A financial institution contacts an Aruba partner to deploy an advanced and secure Mobility Master (MM)-Mobility Controller (MC) WLAN solution in its main campus and 14 small offices/home offices (SOHOs). Key requirements are that users at all locations, including telecommuters with VIA, should be assigned roles with policies that filter undesired traffic. Also, advanced WIPs should be enforced at the campus only.
These are additional requirements for this deployment:
RAPs should ship directly to their final destinations without any pre-setup and should come up with the right configuration as soon as they get Internet access.

Activate should be configured with devices MACs, serial numbers, and provisioning rules that redirect them to the standalone VMC at the DMZ

Users should be able to reach DNS, FTP, Web and telephone servers in the campus as well as send and receive IP telephone calls to and from the voice

10.1.50.0/24 segment.
Local Internet access should be granted.

Refer to the exhibit.

Refer to the scenario and the exhibit.
What is the minimal license capacity in use to support this proposal?

• A.
  
• B.
  
• C.
  
• D.
  

Refer to the exhibit.

A network administrator deploys a Mobility Master (MM)-Mobility Controller (MC) solution in the headquarters. The network administrator prepares the wired side of the network with the proper VLAN, DHCP settings, and routing services to ensure that APs can reach the MCs.
The network administrator connects two APs in different IP segments and waits for 20 minutes, but SSIDs are advertised in one of the APs only. The engineer logs into the MC console and sees the output shown in the exhibit.
What is the reason that the AP20 is not broadcasting SSIDs?

• A. IKE traffic is being dropped.
• B. IPSec traffic is being blocked.
• C. GRE traffic is being blocked.
• D. PAPI traffic is being blocked.

Refer to the exhibit.

A network administrator is in charge of a wired and wireless Aruba network where access control is needed for both connection methods. For the wired solution, the network administrator wants the users authentication to be performed at the switches, while tunneling their traffic to MC1 whenever possible for firewall policy enforcement. The network administrator configures and tests ClearPass as the RADIUS server in the switches.
Which switch configuration scripts should the network administrator use next to achieve this goal?

• A. tunneled-node-server
  controller-ip 10.20.10.100
  backup-controller-ip 10.19.10.100
  aaa authentication port-access eap-radius
  aaa port-access authenticator 1-22
  aaa port-access authenticator active
• B. tunneled-node-server
  controller-ip 10.19.10.100
  backup-controller-ip 10.20.10.100
  mode role-based
  aaa authentication port-access eap-radius
  aaa port-access authenticator 1-22
  aaa port-access authenticator active
• C. tunneled-node-server
  controller-ip 10.20.10.100
  backup-controller-ip 10.19.10.100
  mode port-based
  aaa authentication port-access eap-radius
  aaa port-access authenticator 1-22
  aaa port-access authenticator active
• D. tunneled-node-server
  controller-ip 10.19.10.100
  backup-controller-ip 10.20.10.100
  aaa authentication port-access eap-radius
  aaa port-access authenticator 1-22
  aaa port-access authenticator active

Refer to the exhibits.
Exhibit 1

Exhibit 2

Exhibit 3

A network administrator deploys a Mobility Master (MM) pair with the VRRP VIP equal to 10.254.10.214, and attempts to associate MC1 to it. At first, the integration appears to be successful. However after a few minutes the network administrator issues the show switches command and sees that the MC1 is down, even though the device is up and running.
Every time the network administrator reboots the Mobility Controller (MC), the MC shows as being up and then it shows as being down. The network administrator gathers the information shown in the exhibits.
What should the network administrator do to resolve this problem?

• A. Change the localip ipsec key to Aruba123 in the mynode device level from the MM, save, and reboot.
• B. Enable disaster recovery mode in MC1 and change the masterip ipsec key to Aruba 123, save, and reboot.
• C. Change the masterip ipsec key to Aruba123 in the device level from the MM, save, then reboot MC1.
• D. Wipe out the configuration in MC1 and reboot, then run the full-setup configuration dialog all over again.