Question

Difficulty: MediumAP and WLC Management Access Connections

Match each Cisco Wireless LAN Controller (WLC) interface to its corresponding operational characteristic and network functionality.

  • Service PortDedicated out-of-band management interface configured on an isolated subnet without access to WLC dynamic interfaces.
  • Management InterfaceDefault in-band management interface used for controller administration, CAPWAP tunnel termination, and inter-controller communication.
  • Virtual InterfaceInternal logical interface supporting DHCP relay forwarding, mobility management, and web authentication user redirection.
  • Dynamic InterfaceVLAN-bound interface configured by network administrators to segment and carry client wireless traffic across the wired network.

Answer

The Service Port provides out-of-band management access. The Management Interface supports in-band management and CAPWAP communication. The Virtual Interface handles internal functions like web authentication and DHCP relay. Dynamic Interfaces handle user WLAN-to-VLAN traffic mapping.
Each Cisco WLC interface serves a distinct operational purpose: the Service Port handles out-of-band management on an isolated network; the Management Interface manages in-band administrative traffic and AP CAPWAP tunnels; the Virtual Interface provides Layer 3 services like web authentication redirection and DHCP relaying; and Dynamic Interfaces segment client traffic onto specific wired VLANs.

Step-by-Step Solution

1
Identify the role of out-of-band management on Cisco controllers.
The Service Port is identified as the physical port dedicated strictly to out-of-band administrative connections.
It does not route traffic to or from dynamic interfaces or support general wireless client forwarding.
2
Identify the primary in-band management and AP control interface.
The Management Interface is selected as it manages controller administrative access via SSH/HTTPS and terminates CAPWAP tunnels from lightweight APs.
This interface is mandatory and operates in-band over trunked switchports.
3
Distinguish between internal helper interfaces and client data interfaces.
The Virtual Interface provides logical redirection and DHCP relay services, while Dynamic Interfaces act like VLAN subinterfaces for user payload traffic.
The Virtual Interface requires a unroutable placeholder IP address, whereas Dynamic Interfaces map directly to standard 802.1Q VLAN IDs.

Key Concept

Cisco WLC Physical and Logical Interface Architecture
Rate this question