nerdexam
HP

HPE7-A02 · Question #131

An AOS-CX switch has been configured to implement UBT to two HPE Aruba Networking gateways that implement VRRP on the users' VLAN. What correctly describes how the switch tunnels UBT users' traffic…

The correct answer is B. The switch always sends all users' traffic to the primary gateway configured in the UBT zone. In UBT (User-Based Tunneling), the AOS-CX switch uses its own statically configured primary gateway within the UBT zone to forward tunneled user traffic - this designation is independent of which gateway currently holds the VRRP master role. Option B is correct because…

Implementing Advanced Security Features

Question

An AOS-CX switch has been configured to implement UBT to two HPE Aruba Networking gateways that implement VRRP on the users' VLAN. What correctly describes how the switch tunnels UBT users' traffic to those gateways?

Options

  • AThe switch always sends the users' traffic to the VRRP master.
  • BThe switch always sends all users' traffic to the primary gateway configured in the UBT zone.
  • CThe switch always load shares the users' traffic across both gateways.
  • DThe switch always sends all users' traffic to the gateway assigned as the active device designed

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    85% (34)
  • C
    5% (2)
  • D
    8% (3)

Explanation

In UBT (User-Based Tunneling), the AOS-CX switch uses its own statically configured primary gateway within the UBT zone to forward tunneled user traffic - this designation is independent of which gateway currently holds the VRRP master role. Option B is correct because regardless of the VRRP state on the users' VLAN, the switch always directs UBT traffic to whichever gateway is explicitly set as primary in the UBT zone configuration.

A is wrong because UBT does not dynamically track or follow the VRRP master; it ignores VRRP election outcomes entirely when deciding where to send traffic. C is wrong because UBT does not load-share across both gateways simultaneously - it uses a primary/secondary failover model, not active-active distribution. D is wrong for the same reason as A: the "active device" in VRRP is irrelevant to UBT's forwarding decision, which is driven solely by the configured primary.

Memory tip: Think of UBT zone config as its own chain of command - the "primary" you configure in the zone is always first in line, and VRRP is a completely separate election that UBT simply doesn't care about.

Topics

#UBT#VRRP#gateway redundancy#AOS-CX

Community Discussion

No community discussion yet for this question.

Full HPE7-A02 Practice