Aruba Campus Access Architect (HPE7-A11) study plan
Aruba Campus Access Architect (HPE7-A11) · Give each week a clear focus.
8 weeks · About 7 hours per week
Architecture and Design
Diagram a three-tier campus topology (core, aggregation/access) labeling uplink types, oversubscription ratios, and PoE budget assumptions
Compare centralized, distributed, and mixed-control wireless architectures and justify a placement decision for a given building layout
Calculate required AP density from a stated user density and throughput target, showing the arithmetic
List the design inputs you must collect before sizing a campus (user counts, device types, roaming needs, PoE classes, uplink media)
Your checkpoint
A one-page campus design brief for a hypothetical 2-building site with topology diagram, AP count, and uplink sizing math
Architecture and Design & Wired and Wireless Campus Access Infrastructure
Map each design requirement from week 1 to a specific wired infrastructure component (switch class, stacking, uplink speed, PoE tier)
Describe how VLANs, spanning tree, and link aggregation interact in an access-to-aggregation design
Explain wireless RF planning inputs (channel width, band steering, transmit power) and their effect on capacity
Identify which design decisions create downstream security and HA constraints and note them
Your checkpoint
A requirements-to-component traceability table covering at least 10 design requirements with the chosen infrastructure element for each
Wired and Wireless Campus Access Infrastructure
Configure and verify VLAN assignment, trunking, and link aggregation on access and aggregation switches in a lab
Configure PoE class-based power budgeting and verify delivered power against AP requirements
Describe AP onboarding flow (discovery, controller/central association, firmware) and list failure points at each step
Compare tunneling versus local/bridge forwarding modes and state when each is appropriate
Validate wireless coverage and roaming behavior using a site survey or simulated survey output
Your checkpoint
A lab workbook with config snippets and verification output for VLAN, LAG, PoE, and AP onboarding, plus a forwarding-mode decision table
Network Security and Segmentation
Design a role-based access control model mapping user/device groups to roles, VLANs, and policy enforcement points
Explain how RADIUS, 802.1X, and MAC authentication combine for wired and wireless onboarding
Place enforcement (gateway, switch ACL, tunneled node) for guest, IoT, and corporate traffic and justify each placement
Identify segmentation gaps in a given flat-network scenario and propose remediation steps
Your checkpoint
A segmentation design document with role matrix, authentication flow diagrams for three device classes, and a prioritized remediation list
Network Management, Monitoring, and Automation
Configure centralized monitoring and alerting for switch and AP health in a lab or simulator
Describe how configuration templates and group-based policy push reduce drift across many devices
Outline an automation workflow (inventory, template apply, verify) and identify idempotency risks
Select the metrics and logs you would retain for capacity planning and incident review
Your checkpoint
An operations runbook section covering monitoring thresholds, template rollout steps, and a rollback procedure
High Availability, Resilience, and Troubleshooting
Design an HA topology covering controller/cluster redundancy, switch stacking, and redundant uplinks with failover expectations
Trace a failover scenario step by step and predict client-visible impact and convergence time
Build a troubleshooting decision tree for the top five campus symptoms (no DHCP, no auth, roaming failure, PoE fault, uplink down)
Map each symptom to the specific show/debug outputs or logs you would collect first
Your checkpoint
An HA and troubleshooting playbook with one failover walkthrough and a five-branch symptom decision tree
Integration, Migration, and Operations & Network Security and Segmentation
Plan a migration from a legacy flat campus network to the segmented design from week 4, sequencing cutover by building and by device class
Define coexistence rules so old and new authentication and VLAN schemes work during transition
List integration touchpoints with external systems (identity provider, NAC, monitoring, IPAM) and the data each needs
Draft a rollback and communications plan for a failed cutover
Your checkpoint
A phased migration plan with cutover sequence, coexistence rules, integration checklist, and rollback triggers
Architecture and Design & Wired and Wireless Campus Access Infrastructure & Network Security and Segmentation & Network Management, Monitoring, and Automation & High Availability, Resilience, and Troubleshooting & Integration, Migration, and Operations
Re-derive the week 1 design brief from memory and reconcile differences against the original
Re-run the week 3 lab tasks and the week 6 troubleshooting tree without notes, logging any gap
Write a one-paragraph explanation for each domain's core trade-off (design, infrastructure, security, ops, HA, migration)
Build a personal weak-topic list ranked by confidence and schedule two review sessions per weak area
Your checkpoint
A consolidated review sheet: reconciled design brief, gap log from unassisted re-runs, and a ranked weak-topic list with review dates
Milestones
Week 2: Can produce a campus design brief and trace every requirement to a named infrastructure component without consulting notes
Week 4: Can explain the full 802.1X and MAC-auth onboarding flow for wired and wireless clients and place enforcement for three device classes
Week 6: Can walk through one HA failover and diagnose three of the five top symptoms using only the decision tree and known show commands
Week 8: Re-derives design brief and troubleshooting tree unassisted with fewer than three substantive gaps, and has a dated review plan for every gap