HP
HPE6-A73 · Question #98
The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what exactly connects to the…
The correct answer is C. Implement downloadable user roles and user-based tunneling (UBT) on the AOS-CX switches. See the full explanation below for the reasoning.
Question
The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what exactly connects to the trunk ports on the access layer switch. Therefore, the company is implementing 802.1X authentication on the AOS-CX switches. An administrator has globally enabled 802.1X, and has enabled it on all the access ports connected to user devices, including VoIP phones, security cameras, and wireless Aruba IAPs. Wireless users are complaining that they successfully authenticate to the IAPs; however, they do not have access to network resources. Previously, this worked before 802.1X was implemented on the AOS-CX switches.
What should the company do to solve this problem?
Options
- AImplement device-based mode on the IAP-connected AOS-CX switch ports.
- BImplement local user roles and local forwarding on the AOS-CX switches.
- CImplement downloadable user roles and user-based tunneling (UBT) on the AOS-CX switches.
- DImplement AAA RADIUS change of authorization on the AOS-CX switches.
How the community answered
(25 responses)- B12% (3)
- C84% (21)
- D4% (1)
Community Discussion
No community discussion yet for this question.