6-web-debug
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide aaa ipv6 user add | 65