HP ExpertOne. HP0-Y45: Architecting HP Network Solutions. Table of Contents

Size: px
Start display at page:

Download "HP ExpertOne. HP0-Y45: Architecting HP Network Solutions. Table of Contents"

Transcription

1 HP ExpertOne HP0-Y45: Architecting HP Network Solutions HP Networking Exam preparation guide Table of Contents Overview 2 Why take the exam? 2 HP Network Architect V1 certification 2 Path 1 2 Path 2 3 Path 3 3 Path 4 3 Who should take this exam? 4 How to study for the exam 4 Attend recommended ILT 5 Topics covered 5 Format offered 6 Refer to other materials 6 Obtain hands-on experience 6 Exam details 6 Exam objectives 7 Tips for taking HP exams 8 Register 9 Sample questions 9 Answers 12 Conclusion 15

2 Overview Requirements for successful completion This guide helps you to study for the Architecting HP Network Solutions (HP0-Y45) exam. You can benefit from this guide whether you are attempting to expand your existing HP certification or you have experience designing and architecting another vendor s network design solutions and want to get certified with HP. To pass the exam, you will need to demonstrate a clear understanding of the customer s needs and reflect those needs in an accurate network design. Why take the exam? Based on your current achievements, passing this test gives you one component toward: HP Accredited Solutions Expert (ASE) Network Architect V1 certification HP Network Architect V1 certification This certification verifies that you have the ability to specify and architect a spectrum of complex HP FlexCampus, FlexBranch and FlexFabric - Datacenter network solutions. The Network Architect training provides you with the ability to navigate through the HP Networking solution offerings and identify, describe, position and specify the right solution based on identified needs. The training also provides an understanding of the purpose, function, positioning, and capabilities of HP Networking offerings in combination with networking related HP Servers and HP Storage solutions. The available training will also help you learn the technical consulting skills needed for planning and designing complete, modern network solutions. This certification attests that you can: Explain how open standards and the HP FlexNetwork architecture address modern networking s bandwidth-intensive, delay-sensitive, mobility and BYOD demands. Design a more simplified, flatter physical topology that can handle an enterprise s traffic volume and traffic patterns, including intensive server-to-server patterns anticipated for cloud and converged infrastructures. Describe HP rack and blade server solutions and explain some networking advantages of the HP blade enclosures. Explain how HP Virtual Connect (VC) modules help to simplify and optimize connections between servers and the data center LAN and SAN. Design secure, integrated wired and wireless network solutions for seamless mobile access. Design data center solutions including network, server, and storage virtualization and explain how virtualization and cloud computing are changing the data center networking environment. Deploy and configure HP edge and core switches. Design routed and bridged networks using industry-standard protocols, focusing on OSPF, VRRP, and MSTP. There are three paths to achieve this certification, as outlined below. The exams you must pass are dependent upon which achievements you currently hold. Path 1 This path is designed for networking professionals who have one of the following certifications: HP ASE Network Infrastructure [2011] HP ASE Wireless Networks Implementer V1 HP ASE Wireless Networks [2011] 2

