HPE6-A47 Exam Dumps : Designing Aruba Solutions

ClearPass OnConnect is a feature of the ClearPass Policy Manager that allows wired authentication on switches that do not support 802.1X or RADIUS protocols. ClearPass OnConnect uses SNMP to monitor and control the switch ports based on the device profiles and policies defined in ClearPass12. ClearPass OnConnect can provide the following benefits for the customer:

• It can enable wired authentication without requiring any changes to the existing switch infrastructure or the end-user devices. This can save the customer’s budget and time, as well as minimize the network disruption and user impact.
• It can provide visibility and control over the wired devices, such as printers, IoT devices, and laptops, that connect to the network. ClearPass OnConnect can identify the device type, user role, and location, and apply the appropriate access policies based on the customer’s security and compliance requirements. For example, ClearPass OnConnect can allow only authorized devices and users to access certain network resources, or quarantine or block any unknown or non-compliant devices.
• It can integrate with the other components of the Aruba solution, such as the MCs, MMs, APs, AirWave, and ClearPass Guest, to provide a consistent and unified network management and security solution across the wired and wireless networks. For example, ClearPass OnConnect can leverage the device profiles and policies from ClearPass Guest, or share the network health and performance data with AirWave.

Therefore, by explaining this feature, the architect can justify the proposed solution and show how it can meet the customer’s needs and expectations for wired authentication, as well as wireless authentication.

References:

• 1: https://www.arubanetworks.com/techdocs/ClearPass/6.7/PolicyManager/index.htm#CPPM_UserGuide/Admin/OnConnect.htm
• 2: https://www.arubanetworks.com/assets/tg/TB_ClearPass_OnConnect.pdf

An active site survey is a method of measuring and validating the wireless coverage, capacity, and performance of a network in a specific environment. It involves deploying temporary APs in the proposed locations, collecting data using a survey tool, and analyzing the results to optimize the network design. A heat map is a graphical representation of the wireless signal strength, interference, noise, or other metrics in different areas of the site. A heat map with proposed AP locations and actual tested coverage is a deliverable that shows the customer the expected performance of the new 802.11ac-based solution, and allows the architect to fine-tune the AP placement, channel selection, transmit power, and antenna orientation. This deliverable also helps the customer to verify that the network meets their requirements for coverage, capacity, and quality of service. References:

• Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47) - Chapter 5)
• Aruba Validated Reference Design: Wireless LAN Site Surveys - Chapter 3)
• Aruba Validated Reference Design: 802.11ac Networks - Chapter 4)

The traditional guideline limits a wired VLAN to a /24 subnet, which provides enough IP addresses for 253 endpoints. You might have suggested one of three approaches: one VLAN per floor, one VLAN per building, or one VLAN per campus. The one VLAN per floor approach is not recommended because it interferes with roaming and adds complexity. If you did take this approach, the /24 subnets are not large enough for the requirements on every floor. You would need to ask for /23 subnets. The one VLAN per building approach would work if you considered each building its own RF domain. It provides roaming within a building and, if you are using a single cluster at the data center, between buildings. Ifyou deployed two MCs or clusters, one at each building, though, GRE tunneling would be required to support roaming between buildings.