ArubaOS 8.9 Series - Part 8 - AAA Profiles, Policy and Roles

In this video I am going to show you how AAA profiles are used to apply a policy to wireless users by using user-roles. Every single user is always assigned a user-role when connecting via the controller on an untrusted interface. GRE tunnels from access points are always untrusted so user-role is applied and wired interfaces can be configured as untrusted when you also want to use user-roles on wired interfaces.

[@sharathbabu4219]

Excellent! Thank you for this video. it really helps. I have a question with respect to deny-inter-user-traffic. I have configured deny-inter-user-traffic at the VAP level but in the role I have allowed east-west (user to user) communication. Will the settings on the role take precedence over the settings that is configured at the VAP level.

[@samisam3826]

Thank you for this video, i want to know , how the rules are update if new site apears ?