HPE Aruba Networking Certified Professional - Campus Access (ACP-CA) Practice Test 2026 – Comprehensive All-in-One Guide to Exam Success

Securing the path that carries RADIUS packets is essential. RadSec (RADIUS over TLS) wraps RADIUS traffic in TLS, providing encryption and mutual authentication for the communication between the network access devices (APs) and the RADIUS server. To truly protect that link, both ends must speak RadSec: the APs (as RADIUS clients) and the RADIUS server (including a cloud-hosted one). That way, credentials and accounting data in the RADIUS messages are protected in transit.

EAP-TLS and EAP-TTLS control how the user credentials are carried inside the wireless authentication process, but they don’t secure the transport between the AP and the RADIUS server. So they don’t address protecting the AP–RADIUS server path. Therefore, the appropriate configuration is RadSec on the AP and the RADIUS server.