QuestionQ3
Protect and DefendCustomer introduction
You are assisting a company with adding HPE Aruba Networking ClearPass to its network, which uses HPE Aruba Networking infrastructure devices.
The company currently has a Windows domain and a Windows CA. The Windows CA issues certificates to domain computers, domain users, and servers such as domain controllers. An example certificate issued by the Windows CA is shown here.
ClearPass cluster IP addressing and hostnames
A customer's ClearPass cluster uses these IP addresses:
- Publisher = 10.47.47.5
- Subscriber 1 = 10.47.47.6
- Subscriber 2 = 10.47.47.7
- Virtual IP with Subscriber 1 and Subscriber 2 = 10.47.47.8
The customer’s DNS server has these entries:
- cp.acnsxtest.com = 10.47.47.5
- cps1.acnsxtest.com = 10.47.47.6
- cps2.acnsxtest.com = 10.47.47.7
- radius.acnsxtest.com = 10.47.47.8
- onboard.acnsxtest.com = 10.47.47.8
Refer to the scenario.
The customer has now decided it needs CPPM to assign certain mobile-onboarded devices to a "nurse-call" AOS user role. These mobile-onboarded devices communicate with IP address 10.1.18.12 using port 4343.
What are the prerequisites for meeting this requirement?
- A Setting up traffic classes and role mapping rules within HPE Aruba Networking Central's global settings
- B Creating a tag on HPE Aruba Networking Central to select the proper destination connection and integrating CPPM with Device Insight
- C Creating server-based role assignment rules on APs that apply roles to clients based on traffic destinations
- D Creating server-based role assignment rules on gateways that apply roles to clients based on traffic destinations
Community Discussion