Exam 13: Selling Aruba Products and Solutions

Case study A retailer needs a wireless and wired network upgrade, as well as an authentication and access control solution for a network that includes a main office with a three-floor building and six branch sites. The branch users all use resources at the main corporate office. Branch office employees will use wireless connections. At the main office, employees use wired and wireless connections. The customer wants the strongest authentication for employee wireless connections. It is also important that the MC role-based firewall can implement consistent access controls on employee connections no matter where the employees connect and no matter how they connect (wirelessly or, at the main site, wired). The customer also needs to provide complimentary wireless access for guests. Guest should be redirected to a portal, through which they can register and login. The customer would like two SSIDs, CompanyXEmployee and CompanyXGuest. The company wants to divide employees in two groups, managers and staff. In the corporate network, managers should only have access to Server Group Managers and staff should only have access to Server Group Staff. Each server group includes necessary services such as domain and DHCP, as well as servers that the employees access to do their jobs. All employees should also have access to the Internet. Guests should only have HTTP and HTTPS access, and only to the Internet. The customer has: • a maximum of 1000 employee devices • a maximum of 100 guest devices at the same time • 500 devices on wired ports at the main site, which will be supported by 12 new AOS-Switches (mostly employee laptops, as well as a few non-802.1X capable printers, which should just communicate with print servers) The devices used by employees include 450 company-issued laptops, which the company wants to screen for security issues and violations of security policies. All authentications are assumed to be concurrent. To fulfill the requirements for the wireless network upgrade, the architect plans to propose: • 5 RAPs at each of 6 branch sites • 60 APs at the main site The architect will also propose an MM and ClearPass. The architect still needs to plan the Mobility Controllers (MCs). The customer requires high availability for wireless services and redundancy for the MCs. If a single MC fails, the network must continue to function without impact. If an MC fails, the customer must also receive a replacement component for the failed component by the next business day so that their IT staff can install it and get the network back to normal operation as soon as possible. Software upgrades must also be seamless, without the introduction of any downtime for wireless services, and the customer needs to be able to obtain the latest software over the lifetime of the solution for the next several years. Which plan for the VLANs assigned to users at the main site follows the best practices? (Note that the infrastructure could have additional VLANs in various locations; this plan refers only to user VLANs.)

A customer has multiple, very small branch sites that require just one or two APs each. The office has a local Internet connection, but the traffic is destined to the corporate data center, which has an Aruba wireless solution. Which branch office solution best meets the customer needs?

Case study A customer needs a wireless network upgrade for 802.11ac and possibly an upgrade to the wired network. The customer requires dual-radio 802.11ac APs, each radio of which can support 4x4 MIMO at full feature set. The customer has given architects this information about their wireless devices: 2700 IoT devices which will have only wireless connections; they support WPA2 with 802.1X 300 on each floor in 3 buildings with 3 floors each 5,400 users, who use devices such as laptops and smartphones 600 users on each floor in 3 buildings with 3 floors each 24 security cameras which will have only wireless connections; they support WPA2 with 802.1X and have a local power source 4 on floor 1 of each of the 3 buildings 2 on the other 6 floors T he architect also has collected information about the existing wired network. The existing access layer switches support these features: 10/100/1000 edge ports PoE (802.3af) 1GbE fiber uplinks The existing aggregation switches support these features: 1/10GbE fiber ports ARP tables up to 62,000 The customer has provided this figure that shows the existing cabling between floors and between buildings: Each floor is about 100 feet (30 m) by 140 feet (43 m) with a 10 foot (3 m) ceiling. Interior walls are drywall. The layout for each floor is similar to that shown below. CAT5e cable is extended to all areas. What is one piece of additional information architects should obtain from the customer before they design the wireless solution?

Refer to the exhibit. A customer has these availability requirements: loss of one controller with stateful failover and without impact on wireless client connectivity loss of one core switch without loss of connectivity for any endpoints or APs in the building loss of any one switch-to-switch or MC-to-switch link without loss of connectivity for any endpoints or APs in the building and with minimal impact on infrastructure functionality loss of any one access switch with minimal impact to wireless client connectivity The exhibit shows the current plan for the topology. Which change should the architect make to the plan to provide better support for the customer availability requirements?

Refer to the exhibit. A museum wants to add full 802.11ac wireless coverage across the building, which is about 210 feet (64 m) by 330 feet (100m). The museum has 15-foot (4,6 m) ceilings and stone interior walls. The network needs to support up to 600 wireless guest devices. The exhibit also shows a preliminary plan for AP locations. The museum has eight Ethernet drops in the lobby and gift shop, but has otherwise not been wired. What is one recommendation that the architect should make to ensure a successful deployment?

What is one reason that an architect might choose to use pico-cell coverage rather than overhead in a stadium?

A university has a dormitory with several floors. Currently APs are deployed in the hallways about every 50 feet (15m). The university has several issues with the existing network: Students complain that the network is very slow, and the wireless signal is poor. Students want to connect some equipment such as gaming consoles and IP TVs on Ethernet, but the dorm rooms just have one Ethernet port. How does the deployment of AP303Hs resolve the customer issues?

Refer to the exhibit. A customer needs a wired network upgrade and has complained about performance issues. The architect has collected information about traffic flow on several switch ports in different locations across the network, and the results are shown in the exhibit. Each of these ports is a 1Gbps port. What can the architect conclude?

A customer has an existing Aruba network, which currently supports up to 9,000 wireless client devices. The existing network includes these components: Four 7210 MCs Five 7030 MCs 200 AP-303HRs 300 AP-345s The customer wants to convert to an ArubaOS 8.x architecture. The architect plans to deploy a virtual MM. Which exhibit shows the correct BOM for the MM?

