QuestionQ47

Analyze

You have a network of AOS-CX switches where HPE Aruba Networking ClearPass Policy Manager (CPPM) serves as the TACACS+ server. When an administrator authenticates, CPPM returns:

  • Aruba-Admin-Role = auditors
  • TACACS+ privilege level = 1

What access does the user receive?

  • A The user receives auditors access.
  • B The user receives administrators access.
  • C The user receives no access.
  • D The user receives operators access.
Explanation

On AOS-CX, the Aruba-Admin-Role TACACS+ vendor-specific attribute takes precedence over the TACACS+ priv-lvl attribute. A present value of auditors maps the authenticated user to the matching local auditors group; privilege level 1 would map to operators only if Aruba-Admin-Role were absent.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!