You have a network with ArubaOS-Switches for which Aruba ClearPass Policy Manager (CPPM) is acting as a TACACS+ server to authenticate managers. CPPM…

With ArubaOS-CX switches, the use of ClearPass Policy Manager (CPPM) as a TACACS+ server for

authentication is supported. The privilege levels assigned by CPPM will translate onto the switches,

where the "manager" privilege level typically maps to administrative capabilities and the "operator"

privilege level maps to more limited capabilities. ArubaOS-CX does support standard TACACS+

privilege levels, so administrators can be assigned appropriately. If the ClearPass policies are

correctly configured, they will work for both ArubaOS-Switches and ArubaOS-CX switches. The

distinction between the "administrators" and "operators" groups is inherent in the ArubaOS-CX role-

based access control, and these default groups need to be appropriately mapped to the TACACS+

privilege levels assigned by CPPM.