Study Guide |

Aruba Certified Mobility

Professional Study Guide
Version 3.3
65

Certified Mobility Professional

Introduction
This guide will help you prepare for the Aruba Certified Mobility Professional (ACMP) exam for ArubaOS
3.3, a proctored exam offered by Pearson VUE. The objective of this exam is to prove the candidate’s
ability to correctly identify the components and operation of an Aruba WLAN.

ACMP is a written exam of 75 multiple choice questions with a 90 minute length. You will be tested on
your knowledge of Aruba hardware, software licenses, theory of operations, and troubleshooting. This
exam assumes familiarity with the web interface and command line interface. The ACMP exam requires
a solid foundation in wireless LAN technologies and proficiency in the installation, configuration and
operation of Aruba Networks products. Whether an Aruba customer or partner, the exam tests for
comprehensive knowledge across the most common deployment scenarios.

Please note that additional versions of the ACMP exam are currently available, based upon ArubaOS 3.3.
Please be aware that these two operating systems and the corresponding exams are vastly different.
When preparing to take the ACMP exam, register for and take the exam for the AOS that you are most
familiar with.

Prerequisites
Exam material is based largely on the content of the Aruba Networks’ core instructor-led courses
including Implementing Aruba WLANs (or Partner Technical Training) and Scalable WLAN Design &
Implementation. All ACMP candidates are strongly encouraged to complete the appropriate web-based
and instructor-led coursework before taking the exam.

In addition to the classroom training offered by Aruba it is highly recommend that candidates gain
additional experience before taking the exam. Candidates should:

- Review and become familiar with Aruba product documentation including the hardware
manuals and ArubaOS User Guide
- Review and practice configuring systems using the Aruba Best Practice Design Guides
- Practice or perform live demonstrations using Aruba equipment
- Gain sufficient hands-on field experience with Aruba hardware and software to obtain
familiarity with CLI equivalents of GUI configurations particularly related to configuration files
and troubleshooting

Exam Registration
Candidates can register for the Aruba ACMP exam through a Pearson VUE Authorized Test Center. The
website is www.pearsonvue.com/aruba/.
Topics
ACMP exam questions cover the topics listed below with at least one question for each topic. The
questions include key concepts, networking and topology design, GUI and CLI interpretation, GUI and CLI
troubleshooting, interpretation of CLI configuration file segments, and log output interpretation.

1 - Product Knowledge
2 - Roles, Firewall, ACL
3 - Operations
4 - Planning and Design
5 - IDS
6 - Troubleshooting
7 - Applications and Solutions

