HPE6-A47 Exam Dumps : Designing Aruba Solutions

 A metal firewall is a significant RF obstacle that can be difficult to see visually and might require access to blueprints. A metal firewall is a type of fire-resistant barrier that is made of metal or metal-clad materials and is used to separate different sections of a building or a network. A metal firewall can block or attenuate RF signals that pass through it, causing coverage gaps, signal degradation, or interference in the wireless deployment. A metal firewall can also reflect RF signals, creating multipath fading or distortion in the wireless environment. Therefore, an architect needs to identify the location and thickness of any metal firewalls in the building and account for their impact on the RF design. A metal firewall may require additional access points, antennas, or cabling to provide adequate coverage and performance across the wireless deployment. A metal firewall may also affect the channel planning, transmit power settings, and antenna orientation of the access points and radios. A metal firewall can be difficult to see visually, as it may be hidden behind walls, ceilings, or floors, or blended with other materials.Therefore, an architect might need access to blueprints or other sources of information to locate and measure any metal firewalls in the building. References:

• RF Design | Validated Solution Guide - Aruba
• Managing and Optimizing RF Spectrum for Aruba WLANs | PDF - SlideShare
• RF Optimization - Aruba
• Advanced RF Design & Troubleshooting | PPT - SlideShare

An active site survey is a method of measuring and validating the wireless coverage, capacity, and performance of a network in a specific environment. It involves deploying temporary APs in the proposed locations, collecting data using a survey tool, and analyzing the results to optimize the network design. A heat map is a graphical representation of the wireless signal strength, interference, noise, or other metrics in different areas of the site. A heat map with proposed AP locations and actual tested coverage is a deliverable that shows the customer the expected performance of the new 802.11ac-based solution, and allows the architect to fine-tune the AP placement, channel selection, transmit power, and antenna orientation. This deliverable also helps the customer to verify that the network meets their requirements for coverage, capacity, and quality of service. References:

• Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47) - Chapter 5)
• Aruba Validated Reference Design: Wireless LAN Site Surveys - Chapter 3)
• Aruba Validated Reference Design: 802.11ac Networks - Chapter 4)

The customer needs a solution that can terminate VPN tunnels for Aruba RAPs, which are remote access points that connect to the corporate network over the Internet. The customer has only one public IP address, which means that they need to use NAT to forward the IPsec traffic to the device that will terminate the VPN tunnel. The customer also wants N+1 redundancy, which means that they need at least two devices that can act as backup for each other in case of failure.

The solution that meets the customer requirements is to use two Aruba MCs on the same subnet that use VRRP without clustering. VRRP stands for Virtual Router Redundancy Protocol, and it is a protocol that allows multiple devices to share a virtual IP address and act as a single gateway for the network. This way, the customer can use the virtual IP address as the public IP address for the NAT, and the IPsec traffic will be forwarded to the device that is the VRRP master. If the master device fails, the backup device will take over the role of the master and continue to terminate the VPN tunnels. This provides N+1 redundancy for the customer.

The other options are not suitable for the customer requirements:

• Option B is not suitable because a Layer 3 cluster requires two public IP addresses, one for each MC. The customer only has one public IP address, so they cannot use this option.
• Option C is not suitable because VRRP does not work across different subnets. The customer needs to have the MCs on the same subnet to use VRRP.
• Option D is not suitable because a Layer 2 cluster does not support NAT. The customer needs to use NAT to forward the IPsec traffic to the MCs.

References:

• Aruba Remote Access Point (RAP) Networks Validated Reference Design)
• Aruba Mobility Controller Virtual IP Configuration Guide)
• ArubaOS 8.5 User Guide)