Question

Difficulty: MediumWireless LAN Client Connectivity Configuration via WLC GUI

A network administrator is creating a new WLAN on a Cisco Wireless LAN Controller (WLC) using the web GUI. The WLAN must support 802.1X authentication using a centralized RADIUS server and allow the RADIUS server to dynamically assign VLANs to clients upon successful authentication. Which TWO configuration settings must be enabled on the WLC GUI for this WLAN? (Select TWO.)

  1. Under the Security > Layer 2 tab, select WPA2/WPA3 parameters and set Key Management to 802.1X.Answer
  2. Under the Advanced tab, check the Allow AAA Override checkbox.Answer
  3. C
    Under the Security > Layer 3 tab, set the Authentication Policy to RADIUS 802.1X.
  4. D
    Under the General tab, set the Interface/Interface Group to FlexConnect Local Switching to enable AAA VLAN override.

Answer

To configure 802.1X enterprise authentication with dynamic VLAN assignment via RADIUS, the administrator must configure 802.1X under the Security > Layer 2 tab and enable 'Allow AAA Override' under the Advanced tab.
To support RADIUS-based 802.1X authentication, 802.1X Key Management must be selected under the Security > Layer 2 tab. To allow the RADIUS server to dynamically assign clients to specific VLANs based on user credentials, the 'Allow AAA Override' setting must be explicitly enabled under the Advanced tab.

Step-by-Step Solution

1
Configure Layer 2 Security for 802.1X Enterprise Authentication.
Navigating to Security > Layer 2 allows selecting WPA2/WPA3 and setting Authentication Key Management (AKM) to 802.1X.
802.1X integrates the WLC with a RADIUS server for EAP-based client authentication.
2
Enable AAA Override for Dynamic VLAN Assignment.
Navigating to the Advanced tab and selecting 'Allow AAA Override' permits the WLC to override the default WLAN interface.
Without AAA Override, VLAN assignment attributes sent by RADIUS are ignored by the controller.

Key Concept

WLC GUI WLAN Security and AAA Override Configuration
Rate this question