HP Aruba Certified Professional - Campus Access HPE7-A06 Question # 8 Topic 1 Discussion

The issue involves users roaming to APs connected to a test switch failing to receive an IP address on the corporate Wi-Fi network (bridged mode), with ClearPass reporting a RADIUS Aruba-User-Role attribute of Access_Point. The goal is to identify the configuration change needed to resolve this issue.

Analysis of Options:

Option A (port-access client-move enable):Enables client movement between ports but does not address the AP authentication issue.

Option B (aaa authentication port-access client-limit 0):Correct. Setting the client limit to 0 on the switch ports (1/1/1–1/1/48) disables MAC authentication for APs, allowing them to be treated as trusted devices and preventing the application of an incorrect role.

Option C (port-access onboarding-method concurrent enable):Enables concurrent onboarding but is unrelated to the AP role issue.

Option D (port-access role Access_point auth-mode device-mode):Configures a device mode role but does not resolve the IP assignment issue caused by incorrect authentication.

Why Option B is Correct:The issue arises because the switch is applying 802.1X or MAC authentication to the AP ports, resulting in ClearPass assigning the Access_Point role, which restricts client connectivity. By setting aaa authentication port-access client-limit 0 on the AP-connected ports (1/1/1–1/1/48), the switch disables port-access authentication for these ports, treating the APs as trusted devices. This allows clients to authenticate properly via the AP and receive IP addresses in bridged mode, resolving the issue.

Relevance to Certification Objectives:

WLAN (9%):Involves troubleshooting wireless functions and Layer 2 issues related to AP connectivity.

Authentication/Authorization (9%):Includes troubleshooting ClearPass integration and 802.1X configurations.

Security (10%):Covers troubleshooting wired 802.1X implementations.