Free HP HPE6-A81 Exam Dumps Questions & Answers

A customer has multiple Aruba Controllers integrated with ClearPass for guest access using a controller-initialed login method. The customer is aware that a public CA-signed captive portal certificate is required in Aruba controllers for controller-initiated workflows. The customer has purchased unique public CA-signed server certificates for each controller.
What configuration steps would you suggest to the customer to complete the deployment? (Select three.)

• A.From the weblogin/ self-registration page NAS Vendor settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.
• B.Edit the HTML header in the weblogin/ self-registration register page with a script to match the controllers IP and captive portal certificate CN names respectively.
• C.From the weblogin/ self-registration page Login form settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.
• D.From the Aruba controller, enable the option 'Add switch ip address in the redirection URL' under the respective guest AAA profile mapped in the VAP profile.
• E.From the Aruba controller, enable the option "Add switch IP address in the redirection URL" under the respective L3 Authentication profile mapped in the initial role
• F.Add all the controller IP address and its certificate common names in the DNS server's Forward Lookup Zones and Reverse Lookup Zones to resolve queries from client.

Refer to the exhibit.


You have integrated the Cisco switch with ClearPass to do MAC-Auth for Cisco IP Phones. The phones connect to the network successfully but when you try to change the status of the device from the access tracker, you see only the ArubaOS Radius terminate session options and not the Cisco vendor terminate session options. What will you check to fix this issue?

• A.Verify if the ClearPass supports RADIUS Dynamic Authorization for the Cisco IP Phones doing MAC.AUTH.
• B.Verify if the Enable RADIUS Dynamic Authorization option is checked for the Cisco switch added under the network devices.
• C.Verify that Cisco is chosen as the vendor name while adding the Cisco Switch under network devices.
• D.Verify if the Cisco IP Phone is actively connected to the switch to get the Cisco CoA options from ClearPass.

You art deploying Cleat Pass Policy Manager with Guest functionality for a customer with multiple Aruba Networks Mobility Controllers. The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.
What is the most efficient way to configure the customer's guest solution? (Select two.)

• A.Build one Web Login page with vendor settings for controller (company domain)
• B.Build one Web Login page with vendor settings for captiveportal-controller (company domain)
• C.Install the same public certificate on all Controllers with the common name "controller.{company domain)
• D.Install multiple public certificates with a different Common Name on each controller
• E.Build multiple Web Login pages with vendor settings configured for each controller

You have configured a Guest SSIO with Captive-portaI Web Authentication and MAC authentication. The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

• A.The client will successfully pass the mac authentication until the mac caching time expires.
• B.The client will successfully pass the MAC authentication but still be redirected to captive portal page.
• C.The client will fail the MAC authentication and be denied access to the Guest SSIO.
• D.The client will fail to get the MAC Caching role and will be redirected to the captive portal login page

Which using Allow All MAC AUTH, which authentication source should be mapped to the service?

• A.Static Host List
• B.Any Authentication source
• C.Endpoint Database
• D.Guest Device Database