Question

Difficulty: HardWireless LAN Client Connectivity Configuration via WLC GUI

A network administrator needs to deploy a new corporate WLAN using WPA2/WPA3 Enterprise authentication on a Cisco AireOS Wireless LAN Controller (WLC) via the web GUI. Arrange the following administrative tasks in the correct sequential order required to successfully configure and activate the WLAN for wireless client connectivity.

  1. 1Navigate to WLANs > WLANs, select 'Create New' from the drop-down list, click Go, and enter the Profile Name and SSID.
  2. 2On the WLANs > Edit page under the General tab, select the target dynamic interface from the Interface/Interface Group(GSS) drop-down menu.
  3. 3Navigate to the Security > Layer 2 tab, select WPA2/WPA3 security options, and enable 802.1X Auth Key Management.
  4. 4Navigate to the AAA Servers tab and select the active RADIUS authentication server from the Server 1 drop-down menu.
  5. 5Return to the General tab, check the Enabled box next to Status, and click Apply to enable client broadcasts and connectivity.

Answer

The correct procedural sequence is: 1) Navigate to WLANs > WLANs, select 'Create New' and enter the Profile Name and SSID; 2) On the General tab, map the dynamic interface; 3) Under Security > Layer 2, configure WPA2/WPA3 and 802.1X key management; 4) On the AAA Servers tab, bind the RADIUS authentication server; 5) Return to the General tab to check the Status (Enabled) box and click Apply.
Configuring a WLC WLAN requires a strict logical workflow: basic WLAN instantiation (SSID/Profile Name), interface assignment for VLAN traffic routing, Layer 2 security protocol selection (802.1X), external AAA RADIUS binding, and finally enabling the administrative Status to begin broadcasting the SSID.

Step-by-Step Solution

1
Initialize WLAN creation in WLC GUI
Defines the WLAN container with unique SSID and Profile Name.
Creating the basic WLAN structure is the mandatory starting point before detailed parameters can be edited.
2
Assign dynamic interface mapping
Associates wireless client traffic to the appropriate VLAN interface.
Setting the interface on the General tab ensures client packets are tagged with the correct VLAN ID upon join.
3
Define Layer 2 security mechanism
Sets authentication mode to 802.1X (WPA2/WPA3 Enterprise).
Configuring 802.1X key management under Security > Layer 2 specifies that external AAA authentication is required.
4
Map external RADIUS authentication server
Binds the globally defined RADIUS server to this specific WLAN under AAA Servers.
The WLC cannot authenticate 802.1X clients without associating a RADIUS server to the WLAN.
5
Enable WLAN status and apply changes
Activates the WLAN on member Access Points for client probing and association.
By default, new WLANs are disabled; enabling status must occur after all dependencies (interface, security, AAA) are configured.

Key Concept

WLC GUI WLAN Configuration Sequence
Rate this question