HPE6-A78 practice question 10 of 25

You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know…

You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?

Answer options

A: Make sure that CPPM cluster settings are configured to show Access-Rejects Correct answer

B: Verify that you are logged in to the CPPM Ul with read-write, not read-only, access

C: Click Edit in Access viewer and make sure that the correct servers are selected.

D: Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

Correct Answer:

A. Make sure that CPPM cluster settings are configured to show Access-Rejects

Explanation

In a ClearPass cluster, if Access-Rejects are not appearing in the Access Tracker, it is often due to logging settings. The RADIUS server service parameters may be configured to not log dropped or rejected requests. This setting can be managed on a per-server basis or via cluster-wide parameters. By ensuring the cluster settings (or specific server settings) are configured to log these events, the Access-Rejects will become visible in the Access Tracker for troubleshooting purposes.

Why Incorrect

B. Read-only access restricts configuration changes but does not prevent viewing of existing logs like those in the Access Tracker.
C. While filtering by server is possible, the issue describes a complete absence of records, which points to a logging configuration problem, not a view filter.
D. The Event Viewer is for system-level events (e.g., service restarts), not for detailed RADIUS authentication transaction logs like accepts or rejects.

References

1. Aruba ClearPass Policy Manager 6.9 User Guide, Page 631, "Access Tracker": "The Access Tracker page... displays authentication, authorization, and accounting records."

2. Aruba ClearPass Policy Manager 6.8 User Guide, Page 113, "Editing Service Parameters": Describes service parameters including "Log requests to be dropped or rejected" for the RADIUS server, which controls this behavior.

Keep practicing

Take the free HPE6-A78 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test