Question

Difficulty: MediumWireless LAN Client Connectivity Configuration via WLC GUI

A network administrator needs to create a new enterprise wireless network on a Cisco Wireless LAN Controller (WLC) using the GUI. The network must use WPA2-Enterprise with 802.1X authentication via an external RADIUS server and be mapped to an existing dynamic interface. Place the configuration steps in the correct sequential order from first to last.

  1. 1Navigate to WLANs > WLANs, select 'Create New' from the drop-down menu, click 'Go', and define the Profile Name, SSID, and WLAN ID.
  2. 2On the General tab, map the newly created WLAN to the appropriate Interface/Interface Group for client network traffic.
  3. 3Navigate to the Security > Layer 2 tab, select WPA+WPA2 security policy, and set Authentication Key Management to 802.1X.
  4. 4Navigate to the Security > AAA Servers sub-tab and select the designated RADIUS server IP address from the Authentication Servers drop-down list.
  5. 5Return to the General tab, check the 'Status' box to enable the WLAN, and click 'Apply' to finalize the configuration.

Answer

The correct sequence to configure the enterprise WLAN via the Cisco WLC GUI is: 1) Create the new WLAN profile and SSID, 2) Map the WLAN to the dynamic interface on the General tab, 3) Select WPA2 and 802.1X key management on the Security > Layer 2 tab, 4) Choose the RADIUS server under the Security > AAA Servers tab, and 5) Select the Status checkbox on the General tab and click Apply.
The proper administrative workflow in the Cisco WLC GUI requires creating the WLAN profile first, mapping the Layer 2/3 dynamic interface on the General tab, configuring Layer 2 security for WPA2 802.1X authentication, defining the RADIUS authentication server under Security > AAA Servers, and finally checking the Status checkbox on the General tab and applying the settings.

Step-by-Step Solution

1
Initiate new WLAN creation.
Access the WLAN creation screen to assign the Profile Name and SSID.
Creating the basic WLAN profile creates the configuration object in the controller database.
2
Assign the dynamic interface on the General tab.
Associates wireless client connections with the specified IP subnet and VLAN.
Interface binding ensures wireless clients receive network connectivity on the appropriate subnet upon association.
3
Configure Layer 2 security policies under Security > Layer 2.
Enables WPA2-Enterprise with 802.1X Key Management.
Selecting 802.1X key management defines that client authentication relies on EAP and external AAA infrastructure.
4
Assign RADIUS server settings under Security > AAA Servers.
Links the WLAN to the active RADIUS server for identity verification.
Selecting the active RADIUS authentication server directs 802.1X authentication requests to the network access server.
5
Enable the WLAN status on the General tab and apply changes.
Activates the WLAN across connected Access Points.
Cisco WLCs leave newly created WLANs disabled by default to prevent broadcast before security and routing configurations are complete.

Key Concept

WLC GUI WLAN Configuration Sequence
Estimated Time:1m 30s
Rate this question