Wired Intelligent Edge

Hi All,

Good Day....


I am looking for a option which can restrict Aruba console access from unwanted user ,Now console access is working on local admin credential ,
But is it possible to set a user and password for console access only ?Or only console password ?

Any help much appreciated 

Thanks

You can use radius or tacacs authentication to control console authentication.  


6300(config)# aaa authentication login
console Console authentication list
default Default authentication list
https-server Https-server authentication list
ssh SSH authentication list
telnet TELNET authentication list
6300(config)# aaa authentication login console
group Server-group
local Local authentication
6300(config)# aaa authentication login console group
WORD Group Name or family name (Valid family names: tacacs, radius and
local)

Further reference to this is present in Security Guide
https://www.arubanetworks.com/techdocs/AOS-CX/10.09/HTML/security_6200-6300-6400/Content/fir-int39.htm

------------------------------
Shobana
Aruba
------------------------------

Hi Shobona,

Thanks for your quick response and guidance ,However we are looking for option to restrict console locally
About Console password, if it's possible to have a dedicated one ?  

Like for cisco  we do the following 
line console 0
password <abc123>
login

any advice please if same can we do for Aruba switch  2930F or Diff model ?

Thanks


Original Message:
Sent: Jul 26, 2022 03:06 AM
From: Shobana Nandakumar
Subject: Aruba Switch console password

You can use radius or tacacs authentication to control console authentication.  


6300(config)# aaa authentication login
console Console authentication list
default Default authentication list
https-server Https-server authentication list
ssh SSH authentication list
telnet TELNET authentication list
6300(config)# aaa authentication login console
group Server-group
local Local authentication
6300(config)# aaa authentication login console group
WORD Group Name or family name (Valid family names: tacacs, radius and
local)

Further reference to this is present in Security Guide
https://www.arubanetworks.com/techdocs/AOS-CX/10.09/HTML/security_6200-6300-6400/Content/fir-int39.htm

------------------------------
Shobana
Aruba
------------------------------

We do not have such capability in AOS switches currently. We can control using only RADIUS/TACACS.

------------------------------
Shobana
Aruba
------------------------------

Original Message:
Sent: Jul 26, 2022 05:30 AM
From: Debabrata Majhi
Subject: Aruba Switch console password

Hi Shobona,

Thanks for your quick response and guidance ,However we are looking for option to restrict console locally
About Console password, if it's possible to have a dedicated one ?  

Like for cisco  we do the following 
line console 0
password <abc123>
login

any advice please if same can we do for Aruba switch  2930F or Diff model ?

Thanks



Original Message:
Sent: Jul 26, 2022 03:06 AM
From: Shobana Nandakumar
Subject: Aruba Switch console password

You can use radius or tacacs authentication to control console authentication.  


6300(config)# aaa authentication login
console Console authentication list
default Default authentication list
https-server Https-server authentication list
ssh SSH authentication list
telnet TELNET authentication list
6300(config)# aaa authentication login console
group Server-group
local Local authentication
6300(config)# aaa authentication login console group
WORD Group Name or family name (Valid family names: tacacs, radius and
local)

Further reference to this is present in Security Guide
https://www.arubanetworks.com/techdocs/AOS-CX/10.09/HTML/security_6200-6300-6400/Content/fir-int39.htm

------------------------------
Shobana
Aruba

Hi Shobana,

Thanks for your answer ,I appreciate your such a quick help to resolve my query. Is it any plan to do in near future for console password ?

Regards

Original Message:
Sent: Jul 26, 2022 06:18 AM
From: Shobana Nandakumar
Subject: Aruba Switch console password

We do not have such capability in AOS switches currently. We can control using only RADIUS/TACACS.

------------------------------
Shobana
Aruba
------------------------------


Original Message:
Sent: Jul 26, 2022 05:30 AM
From: Debabrata Majhi
Subject: Aruba Switch console password

Hi Shobona,

Thanks for your quick response and guidance ,However we are looking for option to restrict console locally
About Console password, if it's possible to have a dedicated one ?  

Like for cisco  we do the following 
line console 0
password <abc123>
login

any advice please if same can we do for Aruba switch  2930F or Diff model ?

Thanks



Original Message:
Sent: Jul 26, 2022 03:06 AM
From: Shobana Nandakumar
Subject: Aruba Switch console password

You can use radius or tacacs authentication to control console authentication.  


6300(config)# aaa authentication login
console Console authentication list
default Default authentication list
https-server Https-server authentication list
ssh SSH authentication list
telnet TELNET authentication list
6300(config)# aaa authentication login console
group Server-group
local Local authentication
6300(config)# aaa authentication login console group
WORD Group Name or family name (Valid family names: tacacs, radius and
local)

Further reference to this is present in Security Guide
https://www.arubanetworks.com/techdocs/AOS-CX/10.09/HTML/security_6200-6300-6400/Content/fir-int39.htm

------------------------------
Shobana
Aruba

Currently we do not have any roadmap on the console password

------------------------------
Shobana
Aruba
------------------------------

Original Message:
Sent: Jul 26, 2022 07:43 AM
From: Debabrata Majhi
Subject: Aruba Switch console password

Hi Shobana,

Thanks for your answer ,I appreciate your such a quick help to resolve my query. Is it any plan to do in near future for console password ?

Regards


Original Message:
Sent: Jul 26, 2022 06:18 AM
From: Shobana Nandakumar
Subject: Aruba Switch console password

We do not have such capability in AOS switches currently. We can control using only RADIUS/TACACS.

------------------------------
Shobana
Aruba


Original Message:
Sent: Jul 26, 2022 05:30 AM
From: Debabrata Majhi
Subject: Aruba Switch console password

Hi Shobona,

Thanks for your quick response and guidance ,However we are looking for option to restrict console locally
About Console password, if it's possible to have a dedicated one ?  

Like for cisco  we do the following 
line console 0
password <abc123>
login

any advice please if same can we do for Aruba switch  2930F or Diff model ?

Thanks



Original Message:
Sent: Jul 26, 2022 03:06 AM
From: Shobana Nandakumar
Subject: Aruba Switch console password

You can use radius or tacacs authentication to control console authentication.  


6300(config)# aaa authentication login
console Console authentication list
default Default authentication list
https-server Https-server authentication list
ssh SSH authentication list
telnet TELNET authentication list
6300(config)# aaa authentication login console
group Server-group
local Local authentication
6300(config)# aaa authentication login console group
WORD Group Name or family name (Valid family names: tacacs, radius and
local)

Further reference to this is present in Security Guide
https://www.arubanetworks.com/techdocs/AOS-CX/10.09/HTML/security_6200-6300-6400/Content/fir-int39.htm

------------------------------
Shobana
Aruba