Exam HPE6-A68 topic 1 question 34 discussion

Actual exam question from HP's HPE6-A68

Question #: 34
Topic #: 1

A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage. 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statement is true? (Choose two.)

A. Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.
B. The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.
C. The NAD should be configured with the primary node IP address for RADIUS authentications on the 802.1x network.
D. A new Virtual IP address should be created for each NAD.
E. The NAD should be configured with the virtual IP address for RADIUS authentications on the 802.1x network.

Show Suggested Answer

Suggested Answer: BE 🗳️

by hujinki at Aug. 25, 2022, 8:42 a.m.

Comments

Submit Cancel

Fyrith

2 years, 2 months ago

Selected Answer: BE

If you have two virtual IPs, you can just have no virtual IP, it defeats the whole purpose... I think BE makes the most sense here.

upvoted 2 times

...

tezk

2 years, 7 months ago

Selected Answer: BE

from comments under Herman's video (from Jo2241 cooment): "Herman Robers There is no real need. If you want to load-balance between the two devices, it may be good to have two virtual IPs which can mutually fail over. For just redundancy, a single VIP is fine. And you can also still use the radius server backup in your switches, APs, etc, but that in general is slower than a virtual IP on the ClearPass. I found that this works for me, in other situations different approaches may work. Also, if you are at the point where the choice between one or multiple VIPs really makes impact, you probably should have a look at an external network load balancer as that is even faster and much more flexible in how you route/distribute your traffic." BE is correct

upvoted 2 times

...

Jo2241

2 years, 7 months ago

Selected Answer: DE

We should have 2 VIP for redundancy, see Herman's video around 6:00 https://www.youtube.com/watch?v=yUTZcDwaEvM

upvoted 1 times

...

hujinki

2 years, 9 months ago

Selected Answer: BE

Virtual IP redundancy is an "active / passive" feature. Only one Clearpass server can answer to requests sent to the virtual IP. The NAD must send his requests to the virtual IP in order to benefit from redundancy. Answers are B and E

upvoted 1 times

...