Aruba ACMP flashcards
Aruba ACMP · Build recall with a focused review session.
33 cards. Read the term and the definition here. The deck at the top of this page is optional.
- EIRP
- Effective Isotropic Radiated Power equals AP transmit power in dBm plus antenna gain in dBi minus cable and connector loss in dB; regulatory limits cap it per band and channel width.
- Co-channel interference
- Two radios on the same channel within overlapping coverage cause contention and retransmissions; mitigate with channel reuse planning and ARM power and channel changes.
- SNR requirement
- Signal-to-noise ratio needed for a given modulation; higher MCS rates require about 25 to 30 dB SNR, while voice calls generally need at least 25 dB.
- Cell edge RSSI
- Design target received power at the coverage boundary; Aruba commonly uses minus 67 dBm for voice and minus 72 dBm for data-only coverage.
- 5 GHz channel width
- ArubaOS supports 20, 40, and 80 MHz; wider channels raise throughput but consume adjacent channels, reducing reuse and increasing co-channel interference.
- Free space path loss
- Free space path loss in dB equals 20 log10 of distance in km plus 20 log10 of frequency in MHz plus 32.44, predicting open-space signal loss.
- ARM
- Adaptive Radio Management in ArubaOS scans the RF environment and automatically assigns channels and transmit power, balancing co-channel interference against coverage.
- ADP
- Aruba Discovery Protocol; APs multicast or broadcast to find controllers when no static master address or DHCP option 43 is configured.
- DHCP option 43
- DHCP option 43 carries a controller or master IP address to an AP; it is one of the discovery methods consulted while the AP boots.
- AP group
- Logical container of APs that share configuration such as virtual APs, RF profiles, and regulatory settings; created with the ap-group command.
- Virtual AP
- Binds an SSID profile, AAA profile, and forwarding mode, then is applied to an AP group so the group broadcasts that WLAN.
- CPSec
- Control Plane Security; APs and controllers authenticate each other with certificates, and only whitelisted APs are allowed to join the controller.
- Tunnel forwarding mode
- Client traffic is GRE-encapsulated from the AP to the controller, which lets the controller enforce role and firewall policy centrally.
- Bridge forwarding mode
- The AP locally bridges client traffic onto its wired VLAN, keeping traffic off the controller but limiting centralized policy enforcement.
- Aruba-User-Role
- RADIUS VSA returned in Access-Accept; the controller assigns that role to the client, overriding initial and 802.1X-derived role assignments.
- Initial role
- Role assigned before authentication completes, typically logon or guest; it determines what captive portal or limited access the client receives.
- PEF
- Policy Enforcement Firewall; stateful role-based rules applied to client sessions, requiring a PEF license for each concurrent client.
- MPSK
- Multiple pre-shared keys; each device receives a unique PSK mapped to a role or VLAN, improving key management over one shared PSK.
- CoA
- Change of Authorization, RFC 5176; the RADIUS server pushes a mid-session role change or disconnect to the controller for an active client.
- 802.1X
- Port-based authentication where the controller acts as authenticator and RADIUS as authentication server; EAP runs between supplicant and server.
- Home agent
- In Aruba L3 mobility the home agent keeps the client's anchor subnet and forwards its traffic through a tunnel to the foreign controller.
- VRRP
- Virtual Router Redundancy Protocol; a master and backup share a virtual IP, with priority and preemption deciding which controller owns it.
- Controller cluster
- ArubaOS 8 controller cluster; members share state and APs fail over to a standby member if the active controller becomes unavailable.
- AP fast failover
- Feature that lets an AP and its clients survive a controller failure by re-homing to a standby controller with minimal interruption.
- 802.11r
- Fast BSS Transition; the client pre-authenticates with the target AP so key derivation finishes before roaming, reducing handoff time.
- OKC
- Opportunistic Key Caching; the controller caches PMKIDs and shares them across APs so a roaming client can skip full 802.1X.
- Master redundancy
- A standby master synchronizes configuration and databases from the active master; VRRP provides a virtual master IP for AP failover.
- show ap database
- Displays each AP's name, IP address, group, model, status, and flags; it is the first check for AP connectivity and registration.
- show user
- Lists client MAC, IP, role, VLAN, AP, and authentication state; useful for verifying role assignment and association status.
- show datapath session
- Shows active flows in the controller datapath with source, destination, ports, and flags; used to confirm whether traffic is permitted.
- show ap arm rf-summary
- Reports per-radio channel, transmit power, noise floor, and channel changes, supporting RF and ARM troubleshooting.
- show ap debug client-table
- Per-client PHY statistics including rates, retries, and RSSI, used to diagnose poor client performance and roaming behavior.
- show tech-support
- Collects a complete bundle of configuration, logs, and diagnostics from the controller for escalation to technical support.