Exam HPE7-A07 Topic 3 Question 11 Discussion
Actual exam question for HP's HPE7-A07 exam
Question #: 11
Topic #: 3
Question #: 11
Topic #: 3
Which command would allow you to verify receipt of a CoA (Change of Authorization) message on an AOS-10 Gateway?
Suggested Answer: B Vote an answer
Comprehensive and Detailed Explanation (Verified Extract from HPE Aruba Networking AOS-10 Gateway Documentation) The Change of Authorization (CoA) message is a RADIUS-based control packet typically sent by ClearPass Policy Manager or another RADIUS server to modify client authorization dynamically after authentication.
In ArubaOS 10, CoA and Disconnect-Request (DM) messages use UDP port 3799 and are received on the control path of the gateway, not the datapath.
HPE Aruba AOS-10 documentation specifies:
"Use the command packet-capture controlpath udp 3799 on the gateway to verify that CoA packets are being received and processed on the control plane."
"The controlpath capture displays inbound CoA or DM messages received from RADIUS servers such as ClearPass." Command breakdown:
packet-capture controlpath udp 3799
* controlpath # Captures control-plane traffic (used for management protocols like RADIUS, CoA, CAPWAP, etc.)
* udp 3799 # Filters only CoA/DM packets
Why Others Are Incorrect:
* A. interprocess captures internal gateway processes, not RADIUS packets.
* C. diag utilities tcpdump is used in AOS 8.x, not AOS 10.
* D. tcpdump host-port 3576 uses the wrong port; CoA uses UDP 3799, not 3576 (which is for standard RADIUS authentication).
# Final Verified answer: B. packet-capture controlpath udp 3799
# Reference Sources (HPE Aruba Official Materials):
* Aruba AOS-10 Gateway Troubleshooting Guide - Control Path Packet Capture Commands
* Aruba ClearPass and AOS Integration Guide - RADIUS CoA Port (UDP 3799)
* Aruba Certified Mobility Professional (ACMP) Study Guide - CoA and Disconnect Message Verification
In ArubaOS 10, CoA and Disconnect-Request (DM) messages use UDP port 3799 and are received on the control path of the gateway, not the datapath.
HPE Aruba AOS-10 documentation specifies:
"Use the command packet-capture controlpath udp 3799 on the gateway to verify that CoA packets are being received and processed on the control plane."
"The controlpath capture displays inbound CoA or DM messages received from RADIUS servers such as ClearPass." Command breakdown:
packet-capture controlpath udp 3799
* controlpath # Captures control-plane traffic (used for management protocols like RADIUS, CoA, CAPWAP, etc.)
* udp 3799 # Filters only CoA/DM packets
Why Others Are Incorrect:
* A. interprocess captures internal gateway processes, not RADIUS packets.
* C. diag utilities tcpdump is used in AOS 8.x, not AOS 10.
* D. tcpdump host-port 3576 uses the wrong port; CoA uses UDP 3799, not 3576 (which is for standard RADIUS authentication).
# Final Verified answer: B. packet-capture controlpath udp 3799
# Reference Sources (HPE Aruba Official Materials):
* Aruba AOS-10 Gateway Troubleshooting Guide - Control Path Packet Capture Commands
* Aruba ClearPass and AOS Integration Guide - RADIUS CoA Port (UDP 3799)
* Aruba Certified Mobility Professional (ACMP) Study Guide - CoA and Disconnect Message Verification
by Martha at Oct 08, 2026, 01:48 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).