What does HPE Aruba Networking recommend as the preferred method for assigning clients to a role on the AOS firewall?

A company has HPE Aruba Networking APs, which authenticate users to HPE Aruba Networking ClearPass Policy Manager (CPPM).

What does HPE Aruba Networking recommend as the preferred method for assigning clients to a role on the AOS firewall?

A. Configure CPPM to assign the role using a RADIUS enforcement profile with a RADIUS: IETF Username attribute.

B. Configure CPPM to assign the role using a RADIUS enforcement profile with an Aruba-User-Role VSA.

C. OCreate server rules on the APs to assign clients to roles based on RADIUS IETF attributes returned by CPPM.

D. Create user rules on the APs to assign clients to roles based on a variety of criteria.

View Answer

Answer: B

Explanation:

The preferred method for assigning clients to a role on the AOS firewall is to configure HPE Aruba Networking ClearPass Policy Manager (CPPM) to assign the role using a RADIUS enforcement profile with an Aruba-User-Role VSA (Vendor-Specific Attribute). This method allows ClearPass to dynamically assign the appropriate user roles to clients during the authentication process, ensuring that role-based access policies are consistently enforced across the network.