About remote AAA with RADIUS

Remote AAA provides the following for your Aruba switch:

  • Authentication using remote RADIUS AAA servers. For added security, two-factor authentication may be used. In two-factor authentication, X.509 certificate-based authentication is combined with RADIUS authentication.

  • RADIUS per-command authorization is not supported. Local RBAC authorization can be used to provide basic role-based authorization (Administrator or Operator).

  • Transmission of locally collected accounting information to remote RADIUS servers.


For switches that support multiple management modules such as the Aruba 8400, all AAA functionality discussed only applies to the active management module. See also AAA on switches with multiple management modules in the ArubaOS-CX High Availability Guide.