185| Authentication Servers AOS-W 6.5.3.x| User Guide
VSA
Type Value
Description
Vendor
Name
Vendor
ID
Aruba-
Mdps-
Device-
Product
String 20
The device product is used as input attribute by the
Onboard application while performing the device
authorization to the internal RADIUS server within
the CPPM. Device Product checks against role
mappings or enforcement policies to determine if the
device is authorized to be onboarded.
Aruba 14823
Aruba-
Mdps-
Device-
Version
String 21
The device version is used as input attribute by the
Onboard application while performing the device
authorization to the internal RADIUS server within
the CPPM. Device Version checks against role
mappings or enforcement policies to determine if the
device is authorized to be onboarded.
Aruba 14823
Aruba-
Mdps-
Device-
Serial
String 22
The device serial number is used as input attribute
by the Onboard application while performing the
device authorization to the internal RADIUS server
within the CPPM. Device Serial checks against role
mappings or enforcement policies to determine if the
device is authorized to be onboarded.
Aruba 14823
Aruba-
AirGroup-
User-Name
String 24
A device owner or username associated with the
device.
Aruba 14823
Aruba-
AirGroup-
Shared-User
String 25
This VSA contains a comma separated list of user
names with whom the device is shared.
Aruba 14823
Aruba-
AirGroup-
Shared-Role
String 26
This VSA contains a comma separated list of user
roles with whom the device is shared.
Aruba 14823
Aruba-
AirGroup-
Device-Type
Integer 27
A value of 1 for this VSA indicates that the device
authenticating on the network is a personal device
and a value of 2 indicates that it is a shared device.
Aruba 14823
Aruba-Auth-
Survivability
String 28
The Instant AP Auth survivability feature uses the
VSA to indicate that the CPPM server sends the
Aruba-AS-User-Name and Aruba-AS-Credential-
Hash values. This attribute is just used as a flag with
no specific value required.
Aruba 14823
Aruba-AS-
User-Name
String 29
The Auth survivability feature uses the VSA for
Instant APs. The CPPM sends the actual user name to
the Instant AP which can be used by the Instant AP to
authenticate the user if the CPPM server is not
reachable.
Aruba 14823
Aruba-AS-
Credential-
Hash
String 30
The Auth survivability feature uses the VSA for
Instant APs. The CPPM sends the NT hash of the
password to the Instant AP which can be used by the
Instant AP to authenticate the user if the CPPM
server is not reachable.
Aruba 14823