ExamGecko
Search Search Login
Home Home / HP / HPE7-A01
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which component is used by the Aruba Network Analytics Engine (NAE)?
Which standard supported by some Aruba APs can enable a customer to accurately locate wireless client devices within a few meters?
Your customer currently has Iwo (2) 5406 modular switches with MSTP configured as their core switches. You are proposing a new solution. What would you explain regarding the Aruba CX VSX switch pair when the Primary VSX node is replaced and the system MAC is replaced?
For an Aruba AOS10 AP in mixed mode, which factors can be used to determine the forwarding role assigned to a client? (Select two.)
For the Aruba CX 6400 switch, what does virtual output queueing (VOQ) implement that is different from most typical campus switches?
You need to drop excessive broadcast traffic on an ingress port or an ArubaOS-CX switch. What is the best feature to use for this task?
A customer just upgraded aggregation layer switches and noticed traffic dropping for 120 seconds after the aggregation layer came online again. What is the best way to avoid having this traffic dropped given the topology below?
You are doing tests in your lab and with the following equipment specifications: * AP1 has a radio that generates a 20 dBm signal * AP2 has a radio that generates a 8 dBm signal * AP1 has an antenna with a gain of 7 dBI. * AP2 has an antenna with a gain of 12 dBI. * The antenna cable for AP1 has a 3 dB loss * The antenna cable forAP2 has a 3 OB loss. What would be the calculated Equivalent Isotropic Radiated Power (EIRP) for AP1?
When configuring UBT on a switch what will happen when a gateway role is not specified?
Which statements regarding 0SPFv2 route redistribution are true for Aruba OS CX switches? (Select two.)

Question 79 - HPE7-A01 discussion

Report
Export

In AOS 10. which session-based ACL below will only allow ping from any wired station to wireless clients but will not allow ping from wireless clients to wired stations'? The wired host ingress traffic arrives on a trusted port.

A.
ip access-list session pingFromWired any user any permit
Answers
A.
ip access-list session pingFromWired any user any permit
B.
ip access-list session pingFromWired user any svc-icmp deny any any svc-icmp permit
Answers
B.
ip access-list session pingFromWired user any svc-icmp deny any any svc-icmp permit
C.
ip access-list session pingFromWired any any svc-icmp permit user any svc-icmp deny
Answers
C.
ip access-list session pingFromWired any any svc-icmp permit user any svc-icmp deny
D.
ip access-list session pingFromWired any any svc-icmp deny any user svc-icmp permit
Answers
D.
ip access-list session pingFromWired any any svc-icmp deny any user svc-icmp permit
Suggested answer: D

Explanation:

A session-based ACL is applied to traffic entering or leaving a port or VLAN based on the direction of the session initiation. To allow ping from any wired station to wireless clients but not vice versa, a session-based ACL should be used to deny icmp echo traffic from any source to any destination, and then permit icmp echo-reply traffic from any source to user destination. The user role represents wireless clients in AOS 10.

Reference: https://techhub.hpe.com/eginfolib/Aruba/OS-CX_10.04/5200-6692/GUID-BD3E0A5F-FE4C-4B9B-BE1D-FE7D2B9F8C3A.html https://techhub.hpe.com/eginfolib/networking/docs/arubaos-switch/security/GUID-EA0A5B3C-FE4C-4B9B-BE1D-FE7D2B9F8C3A.html

Show Answer
asked 16/09/2024
Tim Baas
31 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms