A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code. The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.
Which solution should the company implement?
User-based tunneling (UBT) is a suitable solution for this scenario. UBT allows traffic from wired and wireless clients to be tunneled back to a central mobility controller, enabling the application of consistent security and firewall policies across both types of traffic. This approach works well for integrating the AOS-CX switches with a third-party AAA solution while maintaining uniform policy enforcement.
I think the answer is D. we talk about UBT in this question where user connect to switch will go to MC by use Tunnel
Answer is D. User based tunneling with LUR
Agree with demanmetdehamer, its A. UBT ist only Supported with Clearpass and not with a third-party AAA solution.
the Correct answer is D
Answer is D, see pages 789 791
correct answer is D
Mark key words, 'Aruba APs and MC', '3rd Party AAA', 'FW for both Wired and wireless means same user can be either', so need to be Aruba tunneling using LUR
Page 748 Study Guide: The bottom line is this: Use the tunneled- node feature whenever you want to apply Aruba controller- based security/control mechanisms to both wireless and wired traffic. You get unified access control – same policies regardless of whether they have a wired or wireless connection. [Aruba Networks]
Answer A is correct. UBT is only supported with Clearpass as radius server. The question clearly states that the company has a third party solution.
UBT is only supported with Clearpass when you use DUR , but when you use LUR you d'ont need clearpass
Answer is D. User based tunneling with LUR
should be D, LUR is used with CPPM and also with third party AAA servers
A: Aruba ClearPass supports RADIUS dynamic authorization. RADIUS (Remote Authentication Dial-In User Service) is a protocol widely used for network access control, authentication, and accounting. It allows for the centralized management of user authentication and authorization for network devices.
third-party AAA solution , not Clearpass.
Correct answer should be A. As it says customer wants to leverage the existing AAA and firewall third party policy it could be CISCO Server as well. If he wants to use UBT he still can do it with LUR but it is new AAA setup for both wired and wireless.
A is incorrect because Radius dynamic authorization has not goal to guaranty same security & firewall policy for wired & wireless traffic B is incorrect because downloadable user role are only compatible with Aruba Clearpass and not with third party AAA. C is incorrect because switch do not use IPSec D is correct : ACSP Learning book Dynamic segmentation : "when to use UBT ? Wired and wireless traffic should have the same (or similar) policies applied to them