What should you set up on the APs to help the solution function correctly?

A company has HPE Aruba Networking APs (AOS-10), which authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is set up to receive a variety of information about clients’ profile and posture. New information can mean that CPPM should change a client’s enforcement profile.

What should you set up on the APs to help the solution function correctly?
A . In the security settings, configure dynamic denylisting.
B . In the RADIUS server settings for CPPM, enable Dynamic Authorization.
C . In the WLAN profiles, enable interim RADIUS accounting.
D . In the RADIUS server settings for CPPM, enable querying the authentication status.

View Answer

Answer: B

Explanation:

To ensure that HPE Aruba Networking APs (AOS-10) properly interact with HPE Aruba Networking ClearPass Policy Manager (CPPM) and dynamically update a client’s enforcement profile based on new profile and posture information, you should enable Dynamic Authorization in the RADIUS server settings for CPPM. This allows ClearPass to send Change of Authorization (CoA) requests to the APs, prompting them to reapply the appropriate enforcement profiles based on updated information.