HPE7-A02 · Question #5
A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control which commands managers are…
The correct answer is A. Add the Shell service to the managers' TACACS+ enforcement profiles. To control which commands managers are allowed to enter on AOS-CX switches using HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server, you need to add the Shell service to the TACACS+ enforcement profiles for the managers. This service allows you to define…
Question
A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control which commands managers are allowed to enter. You see there is no field to enter these commands in ClearPass. How do you start configuring the command list on CPPM?
Options
- AAdd the Shell service to the managers' TACACS+ enforcement profiles.
- BEdit the TACACS+ settings in the AOS-CX switches' network device entries.
- CCreate an enforcement policy with the TACACS+ type.
- DEdit the settings for CPPM's default TACACS+ admin roles.
How the community answered
(39 responses)- A74% (29)
- B8% (3)
- C3% (1)
- D15% (6)
Explanation
To control which commands managers are allowed to enter on AOS-CX switches using HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server, you need to add the Shell service to the TACACS+ enforcement profiles for the managers. This service allows you to define and enforce specific command sets and access privileges for users authenticated via TACACS+. By configuring the Shell service in the enforcement profile, you can specify the commands that are permitted or denied for the managers, ensuring controlled and secure access to the switch's command-line interface.
Topics
Community Discussion
No community discussion yet for this question.