3 If you meet one of these criteria, then passing the HP0-Y45 exam alone gives you the certification. By completing this path, you will also be granted the HP AIS Network Infrastructure [2011] or later certification if you do not already have it. For those who received HP MASE Network Infrastructure [2011] via the CCIE fast-track option are part of this path. So, only the exam HP0-Y45 is required to receive the HP ASE Network Architect V1 certification. NOTE: This upgrade path does not distinguish between candidates who passed HP0-Y31 and HP0-Y43 exams. Path 2 This path is designed for networking professionals who have the following certifications: ASE HP ProCurve Campus LANs [2010] plus HP APP Enterprise Networks [2011] If you meet this criteria, then passing the HP0-Y45 exam alone gives you the certification. By completing this path, you will also be granted the HP AIS Network Infrastructure [2011] or later certification if you do not already have it. Path 3 This path is designed for networking professionals who have one of the following certifications: Cisco CCNP Wireless Cisco CCDP CCNP Routing & Switching H3CSE ASE - HP ProCurve Networking & Mobility 2009 ASE HP ProCurve Mobility 2010 HP ProCurve Campus LANs 2010 If you meet one of these criteria, then passing the following exams give you the certification. Implementing HP Network Infrastructure Solutions (HP0-Y43) Architecting HP Network Solutions (HP0-Y45) NOTE: This upgrade path is identical to the new candidate path, except there is no AIS prerequisite. These candidates will also receive HP AIS Network Infrastructure [2011] or later upon completion. Path 4 If you do not meet the requirements for path 1, path 2 or path 3, then you must complete this path, which is designed for new candidates. First, you must achieve the prerequisite certification, HP AIS Network Infrastructure [2011] or later. Second, you must pass the following exams: Implementing HP Network Infrastructure Solutions (HP0-Y43) Architecting HP Network Solutions (HP0-Y45) NOTE: It is highly recommended that you first complete the HP0-Y43 exam. The technologies covered in the training courses belonging to that exam will be assumed as understood, and therefore will not be explained in the training course Architecting Open Standard HP Network Solutions. 3

4 Requirements for HP ASE - Network Architect V1 certification Table 1: HP ASE Network Architect V1 certification requirements based on current achievement Path1 Path 2 Path 3 Path 4 Either: HP ASE Network Infrastructure [2011] HP ASE Wireless Networks Implementer V1 HP ASE Wireless Networks [2011] ASE HP ProCurve Campus LANs [2010] plus HP APP Enterprise Networks [2011] Either: Cisco CCNP Wireless Cisco CCDP CCNP Routing & Switching H3CSE ASE - HP ProCurve Networking & Mobility 2009 ASE HP ProCurve Mobility 2010 HP ProCurve Campus LANs [2010] New or any other candidate HP AIS Network Infrastructure [2011] or later certification x Proctored Exam Implementing HP Network Infrastructure Solutions (HP0-Y43) x x Proctored Exam Architecting Open Standards HP Network Solutions (HP0-Y45) x x x x Who should take this exam? Although anyone can take this exam, most successful candidates have at least three years of real-world experience architecting network solutions and have also prepared for the test in a variety of ways. Candidates are expected to have HP Networking product knowledge from training and hands-on experience. NOTE: Anyone can take the exam, passing it only helps you to achieve certification if you have one of the prior achievements listed in Table 1. If you are a new candidate, obtain the HP AIS [2011] certification first. You will only achieve certification if you pass the exam and have all other required achievements. This guide describes some of the training offered by HP and provides references to materials for further preparation. How to study for the exam The Architecting HP Network Solutions (HP0-Y45) exam tests you on topics that are covered in the HP instructor-led training (ILT) course (5 days total), as well as on the skills and knowledge you have gained by working on a daily basis with the products and solutions covered in the training. 4

5 Courses for the Exam HP0-Y45 Table 2: Recommended training based on current achievement Current achievements All Candidates independent whether a certification mentioned in the upgrade paths or a new candidate Architecting Open Standards HP Network Solutions, Rev or later (5-day ILT) X Total days for recommended training 5 days Although completing this training is recommended for exam preparation, successful completion of the training alone does not guarantee that you will pass the exam. In addition to training, exam items are based on knowledge gained from on-the-job experience and application as well as other supplemental reference material that may be specified in this guide. Read the sections below to further assess your options. Even if you do not intend to complete the recommended ILT course, you should examine the topics that it covers. The exam will test you on the mastery of knowledge and skills in these topic areas, as well as what you have acquired from on-the-job experience as a network solutions architect. Attend recommended ILT This ILT helps to prepare you for this exam: Architecting Open Standards HP Network Solutions, Rev or later (5 days) You are highly encouraged to attend this course, where you will expand your knowledge on how to architect HP network solutions and learn about HP Server and Storage related networking technologies. Design activities within the course will provide you real life examples. By completing these activities you will enhance your overall ability to architect datacenter level network solutions. Register for this course in The Learning Center of your HP Partner Portal, which is the HP Learning Management System for HP customers and partners. You will require an HP Learner ID to register for a class. Note that, while it only takes a few minutes to request the ID, the process of activating it up may take a few days. Please obtain this ID and then register for classes at least one week in advance. Costs and scheduling vary according to region. Topics covered In attending this course, you will learn about and be able to: Explain how open standards and the HP FlexNetwork architecture addresses modern networking s bandwidth-intensive, delay-sensitive, mobility and BYOD demands. Design a more simplified, flatter physical topology that can handle an enterprise s traffic volume and traffic patterns, including intensive server-to-server patterns anticipated for cloud and converged infrastructures. Design efficient routing and multicast routing solutions for various enterprise needs. 5

