Refer to the exhibits.

HP HPE6-A79 Question Answer

A network administrator deploys User Based Tunneling (UBT) in a corporate network to unify the security policies enforcement. When users authenticate with 802.1X, ClearPass shows Accept results, and sends the Aruba-User-Role attribute as expected. However, the AOS-CX based switch does not seem to build the tunnel to the Mobility Controller (MC) for this user.

Why does the switch fail to run UBT for the user?

The switch has not fully associated to the MC.

ClearPass is sending the wrong Vendor ID.

The switch is not configured with the gateway-role.

ClearPass is sending the wrong VSA type.

The switch is not configured with the port-access role.