309| Roles and Policies DellPowerConnect W- Series ArubaOS 6.2 | User Guide
the controller’slog files:
logging level debugging network process dhcpd
Now, connect the device you want to identify to the network, and issue the CLI command show log network.
The samplebelow i s an exampleof t heo utput that may be generated by this command.
Be aware that each device type may not have a unique DHCP fingerprint signature. For example,devices from
differentmanufacturers may use vendor class identifiers that begin with si milarst rings.I f you create a DHCP-
Option rulethat uses the start s-with condition instead of the equals condition, the rule may assign a role or VLAN
to more than one device type.
Configuring a Default R ole for Authen tication Metho d
For each authentication method, you can configure a default role for clients who are successfullyauthenticated using
that method. To configure a default rolefor an authenticati on method:
In the WebUI
1. Navigate to the Configuration > Security > A uthentication page.
2. To configure the defaultuser role for MAC or 802.1x authentication, select the AAA Prof iles tab.Select the
AAA profile. Enter the user role for MAC Authentication Default Role or 802.1x Authenticat ion Default Role.
3. To configure the defaultuser role for other authentication methods, select the L2 Authentication or L3
Authentication tab. Select the authentication type (Stateful 802.1x or s tatefulNTLM for L2 Authenticati on,
Captive Portal or VPN for L3 Authentication), and then select the profile. Enter the user role for Default Role.
4. Click Apply.
For additional information on configuring captive portal authentication, see "Captive Portal A uthentication" on page
233.
In the CLI
To configure the defaultuser role for MAC or 8 02.1x authentication:
(host)(config) #aaa profile <profile>
mac-default-role <role>
dot1x-default-role <role>
To configure the defaultuser role for other authentication methods:
(host)(config) #aaa authentication captive-portal <profile>
d>efault-role <role>
(host)(config) #aaa authentication stateful-dot1x
d>efault-role <role>
(host)(config) #aaa authentication stateful-ntlm
d>efault-role <role>
(host)(config) #aaa authentication vpn
d>efault-role <role>