6 Describe best practices for designing solutions from the Physical Layer to the Network Layer, by providing basic connectivity with some resiliency and good performance ensured by the proper bandwidth provisioning and topology design. Describe HP rack and blade server solutions and explain some networking advantages of the HP blade enclosures. Explain how HP Virtual Connect (VC) modules help to simplify and optimize connections between servers and the data center LAN and SAN. Design secure, integrated wired and wireless network solutions for seamless mobile access. Develop a plan for implementing an HP networking solution into either a greenfield or an existing network. Obtain the data and documentation required to understand a company s general connectivity, availability, security, and application requirements based on information provided by the company s key decision makers. Design data center solutions including network, server, and storage virtualization and explain how virtualization and cloud computing are changing the data center environment. Format offered This is a 5-day instructor-led course based on approximately: 60 percent case studies 40 percent lecture and participant-centered learning activities Refer to other materials The courseware provided for the Architecting Open Standards HP Network Solutions course includes materials for you such as HPN Product information, whitepapers on FCoE and a link to a free HP Virtual Connect for Dummies. Obtain hands-on experience HP exams are designed for candidates with on-the-job experience. The course Architecting Open Standards HP Network Solutions gives you a foundation to successfully pass the exam, but you are expected to have realworld networking experience as well. This course provides you with many design activities based on real-life scenarios, which will help you to understand the various datacenter design topics covered. Exam details The exam covers various wired and wireless networking technologies, as well as server, storage and networking virtualization technologies all in the context of how to architect enterprise level networks and data centers. The table provides details about the exam. Note that this is a proctored exam, which you must complete at a scheduled time and authorized location. You will not be allowed to take any reference materials with you. Table 3: Exam number exam details Parameter Description Number of items 60 Item types Multiple choice (single response) Multiple choice (multiple responses) Drag and drop Matching 6

7 Exam time Passing score 70% Additional guidelines Pull-down list 115 minutes No on-line or hard copy reference material will be allowed at the testing site. NOTE: The exam may contain beta test items for experimental purposes. Exam objectives The following testing objectives represent the specific areas of content covered in the exam. Use this outline to guide your study and to check your readiness for the exam. The exam measures your understanding of these areas. Table 4: Exam number objectives Exam number 8% Networking architecture and technologies Sections/Objectives Recognize and explain modular architecture blocks, physical topologies, and control plane extensions. 13% Networking solutions and technologies Map the gathered customer requirements to the appropriate products (LAN, WLAN and WAN) and management solution. Map the gathered customer requirements to the right security technologies. 19% Server and storage technologies and products Recognize and apply server hardware and software technologies and products. Recognize and apply storage hardware and software technologies and products. Recognize and apply storage and server virtualization. Recognize and apply requirements, features, and benefits of cloud services, data center, and green technologies. 10% Traffic volumes, topologies, paths, and applications Evaluate customer applications and topologies. Evaluate customer traffic volumes and flows. 8% Customer policies and requirements Identify and evaluate customer availability, integrity, and confidentiality requirements for different architecture blocks (LAN, WAN, data center, and wireless). Identify and evaluate customer operational requirements and strategies and apply to designs. 12% Customer business and technical requirements Evaluate the customer technical and business capabilities and requirements. Identify gaps and present partner solutions. Interact effectively with customers. 30% HP Networking solutions planning and design Plan for interoperability with existing solutions, and develop logical and physical designs. Develop a transition plan for implementation. Consider Total Cost of Ownership Verify network architecture 7

