Examkin

Soru

Zorluk: Çok zorCisco Wireless Architectures and AP Modes

An enterprise deploys Cisco lightweight Access Points (APs) configured in FlexConnect mode at a remote branch location connected via a WAN link to a centralized Wireless LAN Controller (WLC). The branch supports two SSIDs: an Enterprise WLAN configured for local switching with 802.1X (EAP) using FlexConnect Local Authentication, and a Guest WLAN configured for central switching and central authentication. If the WAN connection between the branch APs and the centralized WLC fails, causing the APs to transition to standalone mode, which statement correctly describes the resulting wireless client behavior?

  1. Clients on the Enterprise WLAN can successfully authenticate and maintain local data switching, while clients attempting to connect to the Guest WLAN are unable to authenticate or pass traffic.Cevap
  2. B
    The APs immediately reboot and transition to Local mode, dropping all active wireless client sessions until CAPWAP tunnel connectivity to the WLC is restored.
  3. C
    Both Enterprise and Guest WLANs automatically convert to local switching and local authentication, allowing all wireless clients full network access.
  4. D
    Existing clients on both WLANs maintain active connections, but new client authentications are rejected on the Enterprise WLAN while being accepted on the Guest WLAN.

Cevap

Clients on the Enterprise WLAN can successfully authenticate and maintain local data switching, while clients attempting to connect to the Guest WLAN are unable to authenticate or pass traffic.
In Cisco wireless architectures, FlexConnect APs in standalone mode maintain functionality for WLANs configured for local switching and local authentication. Because the Enterprise WLAN uses local switching and FlexConnect Local Authentication, clients on this SSID can continue to authenticate and forward traffic directly onto the local branch network. Conversely, WLANs configured for central switching rely on the CAPWAP data tunnel to the WLC; when WAN connectivity to the controller is lost, centrally switched WLANs like the Guest WLAN become completely disabled.

Adım Adım Çözüm

1
Analyze AP mode and controller connectivity state.
The lightweight APs are operating in FlexConnect mode and lose their CAPWAP connection to the centralized WLC, placing them in standalone mode.
FlexConnect APs are specifically designed for branch office deployments where WAN link loss to the WLC may occur.
2
Evaluate the behavior of the Enterprise WLAN.
Because the Enterprise WLAN is configured for local switching and FlexConnect Local Authentication, the AP handles 802.1X authentication and switches user traffic locally to the branch VLAN without requiring active WLC communication.
FlexConnect Local Authentication enables the AP or local RADIUS/FlexConnect Group to process authentication requests locally during WAN outages.
3
Evaluate the behavior of the Guest WLAN.
Because the Guest WLAN relies on central switching (CAPWAP data tunnel to WLC) and central authentication, it becomes completely non-functional when the CAPWAP tunnel is down.
Centrally switched traffic must traverse the CAPWAP data tunnel back to the WLC, which is impossible when WAN connectivity to the controller is disconnected.

Anahtar Kavram

Cisco FlexConnect AP Standalone Mode Operations and Local vs. Central Switching
Bu soruyu puanla

Konular

Cisco Wireless Architectures and AP Modes

Bu konudan daha fazla soru