HP
HPE6-A84 · Question #43
Refer to the scenario. This customer is enforcing 802.1X on AOS-CX switches to Aruba ClearPass Policy Manager (CPPM). The customer wants switches to download role settings from CPPM. The "reception…
The correct answer is A. Assign a consistent name to VLAN 14, 24, or 34 on each access layer switch and reference that. You've hit your limit · resets 6pm (America/New_York)
Designing Advanced Network Security Solutions
Question
Refer to the scenario. This customer is enforcing 802.1X on AOS-CX switches to Aruba ClearPass Policy Manager (CPPM). The customer wants switches to download role settings from CPPM. The "reception- domain" role must have these settings:
- Assigns clients to VLAN 14 on switch 1, VLAN 24 on switch 2, and so
on.
- Filters client traffic as follows:
- Clients are permitted full access to 10.1.5.0/24 and the Internet --
Clients are denied access to 10.1.0.0/16 The switch topology is shown here:
How should you configure the VLAN setting for the reception role?
Exhibit
Options
- AAssign a consistent name to VLAN 14, 24, or 34 on each access layer switch and reference that
- BConfigure the enforcement profile as a downloadable role, but specify only the role name and
- CAssign a number-based ID to the access layer switches. Then use this variable in the enforcement
- DCreate a separate enforcement profile with a different VLAN ID for each switch. Add all profiles to
How the community answered
(49 responses)- A69% (34)
- B8% (4)
- C4% (2)
- D18% (9)
Explanation
You've hit your limit · resets 6pm (America/New_York)
Topics
#AOS-CX#downloadable user roles#VLAN assignment#ClearPass enforcement
Community Discussion
No community discussion yet for this question.