8 Tips for taking HP exams Rather than emphasize simple memorization, HP exams attempt to assess whether you have the knowledge and skills that an IT professional requires on the job. Therefore, many test questions present a scenario, which outlines a particular network environment or problem. Some test questions might also include one or more exhibits to show: Network topology Configuration This exam includes the following question (item) types: Multiple choice (single response) Select one radio button to indicate a correct answer. If the response is correct, you will receive one point. Multiple choice (multiple responses) Select more than checkbox to indicate a correct answers as noted in the question. If all the responses are correct, you will receive one point. There is no partial credit. Drag and drop Place a marker on the area of an image to indicate a correct answer. If the response is correct, you will receive one point. Matching Select an answer from the drop-down list to match each option. You cannot use the same answer twice. If the all the responses are correct, you will receive one point. There is no partial credit. Pull-down list Select an answer from the drop-down list to match each option. You can use the same answer more than once. If all the responses are correct, you will receive one point. There is no partial credit. This ExpertOne exam presents all the questions in a single block. The candidate agreement is presented first, followed by the exam introduction and instructions. Once you click the Next Question button on the instructions page, the questions will be presented one at a time. You can move from question to question within the block, skip questions, and change your answers. However, once you submit your answers, you cannot return to review those questions or change your answers. Here are some additional tips: Use the Next Question / Previous Question buttons to move forward and backward between questions. The Submit button will appear when you reach the last question. Use the Assessment Navigator to jump between questions in a block and to review flagged questions. To do this, click the Assessment Navigator button and select the question you want to navigate to. Flagged questions are indicated above the item number in the upper left corner. The Assessment Navigator also uses different shading to indicate answered versus unanswered items. Use the Assessment Navigator to launch the calculator tool by clicking the Calculator button at the bottom. Figure 1: Assessment Navigator 8

9 When you begin the exam the total number of questions (including beta questions) will display. The total exam time does account for beta questions. To estimate how much time you should allow per question, divide the total time by the number of questions. Some questions are more complex and will require more time. If a question is taking too much time, flag it using the Assessment Navigator, and then return to it later. Make sure you examine the exhibits, and thoroughly read each question and all options. Register To register for this exam, visit the PearsonVUE website at: You will need an HP Learner ID and a PearsonVUE ID. Visit to obtain access to The Learning Center. Sample questions This section provides several sample questions. Although the samples cannot indicate all the topics covered in the exam, they give you an idea of the types of questions that you will encounter. 1. What are two benefits of an HP BladeSystem as opposed to rack servers? (Select two.) a. smaller physical footprint b. interconnect modules that specifically support virtualized environments c. greater internal storage space on each individual server blade d. support for HP Thermal Logic innovations e. support for integrated Lights Out (ilo) technology 2. What is one difference between HP Intelligent Resilient Framework (IRF) and Virtual Router Redundancy Protocol (VRRP)? a. While IRF provides faster failover than VRRP, it is generally more difficult to manage a group of routing switches that use IRF as opposed to a group that uses VRRP. b. IRF allows you to assign a real IP address to each member and use a virtual IP address for the default gateway. VRRP requires one of the members to own the virtual IP address. c. Both IRF and VRRP use a single IP address for the default router functions, but IRF provides a simpler setup for the complete routing solution. d. VRRP and IRF fail over in about the same time, but IRF offers a simpler configuration. 3. A network architect is upgrading the campus LAN for a company with several buildings. The architect hopes to create a flatter topology with two tiers instead of three. What will probably act as the primary factor for determining whether a two-tier topology is possible? a. the number and type of inter-building cables b. the amount of bandwidth required for connecting to a WAN router c. the need for a unified communications and collaboration (UC&C) solution d. the total number of edge ports required for the campus 9

