Privilege Level for Aruba EdgeConnect OS

Aruba EdgeConnect SD-WAN (ECOS) is a monitoring package that uses the appliance and orchestrator API to monitor EdgeConnect OS appliances.

Level of Privileges

Modes that can be used to access through the CLI:

  • User EXEC Mode
  • Privileged EXEC Mode
  • Global Configuration Mode

User EXEC Mode

The User EXEC mode provides access to commands for non-configuration tasks, such as checking the appliance status.

Privileged EXEC Mode

The Privileged EXEC mode provides access to all the commands you could execute in User EXEC mode, as well as several additional commands.

Global Configuration Mode

The Global Configuration mode allows you to make changes to the running configuration.

User Privilege Levels

The CLI has two user privilege levels, which determine the CLI modes you can enter and the commands you can execute. You can log in to one of the following user privilege levels:

  • Administrator
  • Monitor

Administrator:

The Administrator user privilege level has full access to all modes and commands in the CLI.

Monitor:

The Monitor user privilege level is the default privilege level for the CLI. This privilege level provides access to the User EXEC and Privileged EXEC modes. The Monitor user privilege level does not have access to most configuration commands.

Note: For successful scanning, the scan account must be of an administrator. 

Steps to create a user with user privilege level as Administrator

  1.  Log in to Aruba Appliance Management Console and click Administration.

    Selecting administrator in Aruba management console.
     
  2.  Under User Management, select Users.

    Selecting users under user Management.
     
  3.  Under User Accounts, add a new User Name with user-level privilege as an administrator.

    Adding username with user privilege as monitor.
     
  4.  Apply and save the changes.

Note: Administrator user-level privilege is required to successfully generate a PC compliance report.

Set Up Network SSH Authentication

  1.  Configure a Network SSH Auth record by navigating to Scans > Authentication > New > Network and Security > Network SSH > New Network SSH Record.

    Screenshot to configure a network SSH auth record.
     
  2.  Click Login Credentials and enter your
    1. Username, Password and
    2. Enable/ Expert Password

  3.  Select the Target Type as Aruba EdgeConnect OS.

    Select the target type as Aruba EdgeConnect OS (PC).
     
  4.  Click Create.