Examkin

Question

Difficulty: EasyCisco Wireless Architectures and AP Modes

Which Cisco Access Point (AP) mode operates by dedicating its radios to capturing wireless traffic and forwarding all raw 802.11 frames over a CAPWAP tunnel to a specified IP address for analysis by packet analyzer software such as Wireshark?

  1. Sniffer modeAnswer
  2. B
    Monitor mode
  3. C
    Local mode
  4. D
    Rogue Detector mode

Answer

Sniffer mode dedicatedly captures raw 802.11 frames on a specified channel and sends them via a CAPWAP tunnel to a designated workstation running network analysis software.
In Sniffer mode, the lightweight access point dedicates its radio to a specific channel, captures all 802.11 wireless traffic, and encapsulates those frames into CAPWAP packets sent to a destination server running a network protocol analyzer.

Step-by-Step Solution

1
Identify the AP mode configured specifically for remote packet capturing.
Sniffer mode allows an engineer to remotely capture wireless frames on a target channel without being physically present with a wireless packet capture card.
When an AP is placed in Sniffer mode, it stops serving clients and redirects all received radio traffic to a specified IP destination for decode and troubleshooting.

Key Concept

Cisco Lightweight AP Operational Modes
Estimated Time:45s
Rate this question

Topics

Cisco Wireless Architectures and AP Modes

More questions from this topic