Topic Details
1. Product Knowledge
a. Mobility Controllers Models
i. Understand the limits of user scaling for different controller models.
ii. Understand the limits of AP scaling for different controller models.
iii. Understand the limits of Remote AP scaling for different controller models.
iv. Power supplies offered for various models.
v. Chassis based controller modules.
vi. Power-over-Ethernet support.
b. AP models
i. Indoor AP models.
ii. Outdoor AP models.
iii. Models supporting internal and external antennas.
iv. Antenna types offered as external antennas.
v. Models supporting Power-over-Ethernet support.
vi. 802.11a/b/g/n support by model.
c. Licensing
i. Understand the licensing model of legacy Mobility Controllers.
ii. Understand the licensing model for Multi-Service Mobility Controllers.
iii. Be able to articulate the features and functions of the Aruba software licenses.
iv. Be able to articulate the features and functions included in the base ArubaOS.
2. Roles, Firewall, ACL
a. Policy Design
i. Function of firewall design.
ii. Interpretation and troubleshooting of firewall rule policy.
iii. Application of firewall policy to user roles.
iv. Application of firewall policy to interfaces.
v. Be able to articulate the difference between a stateful firewall and an access
control list (ACL).
vi. Describe an Ethertype ACL.
b. Roles
i. Describe the function of built-in roles.
ii. Describe the use and creation of user created roles.
iii. Understand role derivation.
 c. Aliases
i. Describe the function and use of aliases.
ii. Understand the built in aliases.
d. NAT
i. Describe the function of source NAT.
ii. Describe the function of destination NAT.
iii. Understand the use of NAT for captive portal authentication.
iv. Describe VLAN based NAT functionality.
3. Interpret example policy
a. Operations
i. Software upgrades on the controllers and APs
ii. Interface layout
iii. AP management
iv. License management
v. Configuration screens
vi. Monitoring screens
vii. Security screens
b. Configuration Wizards
i. Configuration of the controller using the Controller Wizard
ii. VLAN and IP address configuration
iii. Port configuration
iv. Network time configuration
v. Controller role configuration
vi. License configuration
vii. WLAN configuration for employee SSIDs
viii. WLAN configuration for guest SSIDs
ix. RADIUS server configuration
x. 802.1X authentication configuration
xi. Captive portal configuration and customization
c. Authentication
i. 802.1X
ii. Pre-Shared Keys
iii. Open system
iv. Captive portal with credentials
v. Captive portal with guest logon
d. AP configuration methods
i. CLI configuration
ii. Web interface configuration
iii. Group selection
iv. Antenna provisioning
v. Serial configuration
e. Controller configuration methods
i. SNMP configuration
ii. Syslog configuration
iii. VLANs & VLAN trunking
iv. IP addressing
v. Use of the loopback interface
vi. Spanning tree
 vii. VRRP
f. Power over Ethernet
i. Power provided
ii. Standards
iii. Transmission distances
g. Roaming
i. Layer 2 roaming
ii. Layer 3 roaming
iii. Mobility domains
iv. HAT table configuration
h. RF management and ARM
i. ARM channel and power selection
ii. ARM self healing
iii. ARM band steering
iv. ARM rate shaping
v. Client aware ARM scanning
i. Master/local
i. Differences between a local controller and a master controller
ii. What is configured on the local
iii. What is configured on the master
j. Centralized Auth and Encryption
i. Centralized encryption
ii. Encryption methods
iii. Layer 2 Wi-Fi frame termination
iv. RAIDUS authentication
v. Fail through servers
vi. Fall through servers
vii. Machine authentication
viii. Per-SSID captive portal
k. Profile concepts
i. Profile concept
ii. Profile hierarchy
iii. Profile reuse
4. Planning and Design
a. Networking
i. Layer 2 networks
ii. Layer 3 networks
iii. Routing
b. Self-healing
i. AP deployment design
ii. ARM functionality
c. L2 model traffic flow
d. L3 model traffic flow
e. VPN
i. Site-to-Site VPN
ii. Client server VPN
f. Captive portal
i. Authentication types
 ii. Authentication sources
iii. Provisioning capabilities
iv. Internal DB functionality
v. Guest provisioning role
g. RF plan
i. Don’t care areas
ii. Don’t deploy areas
iii. Floor plan image import
iv. Plan selection criteria
v. Live heat maps
vi. Selecting the right AP and connection speed
h. Master/local
i. Where to place controllers
ii. Direct and indirect connection of APs
iii. L2 vs. L3 controller operation
iv. Controller communication considerations
i. Switch redundancy
i. Local redundancy
ii. Master redundancy
j. Mobility Domains
5. IDS
a. Rogue AP
i. Detection
ii. Classification
iii. Containment
b. Interfering AP
i. Detection
ii. Classification
c. IDS
i. Configuration
ii. Reporting
6. Troubleshooting
a. Client Connectivity
i. User connection
ii. AP status
b. Aruba platform
i. L2 connectivity
ii. L3 connectivity
iii. Licensing
iv. AP counts
v. Firewall policy
vi. Role derivation
vii. Master/local connectivity
viii. AP connectivity
ix. DHCP
x. Controller IP
c. Infrastructure
i. Intervening ACLs
 ii. DHCP
iii. PoE
7. Applications and Solutions
a. RAP
i. Configuration
ii. Licensing
iii. Operation modes
iv. Forwarding modes
v. Maintenance
b. Location
i. Locating a client
ii. AP design for location
iii. Location functionality
 1344 Crossman Ave. Sunnyvale, CA 94089-1113
Tel. +1.408.227.4500 | Fax. +1.408.227.4550 | info@arubanetworks.com
http://www.arubanetworks.com

© 2009 Aruba Networks, Inc. AirWave®, Aruba Networks®, Aruba Mobility Management System®, Bluescanner, For Wireless That Works®, Mobile Edge
Architecture®, People Move. Networks Must Follow®, RFProtect®, The All Wireless Workplace Is Now Open For Business, Green Island, and The Mobile Edge
Company® are trademarks of Aruba Networks, Inc. All rights reserved.