Examkin

Question

Difficulty: HardAP and WLC Management Access Connections

A network engineer needs to configure management connectivity for a newly deployed Cisco Wireless LAN Controller (WLC). The design requires out-of-band (OOB) administrative management access isolated from production traffic, alongside in-band CAPWAP tunnel management for access point (AP) registration. Which interface assignment and switch port configuration correctly satisfies these requirements?

  1. Connect the WLC Service Port to an isolated switch access port for out-of-band administrative management, and map the WLC Management Interface to an 802.1Q trunk port to handle in-band CAPWAP control and management traffic.Answer
  2. B
    Map in-band CAPWAP tunnel management traffic exclusively to the Service Port, while configuring the WLC Management Interface on an untagged native VLAN access port to prevent native VLAN mismatch errors across switches.
  3. C
    Enable PortFast on the switch port trunk link connecting to the WLC Management Interface, and assign out-of-band administrative traffic directly to the WLC Virtual Interface.
  4. D
    Use the WLC AP-Manager interface for out-of-band web GUI administration, and configure the Service Port as an 802.1Q trunk port that dynamically learns client VLAN assignments using CDP neighbor TLVs.

Answer

Connect the WLC Service Port to an isolated switch access port for out-of-band administrative management, and map the WLC Management Interface to an 802.1Q trunk port to handle in-band CAPWAP control and management traffic.
The WLC Service Port is a dedicated, out-of-band physical interface designed specifically for network administration (CLI/SSH and Web GUI access) completely separate from data plane traffic. Conversely, the WLC Management Interface handles in-band management functions, including CAPWAP control and data tunnels from lightweight APs, inter-controller communication, and in-band GUI/CLI management. Connecting the Service Port to an isolated access port and the Management Interface to an 802.1Q trunk port fulfills all segregation and trunking requirements.

Step-by-Step Solution

1
Identify out-of-band management requirements
Recognize that the WLC Service Port is a dedicated, out-of-band physical interface used solely for administrative management (HTTP/HTTPS/SSH) and operates outside the production data plane.
Out-of-band management must remain physically and logically isolated from wireless user data and access point communication traffic.
2
Identify in-band CAPWAP tunnel management requirements
Determine that the WLC Management Interface is the default permanent in-band interface used for CAPWAP tunnel termination between lightweight APs and the WLC.
APs require IP connectivity to the WLC Management Interface (or AP-Manager interface) to establish CAPWAP tunnels for control and management.
3
Evaluate required switch port configurations
Select an isolated access port configuration for the Service Port and an 802.1Q trunk link for the Management Interface to support tagged VLANs across the wireless infrastructure.
The Service Port connects to an access port on an isolated management VLAN, whereas the main WLC distribution ports connect via 802.1Q trunks to pass multiple user and management VLANs.

Key Concept

WLC Management and Service Port Interface Roles
Rate this question

Topics

AP and WLC Management Access Connections

More questions from this topic