10 4. A customer has indicated that it is highly critical that only authorized users obtain any form of network access in the research and development (R&D) building. Assume that all devices in this building are capable of both 802.1X and MAC authentication. Which statement accurately describes both the criticality of the requirement and the correct technology to use? a. All physical ports and the wireless network in the R&D building should be secured with MAC-based authentication. b. All physical ports and the wireless network in the R&D building must be secured with MAC-based authentication. c. All physical ports and the wireless network in the R&D building should be secured with 802.1X. d. All physical ports and the wireless network in the R&D building must be secured with 802.1X. 5. What are two benefits of server virtualization? (Select two.) a. Server virtualization enables companies to implement Software Defined Networking (SDN) no matter what their underlying network infrastructure. b. Server virtualization reduces overall costs by improving resource utilization. c. Server virtualization plays a direct role in helping network administrators flatten the network architecture. d. Server virtualization provides portability that can simplify disaster recovery and application rollouts. e. Server virtualization makes it easier to secure server-to-server communications by moving some of those communications within the physical machine. 6. Refer to the exhibit. Figure 2: Exhibit for question 6 A network architect has designed the campus LAN topology shown in the exhibit. This customer also requires a wireless network and plans to purchase an HP MultiService Mobility (MSM) 760 Access Controller and MSM APs for this purpose. The customer requires seamless roaming and 802.1X authentication for the wireless network. The customer uses a Windows domain to control user access to resources. The domain has 10 groups, each of which includes between 75 and 125 users for 1000 users total. Users are expected to connect no more than one wireless device at a time. The solution must support up to 650 concurrent wireless clients. The network architect could take several approaches to designing the routing and VLAN solution. What is one valid approach? 10

11 a. Implement access layer routing and 802.1X on the Ethernet ports in addition to the wireless network. Configure the same IDs for dynamic VLANs on each access layer IRF, but associate each VLAN ID with a different subnet on each access layer IRF. b. Implement core routing and 802.1X on the Ethernet ports in addition to the wireless network. Use dynamic VLANs for wired users and for wireless users, and extend all dynamic VLANs to each access layer IRF. c. Implement core routing. Assign one static user VLAN to each access layer IRF. Create one VLAN for all wireless users and extend that VLAN to each access layer IRF. d. Implement access layer routing. Configure a single user VLAN and subnet (for wired and wireless users) on each access layer IRF. 11

