QuestionQ36

Authentication/Authorization

A customer is assessing device profiles on a CX 6300 switch. The test device has this attribute:

  • MAC address = 81:cd:93:13:ab:31

The test device must be assigned the iot-prod role. Additionally, the iot-default role must apply to every other device connected to interface 1/1/1.

This is a lab environment, and no external authentication server is configured for the test.

Question Image

Based on the configuration example, what is required to satisfy this testing requirement?

Explanation

AOS-CX assigns a configured fallback role to an onboarding client only when no derived role is available. Thus, the MAC-group match derives iot-prod for matching devices, while port-access fallback-role iot-default on interface 1/1/1 assigns iot-default to all nonmatching devices. Aruba AOS-CX fallback-role documentation

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!