HPE7-A09 HPE Network Switching Expert Written Exam Practice Questions

A local user role (LUR) for UBT is created with port-access role ; inside the role, gateway-zone zone gateway-role names the UBT zone and the role that the gateway applies to the tunneled traffic. port-access role exists only in the global configuration context (there is no interface-level port-access role command); a role reaches a client through authentication. Here aaa authentication port-access auth-role MED-DEV on the port assigns the role to clients that RADIUS authenticates without returning a role (RADIUS can also return the LUR name, or ClearPass can supply a downloadable role). UBT supports both LUR and DUR.

qos trust dscp (global, or per interface) makes the switch use the DSCP field of IP packets as the index into the DSCP map. By default DSCP 46 (EF) maps to local priority 5, so qos dscp-map 46 local-priority 7 is needed; the factory-default queue profile then places local priority 7 in queue 7. The factory-default schedule profile services every queue with DWRR (weight 1) — queue 7 is not strict by default — so the schedule profile that contains strict queue 7 must be applied with apply qos schedule-profile VOICE-SP. With qos trust cos the DSCP map is not consulted at all.

To configure dynamic RP using BSR, routers must be configured as Candidate-RPs (C-RP). The command rp-candidate source-ip-interface specifies the IP to be used as the RP address and group-prefix defines the multicast range it services. Configuring bsr-candidate allows the router to also act as the Bootstrap Router, which collects C-RP announcements and distributes the RP-set to all PIM routers. If a C-RP fails, the BSR removes it from the RP-set when its advertised hold-time expires (default 150 seconds), and the routers then map the groups to the remaining C-RP.

In AOS-CX 10.13 EVPN-VXLAN, BUM traffic is flooded with head-end (ingress) replication: the source VTEP sends one unicast VXLAN copy to each remote VTEP in the VNI's flood list, which EVPN builds automatically from the Type-3 (IMET) routes. The AOS-CX 10.13 EVPN VXLAN Guide states: "For BUM traffic flooding, only Head End Replication (HER) is supported." Underlay multicast replication with PIM-SM is therefore not available at 10.13 (later releases such as 10.17 add an optional underlay-multicast replication mode). Anycast RP with MSDP is an RP-redundancy design rather than a VXLAN replication method, and static VXLAN tunnels give up the EVPN control plane and rely on flood-and-learn.

VSX keeps an independent control plane on each switch, synchronized over the ISL, and VSX LAGs (multi-chassis LAGs) let downstream switches use both uplinks actively with no STP blocking. For upgrades, vsx update-software installs the new image on both peers and reboots the secondary first and then the primary, so one peer keeps forwarding while the other reloads; HPE markets this as VSX Live Upgrade with LACP traffic draining, which minimizes rather than completely eliminates disruption. VSF stacking is supported only on 6200/6300-class switches, not on the 8325; MEC is Cisco terminology; standalone routed switches with ECMP and BFD provide no coordinated upgrade of a redundant pair.

UBT Zone mode is the preferred design for scalability. By configuring a UBT Zone that points to a Cluster of gateways (Mobility Controllers/Gateways), the system provides stateful failover and load balancing of user tunnels. Standalone controllers introduce a single point of failure, and PAPI is a control plane protocol, not a tunneling mode.