HPE6-A47 Exam Dumps : Designing Aruba Solutions

ClearPass OnConnect is a feature of the ClearPass Policy Manager that allows wired authentication on switches that do not support 802.1X or RADIUS protocols. ClearPass OnConnect uses SNMP to monitor and control the switch ports based on the device profiles and policies defined in ClearPass12. ClearPass OnConnect can provide the following benefits for the customer:

• It can enable wired authentication without requiring any changes to the existing switch infrastructure or the end-user devices. This can save the customer’s budget and time, as well as minimize the network disruption and user impact.
• It can provide visibility and control over the wired devices, such as printers, IoT devices, and laptops, that connect to the network. ClearPass OnConnect can identify the device type, user role, and location, and apply the appropriate access policies based on the customer’s security and compliance requirements. For example, ClearPass OnConnect can allow only authorized devices and users to access certain network resources, or quarantine or block any unknown or non-compliant devices.
• It can integrate with the other components of the Aruba solution, such as the MCs, MMs, APs, AirWave, and ClearPass Guest, to provide a consistent and unified network management and security solution across the wired and wireless networks. For example, ClearPass OnConnect can leverage the device profiles and policies from ClearPass Guest, or share the network health and performance data with AirWave.

Therefore, by explaining this feature, the architect can justify the proposed solution and show how it can meet the customer’s needs and expectations for wired authentication, as well as wireless authentication.

References:

• 1: https://www.arubanetworks.com/techdocs/ClearPass/6.7/PolicyManager/index.htm#CPPM_UserGuide/Admin/OnConnect.htm
• 2: https://www.arubanetworks.com/assets/tg/TB_ClearPass_OnConnect.pdf

An active site survey is a method of measuring and validating the wireless coverage, capacity, and performance of a network in a specific environment. It involves deploying temporary APs in the proposed locations, collecting data using a survey tool, and analyzing the results to optimize the network design. A heat map is a graphical representation of the wireless signal strength, interference, noise, or other metrics in different areas of the site. A heat map with proposed AP locations and actual tested coverage is a deliverable that shows the customer the expected performance of the new 802.11ac-based solution, and allows the architect to fine-tune the AP placement, channel selection, transmit power, and antenna orientation. This deliverable also helps the customer to verify that the network meets their requirements for coverage, capacity, and quality of service. References:

• Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47) - Chapter 5)
• Aruba Validated Reference Design: Wireless LAN Site Surveys - Chapter 3)
• Aruba Validated Reference Design: 802.11ac Networks - Chapter 4)

 Aruba Instant APs are a simple, easy to deploy, and cost-effective solution for small office buildings that need wireless access. Aruba Instant APs can form a self-organizing and self-healing mesh network that supports basic rogue AP detection and provides a stateful firewall with role-based policies. Aruba Instant APs do not require a separate controller or license, and can be managed from the cloud or a mobile app. Aruba remote APs are designed for branch or home offices that need to connect to a central controller over a WAN link. Aruba campus APs and a Virtual Mobility Controller are suitable for larger or more complex deployments that need more scalability and flexibility. Aruba campus APs and an Aruba 7005 Mobility Controller are also more expensive and require additional hardware and licensing. References: Aruba Instant Access Points), Aruba Validated Design: Campus Wireless LAN)