Wired Intelligent Edge

 View Only
  • 1.  translation of aaa commands Aruba to CX

    Posted Oct 17, 2023 03:12 AM

    Hi all,

    recently we received our first CX switch, so I started configuring so it works the same as our other Aruba switches.

    Most things I found already, but below are a few commands I can't seem to find how to translate those. Can anyone help me in translating these or point me to a "google translate" website :-) (I googled, but didn't find any yet).

    aaa accounting commands stop-only tacacs
    aaa accounting exec start-stop tacacs
    aaa accounting network start-stop radius
    aaa accounting system stop-only tacacs
    
    aaa authorization commands auto
    aaa authentication login privilege-mode
    
    aaa port-access authenticator 1-8 max-requests 1
    aaa port-access authenticator 1-8 client-limit 3
    
    aaa port-access mac-based 1-8 unauth-vid 44
    aaa port-access mac-based 1-8 addr-limit 3
    aaa port-access mac-based 1-8 logoff-period 28800

    Thanks in advance!



  • 2.  RE: translation of aaa commands Aruba to CX

    Posted Oct 17, 2023 08:45 AM

    I would check the Wired Policy Solution Guide and the CLI Reference Guide for AOS-CX, AOS-Switch and IOS.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: translation of aaa commands Aruba to CX

    Posted Oct 17, 2023 09:36 AM

    Hi Herman,

    thanks for your answer. I've found this guide before I posted this and could configure most things with that.
    However, I couldn't find the Aruba OS commands I copied in my first post.

    Any idea where I can find the CX equivalent for these?




  • 4.  RE: translation of aaa commands Aruba to CX

    Posted Oct 17, 2023 06:02 PM

    The following commands are the default setting in CX access switches

    aaa authorization commands auto
    aaa authentication login privilege-mode

    Then here are the corresponding commands for port-access authenticator

    aaa authentication port-access dot1x authenticator enable
    Interface 1/1/8
        aaa authentication port-access dot1x authenticator enable
        aaa authentication port-access client-limit 3   <<<< common to both auth methods

        aaa authentication port-access mac-auth enable
        aaa authentication port-access mac-auth cached-reauth-period 28800
        aaa authentication port-access reject-role <role-name>



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------