A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using…

Question

Options

• ACreate a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.
• BCreate remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.
• CConfigure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.
• DConnect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

• A
  4% (1)
• B
  4% (1)
• C
  78% (21)
• D
  15% (4)

Explanation

ArubaOS-Switches can use sFlow technology to sample network traffic and send the samples to a collector, such as ClearPass Policy Manager (CPPM), for analysis. sFlow can be configured to capture various types of traffic, including HTTP, which typically contains User-Agent strings that can be used for device fingerprinting and classification. To support the requirement for using HTTP User-Agent strings to classify endpoints, the switches would need to be configured to send sFlow samples containing HTTP traffic to CPPM. CPPM would then analyze these samples and use the User-Agent strings to classify the devices. Therefore, the correct action to configure ArubaOS-Switches would involve: Configuring CPPM as the sFlow collector on the switches. Enabling sFlow on the edge ports that connect to endpoints. This approach allows the network traffic to be analyzed by CPPM without requiring any additional mirroring or redirection of traffic, which would be resource-intensive and potentially disruptive to network performance.

No community discussion yet for this question.