A company has an existing wireless solution involving Aruba APs and Aruba gateway. The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.
Which solution should the company implement?
The company wants to leverage the same security and firewall policies for both wired and wireless traffic. User-based tunneling (UBT) is a suitable solution as it allows the wired user traffic to be tunneled to a central point, similar to how wireless traffic is handled. This central point, typically an Aruba gateway, can then apply consistent security and firewall policies to both wired and wireless traffic, ensuring uniformity in policy enforcement.
C - CoA, for UBT need clearpass
B is right, UBT can use LUR with 3rd party AAA, only UBT with DUR requires clearpass
With UBT, the switch tunnels authenticated user traffic to an Aruba MC, to be processed by security policies. Advantages over local switching include: Centralized security policies for both wired and/or wired traffic: users have a consistent experience whether they connect via wired Ethernet or Wi- Fi.
B is right, UBT can use LUR with 3rd party AAA, only UBT with DUR requires clearpass
Page 747 Study Guide: Tunneled- node provides tighter and simpler unification of wired and wireless access. [Aruba Networks]