HPE Aruba Certified Switching Expert (ACSX) — Question 40

A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage. 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statement is true? (Choose two.)

Answer options

• A. Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.
• B. The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.
• C. The NAD should be configured with the primary node IP address for RADIUS authentications on the 802.1x network.
• D. A new Virtual IP address should be created for each NAD.
• E. The NAD should be configured with the virtual IP address for RADIUS authentications on the 802.1x network.

Correct answer: B, E

Explanation

The correct answer is B because only the primary node handles authentication requests when it is active, ensuring proper response management. E is also correct as the NAD must be set to the virtual IP for effective RADIUS authentication, allowing seamless failover. Options A, C, and D are incorrect as they either misrepresent the role of the nodes or suggest unnecessary configurations.