Privilege level for ArubaOS Switch

Commands Required for Scanning

show running-config 
show version 

Privilege Levels 

A new user can be created using the following commands:

1. aaa authentication local-user <user-name> group <group-name> password (plaintext|sha1|sha256)
New password for test: *******
Please retype new password for test: *******

2. aaa authorization group <group-name> <sequence-number> match-command <command-to-match> (permit|deny)

3. show authentication last-login:

Username

Priv

Last Login

Last Login IP Address

Fails

Last Failed Attempt

admin

Oper

2022-11-11 06:57:39

10.119.208.47

1

2022-11-11 07:05:52

manager

Mgr

2022-01-10 00:08:16

console

16

2022-01-22 00:25:41

operator

Oper

2022-01-10 00:13:27

console

182

2022-11-09 11:32:57

setup

Mgr

2022-11-11 08:35:28

10.119.208.47

0

 

test

Mgr

2022-11-11 07:17:01

10.119.208.47

0

 

 

4. show authentication locked-out-users:

USER

GROUP

admin

administrators

admin-1

administrators

 

5. show authorization group test

Local Management Groups - Authorization Information

Group Name : test

Group Privilege Level : 3

USERS

test

 

Seq. Num

Permission

Rule Expression

Log

10

Permit

Show

Disable

 

After successful authentication, the following results are displayed:

Datapoint ID: xxxxxx 
Target IP: xx.xx.xx.xxx 
ML Version: ML-xx.xx.xx-x 

<COMPLIANCE> 
  </DP>

    <K>qpc.aruba.aaa_auth.captive-portal</K>
    <V>aaa authentication captive-portal enable</V>
    <V>aaa authentication captive-portal profile "aruba-cap-portal-tst-profile"</V>
    <E>
      <R>
        <C>Command</C>
        <C>Filter 1: ^aaa authentication captive-portal</C>
      </R>
      <R>
        <C>show running-config</C>
        <C>aaa authentication captive-portal enable aaa authentication captive-portal profile "aruba-cap-portal-tst-profile"</C>
      </R>
    </E>
  </DP>
</COMPLIANCE>