HPE7-A07 Sample Questions & Answers

Routes originated locally within the BGP process on the Aruba CX switch will have an empty AS-Path. Routes learned from other internal BGP (iBGP) peers or external BGP (eBGP) peers will have one or more AS numbers in the path. To advertise only locally originated routes, the administrator should create a route map that permits routes matching an empty AS-Path (often represented by the regex ^$) and denies all others. MED and Local Preference are used for influencing inbound traffic, and weight is for local path selection.

Virtual Switching Extension (VSX) is Aruba's virtualization technology that allows two supported switches to appear as a single logical device to the rest of the network. It provides active-active forwarding paths, enabling the use of all available bandwidth and eliminating the need for Spanning Tree Protocol (STP) between the core and access layers through multi-chassis link aggregation (MC-LAG). VSX is designed for high availability with sub-second failover. VRF is for network segmentation, VRRP is for active-standby gateway redundancy, and VSF is a stacking technology for different switch models.

AirWave's Configuration Audit and Compliance feature is specifically designed for this purpose. It allows administrators to define a 'golden' or desired configuration template and then audit devices against it. The compliance engine can flag any deviations, such as the use of a forbidden authentication method like PSK, and can be configured to automatically remediate the configuration. Triggers and Alerts are for monitoring device status, VisualRF is for location and heatmaps, and RAPIDS is for rogue AP detection.

The EVPN Type 5 route, or IP Prefix Route, is specifically used to advertise IP prefixes (routes) between different VNIs, enabling Layer 3 routing across the fabric. Type 2 routes advertise MAC and IP addresses of hosts within a single VNI for Layer 2 forwarding. Type 3 routes are used for BUM traffic handling. Type 1 routes are for auto-discovery and multihoming. Therefore, Type 5 is the correct answer for inter-VNI routing.

When diagnosing RF performance issues, SNR, PHY Rate, and Retransmission Rate are the most critical metrics. A low SNR indicates a poor quality signal. A low PHY (data) rate indicates the client and AP have negotiated a slow connection speed, often due to poor signal. A high Retransmission Rate (Retries) indicates that frames are being corrupted in transit, usually due to interference or weak signal, which severely impacts throughput. Association Time and IP address are relevant for connectivity but not primary indicators of RF performance.

QoS policies that classify and queue traffic are applied to interfaces where contention (congestion) can occur. To prioritize traffic as it enters the network from the source (the IP phone), the policy must be applied on the physical switch port in the inbound direction. This allows the switch to immediately classify the traffic based on its DSCP marking and place it into the appropriate priority queue before it is switched or routed. Applying it outbound on an SVI or uplink would only affect traffic after it has already traversed part of the switch.

ArubaOS-CX roles use a sequence of permit/deny rules, similar to an ACL. To allow all show commands but nothing else, the correct approach is to create a rule that explicitly permits any command starting with 'show' (show .*) and then a subsequent, broader rule that denies all other commands (.*). This creates a secure, least-privilege role. Simply permitting 'show' or denying 'configure' would not be specific enough and could have unintended consequences due to implicit rules.

In high-density environments, airtime is the most precious resource. Clients communicating at low data rates consume a disproportionately large amount of airtime to transmit the same amount of data as a fast client. Disabling lower data rates forces clients to connect at higher speeds, which reduces their airtime consumption. A secondary effect is that it effectively shrinks the usable cell size, as clients with weak signals (who would use low rates) can no longer associate, which helps reduce co-channel interference.

In OSPF, inter-area route summarization is performed on the Area Border Routers (ABRs). An ABR connects one or more non-backbone areas to the backbone (Area 0). By configuring summarization on the ABR, it advertises a single summary route (Type 3 LSA) into the backbone area instead of multiple specific routes from its attached area. This reduces the LSDB size and routing table complexity in other areas. ASBRs summarize external routes, not internal inter-area routes.

This is the most comprehensive and modern solution. BGP EVPN provides the standards-based, scalable control plane. Using separate VNIs provides Layer 2 segmentation. Mapping these VNIs to different VRFs provides robust Layer 3 isolation. A 'Corporate' VRF can contain routing information for all internal departments, allowing inter-VNI routing, while a separate 'Guest' VRF ensures the guest network is completely isolated with its own routing table, which can be configured with only a default route to the internet. This design meets all requirements natively within the fabric.