The Aruba Policy Enforcement Firewall (PEF) module supports destination network address
translation (dst-nat).
Which is a common use of this statement in an Aruba configuration?

Which of the following statements allows a user to initiate an HTTP session to other devices?

What are aliases used for?

Which netdestination aliases are built into the controller? (Choose all the correct answers.)

Which describe “roles” as used on Aruba Mobility Controllers? (Choose all the correct answers.)

Refer to the following configuration segment for this item.
netdestination “internal”
no invert
network 172.16.43.0 255.255.255.0 position 1
range 172.16.11.0 172.16.11.16 position 2
!
ip access-list session “My-Policy”
alias “user” alias “internal” service_any permit queue low
!
A user frame is evaluated against this access-list with the following attributes:
Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80
Referring to the above file segment, how will the frame be handled by this access-list?

Refer to the following configuration segment for this item.
ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user host 10.1.1.1 any deny
user any any permit
Based on the above Aruba Mobility Controller configuration segment, which statements best
describe this policy? (Choose all the correct answers.)

Review the following truncated output from an Aruba controller for this item.
(Example) #show rights logon
Derived Role = ‘logon’
Up BW:No Limit Down BW:No Limit
L2TP Pool = default-l2tp-pool
PPTP Pool = default-pptp-pool
Periodic reauthentication: Disabled
ACL Number = 1/0
Max Sessions = 65535

Based on the above output from an Aruba controller, an unauthenticated user assigned to the
logon role attempts to start an http session to IP address 172.16.43.170.
What will happen?

The network administrator wishes to terminate the VPN encryption on the Aruba controller.
When writing a firewall rule to accomplish the task of automatically moving the VPN traffic for the
wireless clients from a third party VPN concentrator to an Aruba controller, which action needs to
be configured in the rule?

The Aruba Policy Enforcement Firewall (PEF) module supports source network address
translation (src-nat).
Which is a common use of this statement in an Aruba configuration?