An administrator wants to implement dynamic segmentation policies. The network consists of AOS-CX and Aruba gateways.
Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?
To implement dynamic segmentation policies for users connecting via both wireless and Ethernet switch ports in a network consisting of AOS-CX and Aruba gateways, the administrator should implement User-based tunneling (UBT). UBT allows for dynamic segmentation by assigning each user a unique role, ensuring proper policy enforcement regardless of the connection type. Port-based tunneling is not supported on the mentioned AOS-CX version, and switch-to-switch tunneling and local switching do not meet the requirements for dynamic user-based policy enforcement.
Correct Answer: A B: Port-based tunneling is not supported on AOS-CX C: SST never heard D: dont make sense
Page 41 Study Guide: The figure introduces you to tunneling options related to dynamic segmentation • User- Based Tunnel (UBT) : each user is assigned their own role • Port- Based Tunnel(PBT) : each port (and all the devices connected to the same port) are assigned the same role (PBT is not currently supported in AOS- CX 10.4 but there are plans to add it in a future release) • Switch- to- switch tunneling: planned release in AOS- CX 10.5 • None : Exempt certain traffic from tunneling by performing local switching/forwarding (like voice, for example) [Aruba Networks]
A is correct