Examkin

Question

Difficulty: HardWireless LAN Client Connectivity Configuration via WLC GUI

An engineer has globally defined an external RADIUS server under Controller > AAA > RADIUS > Authentication on a Cisco Wireless LAN Controller (WLC). The engineer then creates a new enterprise WLAN with Layer 2 Security set to WPA2 using 802.1X authentication. However, wireless clients attempting to connect are unable to authenticate, and debug logs indicate that no authentication requests are being transmitted to the RADIUS server. Which configuration action within the WLANs > Edit menu must be performed to resolve this client authentication failure?

  1. Select the active RADIUS server under the AAA Servers tab of the specific WLAN configuration.Answer
  2. B
    Enable AAA Override on the Advanced tab of the WLAN configuration.
  3. C
    Configure the RADIUS Shared Secret under the Security > Layer 2 tab of the WLAN configuration.
  4. D
    Add a Layer 3 ACL permit statement for UDP port 1812 under the Security > Layer 3 tab of the WLAN configuration.

Answer

Selecting the active RADIUS server under the AAA Servers tab of the specific WLAN configuration enables the WLC to route 802.1X client authentication requests to the RADIUS server.
Global RADIUS server configuration under the Controller menu merely registers the server with the WLC. To enable client authentication for a specific WLAN using 802.1X, an administrator must navigate to WLANs > Edit > AAA Servers tab and select the desired RADIUS server from the Authentication Servers drop-down menu.

Step-by-Step Solution

1
Analyze the prerequisite global configuration versus WLAN-specific mapping on Cisco WLC GUI.
Global configuration makes the RADIUS server available, but individual WLANs must be explicitly bound to the server.
Different WLANs may require different RADIUS servers or authentication server groups.
2
Identify the specific GUI tab in the WLANs > Edit menu responsible for authentication server assignment.
The AAA Servers tab contains drop-down menus for Authentication and Accounting servers.
This tab connects the WLAN's 802.1X security configuration to the desired RADIUS server index.
3
Select the primary RADIUS server from the Authentication Servers drop-down list.
The controller now forwards EAP-Request/Response packets between wireless clients and the designated RADIUS server.
Without this mapping, the WLC has no target server configured for client 802.1X requests on that WLAN.

Key Concept

WLAN AAA Server Mapping in Cisco WLC GUI
Estimated Time:1m 30s
Rate this question

Topics

Wireless LAN Client Connectivity Configuration via WLC GUI

More questions from this topic