Examkin

Question

Difficulty: HardAP and WLC Management Access Connections

Match each Cisco Wireless LAN Controller (WLC) physical or logical interface to its primary operational role and management connectivity requirement.

  • Service Port InterfaceProvides dedicated out-of-band management access using a separate routing table, operating independently of normal wireless traffic.
  • Management InterfaceServes as the primary in-band interface for controller administration, CAPWAP tunnel termination from APs, and RADIUS authentication traffic.
  • Virtual InterfaceUses a fictitious non-routable IP address to support Layer 3 web authentication client redirection, DHCP relay proxying, and mobility messaging.
  • Dynamic InterfaceMaps a Wireless LAN (SSID) to a specific wired 802.1Q VLAN trunk for carrying user data payload across the enterprise network.

Answer

Service Port Interface pairs with out-of-band management over a separate routing table. Management Interface pairs with in-band WLC administration, CAPWAP tunnel termination, and RADIUS. Virtual Interface pairs with web authentication redirection, DHCP relay proxying, and mobility. Dynamic Interface pairs with mapping WLAN SSIDs to 802.1Q VLAN trunks.
Each Cisco WLC interface has a distinct role: Service Port provides out-of-band access via an isolated routing table; Management Interface manages in-band CAPWAP tunnels, GUI/SSH access, and AAA; Virtual Interface handles web authentication redirects using a non-routable IP address; and Dynamic Interfaces map SSIDs to enterprise switchport VLANs.

Step-by-Step Solution

1
Identify out-of-band management capabilities
Match Service Port Interface to out-of-band access
The Service Port is physically separated from data ports and resides in an isolated management network routing table.
2
Identify in-band controller administration and AP CAPWAP termination interface
Match Management Interface to in-band administrative operations and CAPWAP tunnel endpoint functions
Lightweight APs discover and establish CAPWAP management tunnels to the controller's Management Interface IP address.
3
Determine the interface responsible for web redirection and mobility signaling
Match Virtual Interface to web auth redirection and relay proxying
The Virtual Interface uses an internal non-routable IP address to handle Layer 3 guest web portal redirects.
4
Identify data plane mapping for wireless client payload traffic
Match Dynamic Interface to SSID-to-VLAN trunk mapping
Dynamic interfaces bind configured WLANs to specific 802.1Q VLAN tags on distribution switchports.

Key Concept

Cisco WLC Logical and Physical Interface Roles for In-Band and Out-Of-Band Management
Rate this question

Topics

AP and WLC Management Access Connections

More questions from this topic