An AOS-Switch needs to implement tunneled node in role-based mode. Aruba ClearPass is configured to assign users for which the traffic should be tunneled to a role named tunnel. The Aruba Mobility Controller should apply policies associated with the employees group to these users.
What is the correct user role configuration on the AOS-Switch for this scenario?
A . two user roles, one named tunnel that uses the tunneled-node-redirect command, and one named employees
B . two user roles, one named employees that uses the tunneled-node-redirect command, and one named tunnel
C . one user role named tunnel with employees set as the secondary role in the tunneled-node-redirect command
D . one user role named employees with tunnel set as the secondary role in the tunneled-node-redirect command
Answer: D