HPE6-A45 Exam - Question 71

Question

A customer wants to authenticate AOS-Switch managers to a RADIUS server. Managers should be assigned either read-only or full read-write level access based on the Service-Type VSA in their user account.

What must the network administrator enable on the AOS-Switches to ensure they comply with this plan?

Examice · Accepted Answer

To authenticate AOS-Switch managers using a RADIUS server and assign them either read-only or full read-write access based on the Service-Type VSA in their user account, the network administrator must enable RADIUS-based command authorization. This feature allows different command sets to be authorized depending on the user's level of access as defined in RADIUS.

GiGiWRC · Answer

it should be C

ktns · Answer

A?
https://www.arubanetworks.com/techdocs/ClearPass/6.8/Aruba_DeployGd_HTML/Content/HP%20Switch%20Integration/Switch_mgmt_RADIUS.htm

Anonymous · Answer

А

The RADIUS-based method of command authorization requires less overhead on the AAA server and affords higher performance in environments that have many concurrent management sessions on the switches.
The examples in the following section describe the following:

Both Manager and “ViewOnly” levels of access are actually the same as far as the ArubaOS switch is concerned, with the only difference being which commands can be run.

The Manager-level of access still has command authorization as a RADIUS Vendor Specific Attribute (VSA), but there is no list of commands accompanying that role. When there is no list of commands, all commands can be run.

The ViewOnly-level of access has command authorization as a RADIUS Vendor Specific Attribute (VSA) and a command list with a regular expression indicating that only commands that begin with the word “show” may be run.

https://www.arubanetworks.com/techdocs/ClearPass/6.8/Aruba_DeployGd_HTML/Content/HP%20Switch%20Integration/Switch_mgmt_RADIUS.htm

HPE6-A45 Exam - Question 71

Discussion