12 Answers 1. What are two benefits of an HP BladeSystem as opposed to rack servers? (Select two.) a. smaller physical footprint b. interconnect modules that specifically support virtualized environments c. greater internal storage space on each individual server blade d. support for HP Thermal Logic innovations e. support for integrated Lights Out (ilo) technology Explanation: An HP BladeSystem uses less space for 16 blade servers than would be used for 16 rack servers. In addition, the BladeSystem eliminates cables between the servers and the network infrastructure access layer (which is provided by interconnect modules). Therefore, answer a. is correct. Network architects can choose Virtual Connect (VC) interconnect modules, which are specifically designed to support virtualized environments. Therefore, answer b. is correct. Answer c. is incorrect. The HP BladeSystem provides options for shared local storage, but individual server blades tend to provide less internal storage space than rack servers. Answers d. and e. are incorrect. The HP BladeSystem does provide these benefits. However, the rack servers also support HP Thermal Logic features and ilo, so these technologies are not advantages of the BladeSystem over the rack servers. 2. What is one difference between HP Intelligent Resilient Framework (IRF) and Virtual Router Redundancy Protocol (VRRP)? a. While IRF provides faster failover than VRRP, it generally more difficult to manage a group of routing switches that use IRF as opposed to a group that uses VRRP. b. IRF allows you to assign a real IP address to each member and use a virtual IP address for the default gateway. VRRP requires one of the members to own the virtual IP address. c. Both IRF and VRRP use a single IP address for the default router functions, but IRF provides a simpler setup for the complete routing solution. d. VRRP and IRF fail over in about the same time, but IRF offers a simpler configuration. Explanation: Answer c. is correct. With IRF, the master and members have the same IP address on each VLAN or Layer 3 interface. Devices that implement VRRP each have their own IP address; however, they use a single IP address for the default gateway functions. Therefore, IRF and VRRP present a similarly simple solution for assigning the default gateway IP address to endpoints. However, when you consider the entire routing setup, it is easier to set up IRF. The entire IRF group acts as a single virtual device, so you configure routing protocols just as you would for a single routing device. With VRRP, the network architect needs to take more measures to ensure that the routing protocols operate correctly during normal operation and failover. For example, both devices in a VRRP group would need to establish Open Shortest Path First (OSPF) adjacencies with upstream routers on a subnet or subnets that do not use VRRP. The architect might need to adjust costs to ensure that traffic reaches the VRRP master, and so on. Answer a. is incorrect because IRF allows network administrators to manage two or sometimes more devices as a single device while, with VRRP, the administrators must manage each device separately. Answer b. is incorrect because it incorrectly describes how IRF and VRRP work. IRF does not assign a different real IP address to every member. Instead every member and master share the same control plane and the same IP address on each VLAN or Layer 3 interface. In addition, although one VRRP member can own the default gateway IP address, HP devices that implement VRRP can also use a virtual IP address. Answer d. is incorrect because IRF fails over significantly more quickly than VRRP. 12

13 3. A network architect is upgrading the campus LAN for a company with several buildings. The architect hopes to create a flatter topology with two tiers instead of three. What will probably act as the primary factor for determining whether a two-tier topology is possible? a. the number and type of inter-building cables b. the amount of bandwidth required for connecting to a WAN router c. the need for a unified communications and collaboration (UC&C) solution d. the total number of edge ports required for the campus Explanation: In general, network architects should attempt to create a two-tier topology for campus LAN solutions. Sometimes, it is not possible to create this topology because the customer has a multi-building campus, and the site does not provide enough inter-building cables to connect the access layer directly to the campus LAN core. Therefore, answer a. is correct. The total number of edge ports required for the campus also plays a role in the decision. However, even in very large networks with a good oversubscription ratio, a two-tier HP campus LAN solution can provide enough ports at the core to support the required number of access layer uplinks as long as the cables for those links are available. Therefore, answer a. is a better answer than answer d. Answer b. is incorrect. A network architect can plan adequate bandwidth for the connection to the WAN router regardless of whether the topology has two tiers or three tiers. Answer c. is incorrect. In general, a flat two-tier topology better supports a UC&C solution. However, the UC&C solution itself does not make a two-tier topology possible or impossible. 4. A customer has indicated that it is highly critical that only authorized R&D users can obtain any form of network access in the research and development (R&D) building. Assume that all devices in this building are capable of both 802.1X and MAC authentication. Which statement accurately describes both the criticality of the requirement and the correct technology to use? a. All physical ports and the wireless network in the R&D building should be secured with MAC-based authentication. b. All physical ports and the wireless network in the R&D building must be secured with MAC-based authentication. c. All physical ports and the wireless network in the R&D building should be secured with 802.1X. d. All physical ports and the wireless network in the R&D building must be secured with 802.1X. Explanation: The best network access control technology for this customer is 802.1X rather than MAC authentication. In general, MAC authentication is not very secure, and the customer has indicated that securing the ports against unauthorized access is very important. The solution might need to allow MAC authentication if endpoints do not support 802.1X; however, the scenario indicates that the endpoints do support 802.1X. Therefore, either answer c. or d. is correct. Answer c. and d. are distinguished by the importance assigned to the requirement (must support versus should support). The scenario indicates that this requirement is critical; therefore, answer d. is correct. 5. What are two benefits of server virtualization? (Select two.) a. Server virtualization enables companies to implement Software Defined Networking (SDN) no matter what their underlying network infrastructure. b. Server virtualization reduces overall costs by improving resource utilization. c. Server virtualization plays a direct role in helping network administrators flatten the network architecture. d. Server virtualization provides portability that can simplify disaster recovery and application rollouts. e. Server virtualization makes it easier to secure server-to-server communications by moving some of those communications within the physical machine. Explanation: Companies usually host a single service or application on each server to prevent interoperability issues. However, as machines have become more powerful, this approach leaves the server underutilized. Server virtualization enables a single physical machine to host several different virtual machines (VMs), promoting more efficient utilization of the server hardware. Therefore, answer b. is correct. 13

