A company has HPE Aruba Networking APs (AOS-10), which authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is set up to receive a variety of information about clients'…

Question

Options

• AIn the security settings, configure dynamic denylisting.
• BIn the RADIUS server settings for CPPM, enable Dynamic Authorization.
• CIn the WLAN profiles, enable interim RADIUS accounting.
• DIn the RADIUS server settings for CPPM, enable querying the authentication status.

• A
  9% (3)
• B
  84% (27)
• C
  3% (1)
• D
  3% (1)

Explanation

To ensure that HPE Aruba Networking APs (AOS-10) properly interact with HPE Aruba Networking ClearPass Policy Manager (CPPM) and dynamically update a client's enforcement profile based on new profile and posture information, you should enable Dynamic Authorization in the RADIUS server settings for CPPM. This allows ClearPass to send Change of Authorization (CoA) requests to the APs, prompting them to reapply the appropriate enforcement profiles based on updated information. 1. Dynamic Authorization: Enabling this feature allows ClearPass to dynamically push changes to the APs whenever there is new relevant information about a client's profile or posture. 2. Change of Authorization (CoA): This mechanism ensures that clients are assigned the correct enforcement profiles in real-time, based on the latest data. 3. Enhanced Policy Enforcement: This setup helps in maintaining accurate and up-to-date policy enforcement for clients on the network.

No community discussion yet for this question.