A school district has instant APs (IAPs) at multiple locations. The school district wants a simpler way to manage the IAPs from a single location. However, it does not have the IT staff to handle the installation and management of a management solution on site. What should the architect recommend?

A retailer currently has two redundant ClearPass C2000 DL360 Gen9 hardware appliances and two perpetual 1K Access licenses. The customer uses ClearPass to authenticate employee wireless devices and other corporate wireless devices. ClearPass logs indicate that peak license usage is currently 1900. The customer now wants to add a guest access solution. Guests will connect to an open SSID and redirected to a portal which they can use to self-register and log in. The customer anticipates that up to 1550 guest devices will connect at the same time. The customer requires the most cost-effective solution that will meet the requirements. What should the network architect recommend for this solution?

Refer to the exhibit. A casino and a retail space has an existing Aruba network with Aruba AP-335s. The customer wants to deploy Meridian and enable proximity-based campaigns. The exhibit shows a segment of the floor plan. When visitors enter the areas circled in the exhibit, they should receive a targeted notification about promotions and sales. What should the architect explain to the customer about how to finish the solution?

Refer to the exhibit. A mall has an existing Aruba solution with 15 AP-335s. The mall now wants to add Meridian and location-based services, in particular blue dot wayfinding. The customer plans to use the built-in beacon in the existing AP radios. These Meridian licenses have been proposed: 1x Aruba Meridian Maps 1x Aruba Meridian Blue Dot Nav Which concern should the architect raise about this plan?

A customer has multiple medium and large branch sites, each of which requires between 8 and 16 APs and supports between 200 and 600 wireless clients. Every branch site has an internet connection, which it uses to reach the central data center. The customer would prefer the WAN links to be optimized in the solution. Each side handles between 1 and 2 Gbps of traffic, most of which goes to the central data center. The data center has 7210 controllers for terminating the VPN connections. Which branch office solution best meets the customer needs?

Refer to the exhibit. A customer needs a network upgrade. The customer has these availability requirements for wireless access: One MC and one core switch can fail with immediate, stateful failover for client connections. Network upgrades can occur without the requirement of a maintenance window. The exhibit shows the architecture plan. Which technologies should the architect recommend?

A customer requires new MCs for a large multi-site network with about 600 AP-345s and 30,000 wireless clients. The customer requires redundancy for the MCs with each MC being able to handle the full load in a failover situation. The network should be able to sustain the loss of a controller with stateful failover within seconds. It should be able to undergo software upgrades without downtime. The architect has recommended two 7240XM MCs. The customer points out that 7220 MCs can support enough APs and wonders why the architect recommended the 7240XMs. What should the architect explain?

A company currently has 45 IAP-315 at a remote site. These IAPs connect to the main office on a WAN link and use an IPsec VPN to an MC. The company has determined that it needs better optimization and higher VPN throughput for traffic sent to the main office. What should the network architect propose to fill this gap?

Refer to the exhibits. Exhibit 1. Existing wiring plan: Exhibit 2. Current proposal: A customer has a building that needs a switch upgrade. The customer would like at least 20Gbps for the uplink bandwidth out of each closet. The building writing plan is shown in Exhibit 1. The customer will not consider any cable upgrades at this point. The current proposal is shown in Exhibit 2. Which correction must architect make to the proposal to meet the customer requirements?

Case study A retailer needs a wireless and wired network upgrade, as well as an authentication and access control solution for a network that includes a main office with a three-floor building and six branch sites. The branch users all use resources at the main corporate office. Branch office employees will use wireless connections. At the main office, employees use wired and wireless connections. The customer wants the strongest authentication for employee wireless connections. It is also important that the MC role-based firewall can implement consistent access controls on employee connections no matter where the employees connect and no matter how they connect (wirelessly or, at the main site, wired). The customer also needs to provide complimentary wireless access for guests. Guest should be redirected to a portal, through which they can register and login. The customer would like two SSIDs, CompanyXEmployee and CompanyXGuest. The company wants to divide employees in two groups, managers and staff. In the corporate network, managers should only have access to Server Group Managers and staff should only have access to Server Group Staff. Each server group includes necessary services such as domain and DHCP, as well as servers that the employees access to do their jobs. All employees should also have access to the Internet. Guests should only have HTTP and HTTPS access, and only to the Internet. The customer has: a maximum of 1000 employee devices a maximum of 100 guest devices at the same time 500 devices on wired ports at the main site, which will be supported by 12 new AOS-Switches (mostly employee laptops, as well as a few non-802.1X capable printers, which should just communicate with print servers) The devices used by employees include 450 company-issued laptops, which the company wants to screen for security issues and violations of security policies. All authentications are assumed to be concurrent. To fulfill the requirements for the wireless network upgrade, the architect plans to propose: 5 RAPs at each of 6 branch sites 60 APs at the main site The architect will also propose an MM and ClearPass. The architect still needs to plan the Mobility Controllers (MCs). The customer requires high availability for wireless services and redundancy for the MCs. If a single MC fails, the network must continue to function without impact. If an MC fails, the customer must also receive a replacement component for the failed component by the next business day so that their IT staff can install it and get the network back to normal operation as soon as possible. Software upgrades must also be seamless, without the introduction of any downtime for wireless services, and the customer needs to be able to obtain the latest software over the lifetime of the solution for the next several years. Which plan for authentication meets the customer needs?

Compare the scenarios below. For which scenario do AP-365s meet the needs?