14 A VM is also portable; the company can back up or replicate the image and install it where required. Therefore, answer d. is also correct. Answer a. is incorrect. SDN relates to virtualizing the network infrastructure control plane rather than to server virtualization. Answer c. is incorrect. Server virtualization might drive the need for a flatter network infrastructure architecture; however, this technology itself does not help companies to achieve this architecture. Answer e. is incorrect. Moving the server-to-server communications within the physical machine can actually make it more difficult for a security solution to track the communications, detect threats, and mitigate threats (although HP offers TippingPoint solutions that help). 6. Refer to the exhibit. Figure 2: Exhibit for question 6 A network architect has designed the campus LAN topology shown in the exhibit. This customer also requires a wireless network and plans to purchase an HP MultiService Mobility (MSM) 760 Access Controller and MSM APs for this purpose. The customer requires seamless roaming and 802.1X authentication for the wireless network. The customer uses a Windows domain to control user access to resources. The domain has 10 groups, each of which includes between 75 and 125 users for 1000 users total. Users are expected to connect no more than one wireless device at a time. The solution must support up to 650 wireless devices at a time. The network architect could take several approaches to designing the routing and VLAN solution. What is one valid approach? a. Implement access layer routing and 802.1X on the Ethernet ports in addition to the wireless network. Configure the same IDs for dynamic VLANs on each access layer IRF, but associate each VLAN ID with a different subnet on each access layer IRF. b. Implement core routing and 802.1X on the Ethernet ports in addition to the wireless network. Use dynamic VLANs for wired users and for wireless users, and extend all dynamic VLANs to each access layer IRF. c. Implement core routing. Assign one static user VLAN to each access layer IRF. Create one wireless user VLAN and extend it to each access layer IRF. d. Implement access layer routing. Configure a single user VLAN and subnet (for wired and wireless users) on each access layer IRF. Explanation: Answer b. is a valid solution. Using core routing and extending the VLANs for wireless users to every access layer IRF ensures that wireless users can roam across the network. Dynamic VLANs might not be required for controlling user access to resources. However, dynamic VLANs will divide the wireless users into smaller VLANs, which might help to reduce broadcasts in wireless cells without interfering with roaming. (The 14

15 solution is not perfect because the wireless cell must support broadcasts for every user s dynamic VLAN. However, it is unlikely that a user in every dynamic VLAN will connect to every AP, so broadcasts will be reduced a degree.) The dynamic VLANs are not necessarily required for the wired ports, but they are a valid choice. Answer a. and answer d. do not provide valid solutions for this customer because access layer routing can interfere with seamless roaming. The customer is planning to purchase an MSM 760 Access Controller, which does not support the Mobility Traffic Manager (MTM) feature that would allow this solution to meet the roaming needs. Answer c. provides a solution that supports seamless roaming. However, the VLAN for wireless users might include up to 650 users. This VLAN could degrade performance due to excessive broadcasts, so it is not ideal. Conclusion HP wishes you success in passing the exam and joining the HP ExpertOne program. To learn more about HP Networking, visit For more information on ExpertOne, visit Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. 15