HPE6-A73 Exam QuestionsBrowse all questions from this exam
Go to Exam

HPE6-A73 Exam - Question 94

An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network. The administrator configures the following on the AOS-CX access switches:

After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.

What is causing this issue?

Show Answer
Correct Answer: A

RADIUS change of authorization (CoA) must be enabled on the AOS-CX switch to ensure that ClearPass can successfully send and execute disconnect messages. This configuration is necessary for the switch to accept and act on the CoA messages, which are used to enforce policies like disconnecting users who exceed bandwidth limits.

Discussion

2 comments
Sign in to comment
SeidorBrunoOption: A
Jul 2, 2023

Page 675 Study Guide: Enable acceptance of Change of Authorization (CoA) messages Aruba ClearPass can assess endpoints on an ongoing basis and change an endpoint’s authentication status or settings. To make these changes, ClearPass sends disconnect messages (DMs) and CoA messages. For the switch to accept these messages, you must enable dynamic authorization for the RADIUS globally on the switch, as shown in the figure. Without this option, some solution components might work, but others will fail. [Aruba Networks]

E_NickOption: A
Oct 9, 2022

A is correct