Legal Disclaimer: The resource assets in this website may include abbreviated and/or legacy terminology for HPE Aruba Networking products. See www.arubanetworks.com for current and complete HPE Aruba Networking product lines and names.
Configuring Stateful NT LAN Manager Authentication
The Stateful NTLM Authentication profile requires that you specify a server group, which includes the servers performing NT LAN Manager authentication and the role to be assigned to users who are successfully authenticated. For details on defining a windows server used for NT LAN Manager authentication, see Configuring a Windows Server.
When a user logs off or shuts down the client machine, the user remains in the authenticated role until the user ages out, meaning there is no user traffic for the amount of time specified in the setting under .
The following procedure describes how to configure a stateful NTLM authentication profile:
- In the node hierarchy, navigate to the page.
- Select from the tab.
- Under , click the to add a new profile entry. To modify an existing stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication profile, select a profile entry below in the list.
- Enter a .
- From the drop-down list, select the role to be assigned to all users after completing stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication.
- Select the check box to enable stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication.
- Specify the period for authentication requests, between 1 and 20 seconds.
The default value is 10 seconds.
- Click .
- In the list, select the entry below the stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication profile.
- Select the group of Windows servers to be used for stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication from the drop-down list.
- To enable authentication fail through and load balancing, select the check boxes for and .
- Click .
- Select .
- In the window, select the check box and click .
The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication. The first set of commands defines the Windows server used for NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication, and the second set adds that server to a server group. The third set associates that server group with the stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication profile, then defines the profile settings.
(host) [md] (config) #aaa authentication-server windows <windows_server_name>
clone <source>
domain <domain>
enable
host <host>
(host) [md] (config) #aaa server-group <sg_name>
allow-fail-through
auth-server <name> [match-authstring {contains <sub_string>|equals <sub_string>|starts-with <sub_string>][match-fqdn {all|<fqdn>}][position <prio>][trim-fqdn]
clone <source>
load-balance
set {role|vlan} condition <attribute> [contains <operand>|ends-with <operand>|equals <operand>|not-equals <operand>|starts-with <operand>][value-of][set-value <set-value-str>][position <number>]
(host) [md] (config) #aaa authentication stateful-ntlm <profile-name>
clone <source>
default-role <default-role>
enable
server-group <server-group>
timeout <timeout>
The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands display the servers and profiles configured for stateful NT LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. Manager authentication.
(host) [md] #show aaa authentication-server window
(host) [md] #show aaa server-group
(host) [md] #show aaa authentication stateful-ntlm