ACSP Access Control Lists (ACLs) 4

Question 1

In Aruba AOS-CX, which command correctly creates a named IPv4 ACL called 'RESTRICT_GUEST'?

Accepted Answer

ip access-list RESTRICT_GUEST

Answer

On Aruba AOS-CX, 'ip access-list <name>' enters ACL configuration mode to define an IPv4 named ACL.

Question 2

On an Aruba AOS-CX switch, how is an ACL applied to a VLAN interface in the inbound direction?

Accepted Answer

Under the VLAN interface: 'ip access-group <name> in'

Answer

On AOS-CX, you navigate to the VLAN interface and use 'ip access-group <name> in' to apply an IPv4 ACL inbound.

Question 3

What is the effect of adding the 'log' action to an ACE on an Aruba switch?

Accepted Answer

Matching packets are forwarded with a syslog entry generated

Answer

The 'log' keyword generates a syslog message for each matching packet but does not change the permit or deny action of the ACE.

Question 4

Which Aruba ACL type is specifically designed to filter traffic based on EtherType values such as ARP or IPv6?

Accepted Answer

MAC ACL with EtherType matching

Answer

MAC ACLs on Aruba switches support EtherType matching, enabling filtering of specific Layer 2 protocols like ARP (0x0806) or IPv6 (0x86DD).

Question 5

On an Aruba switch, an ACL applied to a LAG (Link Aggregation Group) is enforced on which ports?

Accepted Answer

All member ports of the LAG simultaneously

Answer

An ACL applied to a LAG interface is enforced on all member ports simultaneously, ensuring consistent filtering across the aggregated link.

(ACSP) Aruba Certified Switching Professional Practice Test