Question

Difficulty: MediumAP and WLC Management Access Connections

A network administrator is deploying Cisco Lightweight Access Points (APs) operating in default Local mode within a centralized wireless architecture. Which two statements accurately describe the switchport configuration and CAPWAP management access requirements for these APs?

  1. The switch port connecting the Local mode AP is typically configured as a standard Layer 2 access port assigned to the AP management VLAN.Answer
  2. B
    The switch port connecting the Local mode AP must be configured as an 802.1Q trunk with spanning-tree portfast trunk enabled to switch client VLAN traffic locally.
  3. The AP uses CAPWAP control packets to discover the controller and establish an encapsulated management and data path to the WLC Management Interface.Answer
  4. D
    The AP management connection requires a native VLAN mismatch configuration on the switch port to reach the WLC Service Port out-of-band interface.

Answer

In a centralized wireless architecture using Local mode APs, the AP switch port should be configured as a standard Layer 2 access port assigned to the AP management VLAN. Additionally, the AP establishes CAPWAP control and data tunnels back to the WLC Management Interface.
Lightweight APs operating in default Local mode encapsulate all wireless client traffic and management communications inside CAPWAP tunnels. Because all frames leave the AP as unicast IP packets on a single management address, the switch port connecting the AP only needs to be a standard access port in the AP management VLAN. The CAPWAP control and data tunnels terminate on the WLC Management Interface.

Step-by-Step Solution

1
Identify the operation mode of the Lightweight Access Point.
The AP is in default Local mode, meaning all client traffic is backhauled over CAPWAP tunnels to the controller rather than being switched locally.
Local mode APs do not tag or bridge client VLANs directly onto the access switch.
2
Determine switchport requirements for Local mode APs.
Since all traffic is encapsulated inside CAPWAP packets on a single AP management IP address, a simple access port assigned to the AP management VLAN is appropriate.
Trunking is unnecessary for Local mode APs because client VLAN tagging happens at the controller.
3
Verify WLC interface roles for AP management access.
APs form CAPWAP tunnels to the WLC Management Interface (in-band), while the Service Port is strictly reserved for out-of-band controller management.
CAPWAP tunnels terminate on the WLC Management Interface.

Key Concept

Switchport placement and CAPWAP connectivity for Cisco Lightweight APs in Local mode
Rate this question