ACMA Configuration & Troubleshooting of Aruba Solutions 5 — Questions and Answers
Question 1: An Aruba IAP cluster Virtual Controller IP is not reachable from the wired network. The IAP uplink is connected to an access port on VLAN 1. What is the most likely issue?
- The Virtual Controller IP is not on the same subnet as VLAN 1 or no default gateway is configured (Correct answer)
- The IAP needs to be rebooted to elect a new Virtual Controller
- The SSID profile is missing a VLAN assignment
- The IAP's DHCP lease has expired
Correct answer: The Virtual Controller IP is not on the same subnet as VLAN 1 or no default gateway is configured
If the Virtual Controller IP is not within the AP management subnet or lacks a gateway, it will be unreachable from other network segments.
Question 2: What is the role of the 'conductors' (formerly master) and 'members' hierarchy in ArubaOS 8 Mobility Master architecture?
- Mobility Master acts as the central policy manager while Managed Devices handle data plane forwarding (Correct answer)
- Mobility Master forwards all client traffic while Managed Devices handle policy
- Managed Devices manage APs and Mobility Master only handles licensing
- Both Mobility Master and Managed Devices equally share AP management and data forwarding
Correct answer: Mobility Master acts as the central policy manager while Managed Devices handle data plane forwarding
In ArubaOS 8, Mobility Master centralizes configuration and policy management while Managed Devices (controllers) handle local data plane forwarding for connected APs.
Question 3: A technician is configuring a captive portal on an Aruba controller. Users are redirected to the portal page but cannot reach the login page. What firewall rule must be present in the pre-authentication role?
- Permit DNS and HTTP/HTTPS to the captive portal server (Correct answer)
- Permit all traffic to any destination
- Permit ICMP to the default gateway only
- Permit RADIUS traffic to the authentication server
Correct answer: Permit DNS and HTTP/HTTPS to the captive portal server
Pre-authentication roles must allow DNS resolution and HTTP/HTTPS access to the captive portal server so users can reach the login page before authenticating.
Question 4: An admin needs to collect a packet capture on an Aruba AP for client troubleshooting. Which ArubaOS feature enables capturing wireless frames directly on the AP?
- AP Packet Capture using 'ap packet-capture' CLI command (Correct answer)
- RSPAN mirroring to a capture server
- Controller datapath pcap via 'datapath pcap enable'
- Wireshark plugin installed on the AP
Correct answer: AP Packet Capture using 'ap packet-capture' CLI command
ArubaOS supports on-AP packet capture via the 'ap packet-capture' CLI, allowing admins to capture 802.11 frames directly at the AP without additional hardware.
Question 5: In Aruba ClearPass Policy Manager, what is the function of an 'Enforcement Profile'?
- It defines the RADIUS attributes or actions returned to the NAD after a policy evaluation (Correct answer)
- It specifies which authentication protocols are allowed
- It maps usernames to VLAN assignments in a local database
- It configures the network device's 802.1X supplicant settings
Correct answer: It defines the RADIUS attributes or actions returned to the NAD after a policy evaluation
An Enforcement Profile in ClearPass defines the RADIUS VSAs, CoA actions, or VLAN assignments that are sent back to the Network Access Device after policy evaluation.
Question 6: A client cannot connect because the controller log shows 'association denied: max clients reached'. What is the recommended solution?
- Increase the max clients per radio limit or enable load balancing across APs (Correct answer)
- Reduce the beacon interval on the AP
- Switch the SSID from WPA2 to WPA3 to allow more clients
- Increase DHCP lease time to free up IP addresses faster
Correct answer: Increase the max clients per radio limit or enable load balancing across APs
When the maximum client threshold is reached, either raising the limit in the AP profile or enabling ARM/Client Match load balancing to distribute clients across APs resolves the issue.
Question 7: Which Aruba tool provides a graphical real-time RF visualization showing channel utilization, AP coverage, and client distribution across a floor plan?
- Aruba Central RF Dashboard or AirWave RF VisualRF (Correct answer)
- Aruba AirMatch RF planner
- Aruba Clarity AI engine
- NetEdit topology mapper
Correct answer: Aruba Central RF Dashboard or AirWave RF VisualRF
Aruba Central's RF Dashboard and AirWave's VisualRF module provide graphical floor plan views with real-time RF health, channel utilization, and client distribution overlays.
ACMA Configuration & Troubleshooting of Aruba Solutions 5
An Aruba IAP cluster Virtual Controller IP is not reachable from the wired network.
The IAP uplink is connected to an access port on VLAN 1.
What is the most likely issue?