Question

Difficulty: MediumWLAN Infrastructure Connections and LAG

A network administrator is setting up a branch office deployment with Cisco Access Points (APs) operating in FlexConnect mode. The APs need to locally switch traffic for client WLANs mapped to corporate VLAN 20 and guest VLAN 30, while using VLAN 10 for AP management and CAPWAP control traffic back to the WLC. Which switch port configuration must be applied to the switch interface connected to each FlexConnect AP?

  1. Configure the switch port as an 802.1Q trunk port with Native VLAN 10 and allowed VLANs 10, 20, and 30.Answer
  2. B
    Configure the switch port as an access port assigned to VLAN 10, allowing CAPWAP to tunnel both management and locally switched data traffic.
  3. C
    Configure an LACP EtherChannel bundle on the switch port using 'channel-group mode active' to carry multi-VLAN traffic to the AP.
  4. D
    Configure the switch port as an 802.1Q trunk port with Native VLAN 20 and untagged management traffic mapped to VLAN 30.

Answer

The switch port must be configured as an 802.1Q trunk port with Native VLAN 10 (for untagged AP management/CAPWAP traffic) and allowed VLANs 10, 20, and 30 for local client traffic switching.
FlexConnect APs configured for local switching handle client traffic locally at the branch level. To support multiple SSIDs mapped to different VLANs (VLAN 20 and 30) alongside AP management traffic (VLAN 10), the connected switch port must be an 802.1Q trunk. Untagged AP management traffic maps to the native VLAN (VLAN 10), while client traffic is tagged with its respective local VLAN IDs.

Step-by-Step Solution

1
Identify the operational mode of the Access Point.
The AP is in FlexConnect mode performing local switching for client traffic.
FlexConnect APs process VLAN tags locally on their physical Ethernet interfaces for traffic sent directly to the local switch infrastructure.
2
Determine the interface type required on the switch.
An 802.1Q trunk interface is required because multiple VLANs (VLAN 10, 20, 30) must traverse the single link connecting the AP.
Access ports can only carry a single VLAN, which is insufficient for multi-VLAN local switching.
3
Determine Native VLAN assignment for AP management.
Set Native VLAN to VLAN 10 on the switch trunk port.
Cisco APs transmit untagged management traffic by default. The native VLAN on the switch trunk port ensures untagged packets from the AP are placed onto management VLAN 10.

Key Concept

FlexConnect AP Infrastructure Switch Port Trunking Requirements
Rate this question