ACP Network Management and Troubleshooting 2 — Questions and Answers
Question 1: An Aruba controller shows that an AP is in 'ip-assigned' state but never reaches 'up' state. What is the most likely cause?
- The AP cannot reach the TFTP server for firmware download
- The PAPI communication between AP and controller is being blocked by a firewall (Correct answer)
- The AP's radio is disabled in the AP group profile
- The AP has an incorrect subnet mask configured
Correct answer: The PAPI communication between AP and controller is being blocked by a firewall
PAPI (UDP 8211) must be open between the AP and controller; blocking it prevents the AP from completing its bootstrap beyond ip-assigned.
Question 2: When using Aruba Central, which feature allows administrators to run CLI commands on multiple APs simultaneously without opening individual SSH sessions?
- Config Groups
- AIOps Insights
- Device Bulk Actions / Remote Console (Correct answer)
- Network Health Dashboard
Correct answer: Device Bulk Actions / Remote Console
Aruba Central's Device Bulk Actions (Remote Console) lets admins execute CLI commands across multiple devices in a single operation.
Question 3: A network admin notices high retry rates on a 5 GHz SSID. Which Aruba AirMatch or ARM feature should be tuned first to address co-channel interference?
- Band steering aggressiveness
- Channel and transmit power reoptimization interval (Correct answer)
- Minimum RSSI threshold for client association
- RTS/CTS threshold value
Correct answer: Channel and transmit power reoptimization interval
Reducing the AirMatch/ARM reoptimization interval allows the system to reassign channels and power levels more frequently to resolve interference.
Question 4: In Aruba ClearPass, which log file is most useful for diagnosing a failed 802.1X authentication attempt?
- /var/log/cpass/radius.log
- Access Tracker under Monitoring (Correct answer)
- Event Viewer under Administration
- ClearPass Insight reports
Correct answer: Access Tracker under Monitoring
Access Tracker in ClearPass provides real-time and historical authentication request details, including failure reasons and policy evaluation steps.
Question 5: A customer reports that clients connected to an Aruba AP can reach the internet but not internal servers after a VLAN reconfiguration. What should be verified first?
- AP group SSID VLAN tagging and upstream trunk port configuration (Correct answer)
- Client DNS server settings
- Controller license count
- AP channel utilization
Correct answer: AP group SSID VLAN tagging and upstream trunk port configuration
Mismatched VLAN tagging between the AP/controller SSID profile and the upstream switch trunk port is the most common cause of selective connectivity loss after VLAN changes.
Question 6: Which Aruba Mobility Controller CLI command displays real-time statistics for a specific client including signal strength, data rate, and frame counts?
- show ap association (Correct answer)
- show user-table
- show ap monitor ap-list
- show datapath session
Correct answer: show ap association
'show ap association' provides per-client RF statistics including RSSI, data rate, and frame counters from the AP's perspective.
Question 7: An Aruba controller cluster node is showing 'standby' for all SSIDs unexpectedly. What is the first diagnostic step?
- Reboot the standby node immediately
- Check cluster heartbeat link status and verify the active node is reachable (Correct answer)
- Reload the SSID profiles from backup
- Disable and re-enable the cluster feature
Correct answer: Check cluster heartbeat link status and verify the active node is reachable
A node stuck in standby usually indicates a failed heartbeat link or an active node that is unreachable; verifying connectivity is the correct first step before any remediation.
ACP Network Management and Troubleshooting 2
An Aruba controller shows that an AP is in 'ip-assigned' state but never reaches 'up' state.
What is the most likely cause?