A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to…

ArubaOS-Switches can use sFlow technology to sample network traffic and send the samples to a

collector, such as ClearPass Policy Manager (CPPM), for analysis. sFlow can be configured to capture

various types of traffic, including HTTP, which typically contains User-Agent strings that can be used

for device fingerprinting and classification.

To support the requirement for using HTTP User-Agent strings to classify endpoints, the switches

would need to be configured to send sFlow samples containing HTTP traffic to CPPM. CPPM would

then analyze these samples and use the User-Agent strings to classify the devices.

Therefore, the correct action to configure ArubaOS-Switches would involve:

Configuring CPPM as the sFlow collector on the switches.

Enabling sFlow on the edge ports that connect to endpoints.

This approach allows the network traffic to be analyzed by CPPM without requiring any additional

mirroring or redirection of traffic, which would be resource-intensive and potentially disruptive to

network performance.

Reference: Information on configuring sFlow on ArubaOS-Switches is typically available in the official

Aruba documentation provided by Hewlett Packard Enterprise (HPE).