ACMA Configuration & Troubleshooting of Aruba Solutions 3 — Questions and Answers
Question 1: An Aruba AP is configured for ARM (Adaptive Radio Management). A technician notices clients on 2.4 GHz are experiencing high interference. What ARM feature automatically moves clients to 5 GHz?
- Band Steering (Correct answer)
- Channel Reuse
- Coverage Hole Detection
- Transmit Power Control
Correct answer: Band Steering
Band Steering in ARM proactively encourages dual-band clients to connect to the less congested 5 GHz band.
Question 2: A network admin needs to verify that an Aruba controller is correctly forwarding RADIUS authentication requests. Which command shows RADIUS server reachability and statistics?
- show aaa authentication-server radius statistics (Correct answer)
- show radius server status
- show aaa radius debug
- show authentication server radius
Correct answer: show aaa authentication-server radius statistics
'show aaa authentication-server radius statistics' displays packet counts, success/failure rates, and server reachability for configured RADIUS servers.
Question 3: Which parameter in an Aruba SSID profile controls the maximum number of clients that can associate to a single AP radio?
- Max Clients per Radio (Correct answer)
- Client Threshold
- Max Associations
- Radio Client Limit
Correct answer: Max Clients per Radio
The 'Max Clients per Radio' setting in the SSID or AP radio profile caps concurrent client associations per radio.
Question 4: During troubleshooting, an admin runs 'show datapath session table' on an Aruba controller. What does this command reveal?
- Active forwarding sessions including source/destination IPs, ports, and flags (Correct answer)
- Wireless client association history
- VLAN membership of controller ports
- Current OSPF neighbor adjacencies
Correct answer: Active forwarding sessions including source/destination IPs, ports, and flags
The datapath session table shows all active Layer 4 sessions being forwarded through the controller's datapath engine.
Question 5: An Aruba Instant network uses an external RADIUS server for 802.1X. After adding a second IAP to the cluster, some clients fail authentication. What is the most likely cause?
- The RADIUS server's NAS client list does not include the new IAP's IP address (Correct answer)
- The IAP firmware version is incompatible with 802.1X
- The Virtual Controller IP changed after adding the AP
- The SSID is configured for PSK instead of 802.1X
Correct answer: The RADIUS server's NAS client list does not include the new IAP's IP address
RADIUS servers authenticate NAS clients by IP; if the new AP's IP is not added as an allowed NAS client, authentication requests are rejected.
Question 6: What is the purpose of configuring an 'AP whitelist' on an Aruba Mobility Master?
- To restrict which APs are allowed to terminate tunnels on managed controllers (Correct answer)
- To define allowed SSIDs that APs can broadcast
- To permit specific client MAC addresses to connect
- To whitelist IP subnets for AP management access
Correct answer: To restrict which APs are allowed to terminate tunnels on managed controllers
The AP whitelist on Mobility Master ensures only pre-approved APs (by MAC or serial) can establish GRE tunnels to managed controllers.
Question 7: A user reports intermittent connectivity on a voice call over Wi-Fi. The admin suspects roaming issues. Which Aruba feature should be verified to ensure fast Layer 2 roaming between APs?
- 802.11r Fast BSS Transition (FT) (Correct answer)
- Opportunistic Key Caching (OKC)
- 802.11k Neighbor Reports
- Client Match
Correct answer: 802.11r Fast BSS Transition (FT)
802.11r Fast BSS Transition pre-authenticates clients to neighboring APs, enabling sub-50ms roaming critical for voice applications.
An Aruba AP is configured for ARM (Adaptive Radio Management).
A technician notices clients on 2.4 GHz are experiencing high interference.
What ARM feature automatically moves clients to 5 GHz?