A company has AOS-CX switches and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company wants switches to implement 802.1X authentication to CPPM and download user roles. What is one…

Question

Options

• ASpecify CPPM as the RADIUS server with the exact CN in CPPM's HTTPS certificate.
• BInstall the root CA certificate for CPPM's RADIUS certificate in a TA profile on the switches.
• CConfigure empty user-roles with names that match enforcement profile names on CPPM.
• DSpecify a ClearPass username and password that match the name and RADIUS secret in a CPPM

• A
  6% (2)
• B
  70% (23)
• C
  18% (6)
• D
  6% (2)

Explanation

To support 802.1X authentication and download user roles from HPE Aruba Networking ClearPass Policy Manager (CPPM) on AOS-CX switches, you must install the root CA certificate for CPPM's RADIUS certificate in a Trust Anchor (TA) profile on the switches. This ensures that the switches trust the RADIUS server certificate presented by CPPM during the authentication 1. Root CA Certificate: Installing the root CA certificate ensures that the switch can verify the authenticity of the RADIUS server certificate provided by CPPM. 2. Trust Anchor Profile: The TA profile on the switch holds the root CA certificate, establishing a trust relationship between the switch and the CPPM RADIUS server. 3. Secure Authentication: This setup is essential for securing the 802.1X authentication process and enabling the download of user roles.

No community discussion yet for this question.