ACMA Configuration & Troubleshooting of Aruba Solutions 2 — Questions and Answers
Question 1: An administrator needs to configure a VLAN on an Aruba switch to carry traffic for multiple SSIDs. Which command correctly creates VLAN 20 and assigns it a name?
- vlan 20 name Corporate (Correct answer)
- interface vlan 20 name Corporate
- vlan 20; name Corporate
- create vlan 20 name Corporate
Correct answer: vlan 20 name Corporate
The command 'vlan 20 name Corporate' is the correct ArubaOS-Switch syntax to create VLAN 20 and assign it the name Corporate.
Question 2: A wireless client is associated but cannot obtain an IP address. The SSID is mapped to VLAN 30. What is the first troubleshooting step?
- Verify the DHCP server has a scope for VLAN 30 (Correct answer)
- Reassociate the client to the SSID
- Change the SSID security type to Open
- Restart the Mobility Controller
Correct answer: Verify the DHCP server has a scope for VLAN 30
If a client associates successfully but cannot get an IP, verifying that a DHCP scope exists for the mapped VLAN is the first logical step.
Question 3: Which Aruba CLI command displays the current status and configuration of all SSIDs broadcast by an AP?
- show ap bss-table (Correct answer)
- show wlan ssid
- show ap config
- show wireless ssid-status
Correct answer: show ap bss-table
'show ap bss-table' lists all BSSIDs and their associated SSIDs currently being broadcast by Aruba APs.
Question 4: A new Aruba IAP is powered on but does not appear in the Instant network. The AP has an IP address via DHCP. What should be checked next?
- Verify the AP can reach the Virtual Controller IP on UDP 8211 (Correct answer)
- Reset the AP to factory defaults
- Check that the AP firmware matches the switch firmware
- Assign a static IP to the AP
Correct answer: Verify the AP can reach the Virtual Controller IP on UDP 8211
Aruba Instant APs discover and join the Virtual Controller using UDP port 8211; a firewall blocking this port prevents cluster formation.
Question 5: When configuring WPA3-SAE on an Aruba controller, what must also be enabled to support legacy WPA2 clients simultaneously?
- OWE Transition Mode
- WPA3 Transition Mode (SAE Mixed) (Correct answer)
- PMF Optional mode
- 802.11r Fast BSS Transition
Correct answer: WPA3 Transition Mode (SAE Mixed)
WPA3 Transition Mode (SAE Mixed) allows both WPA2-PSK and WPA3-SAE clients to connect to the same SSID simultaneously.
Question 6: An Aruba controller shows 'AP is down' for a remote AP that was previously functioning. Which log on the controller should be checked first?
- show log all | include <AP-name> (Correct answer)
- show ap debug counters
- show ap monitor stats
- show crypto isakmp sa
Correct answer: show log all | include <AP-name>
Filtering system logs with the AP name quickly reveals connection errors, certificate failures, or tunnel drops affecting the AP.
Question 7: In an Aruba mobility architecture, what is the function of the 'user-role' applied at the point of authentication?
- It defines firewall policies, VLAN assignment, and bandwidth limits for the authenticated user (Correct answer)
- It assigns the AP to a specific AP group
- It determines which controller handles the user session
- It configures the RF parameters for the user's frequency band
Correct answer: It defines firewall policies, VLAN assignment, and bandwidth limits for the authenticated user
A user role in ArubaOS binds together access control policies, VLAN, QoS, and bandwidth parameters applied to a user after authentication.
ACMA Configuration & Troubleshooting of Aruba Solutions 2
An administrator needs to configure a VLAN on an Aruba switch to carry traffic for multiple SSIDs.
Which command correctly creates VLAN 20 and assigns it a name?