HPE6-A73 Sample Questions & Answers

'vsx shutdown-on-split' is the AOS-CX interface command that 'shuts down the configured non-VSX interfaces on the VSX secondary along with VSX interfaces during a VSX split', and the VSX Guide shows it applied to an SVI (interface vlan 2). In a VSX split the ISL goes out of sync while the keepalive is still up: the secondary already brings its VSX LAGs down, but its non-VSX interfaces, such as SVIs, stay up unless they carry this command (AOS-CX 10.13 VSX Guide, 'VSX shutdown-on-split'). 'split-recovery' does the opposite job: it is enabled by default and, when the keepalive also fails after the ISL, makes the secondary bring its VSX LAGs back up. 'linkup-delay-timer' only delays bringing VSX links up after a reboot or an ISL flap (default 180 seconds), and 'isl-protection' is not a VSX command.

In a User-Based Tunneling (UBT) deployment, the user traffic is encapsulated in GRE tunnels at the access switch and sent to the Gateway. The access switch only needs a 'reserved' VLAN (often called a transport or intermediate VLAN) to initiate the tunnel. The actual client VLANs where the users' IP addresses reside must exist on the Gateway, but they are NOT required (and often not recommended) to be configured on the local access switches.

When interfacing MSTP with PVST+, the MSTP region appears as a single bridge (the IST master). To prevent topology loops and issues, it is best practice for the MSTP region to be the root of the CST (Common Spanning Tree), or for the PVST+ root to be consistent for ALL VLANs. This ensures the interaction on the boundary links is predictable.

The VSX ISL (Inter-Switch Link) serves as the data path for traffic between the two VSX nodes for any VLANs that need to traverse the cluster (e.g., during single-link failures). Therefore, the ISL LAG must be configured as a trunk allowing all VLANs that are active on the VSX downstream links.

To advertise a network in OSPF, the interface must be part of the OSPF process. However, to prevent it from sending Hello packets and forming adjacencies (which is unnecessary and a security risk for a loopback), the interface should be configured as passive using the ip ospf passive command (or setting it passive globally for the process).

MED (Multi-Exit Discriminator) is a non-transitive attribute sent to eBGP neighbors to influence their decision on how to enter your AS. A lower MED is preferred. Local Preference is used to influence outbound traffic, not inbound. Weight is local to the router.

The 'Critical Voice Role' (or critical authentication voice VLAN) feature allows specific traffic (identified typically by LLDP-MED or OUI) to be placed into a designated VLAN or assigned a role when the RADIUS server is unreachable (Dead). This ensures phone service continuity during AAA outages.

NetEdit relies heavily on the REST API (https-server) to discover, interrogate, and configure Aruba CX switches. If the HTTPS server/REST API is disabled or the credentials provided do not have API access, NetEdit cannot manage the device.