A Microsoft RADIUS server is used to centralize AAA functions by a company. Upon a successful authentication lookup performed by an Aruba Mobility Controller (MC), the administrator wants to have the RADIUS server pass back the correct post-authentication role name that the controller should apply to the user’s traffic.
Which additional task must the administrator perform for the controller’s configuration to implement this process?
A. Configure the server-derived rules on the controller.
B. Install ClearPass’s VSA file on the controller.
C. Install Microsoft’s VSA file on the controller.
D. Enable AAA on the controller.
A is correct
You will use the server derived rule by using Filter-ID to map it to a role in the controller.
if no Filter-ID matches were found, then the default authentication role is applied
شكرا 🙂