An administrator is configuring a corporate WLAN on a Cisco Wireless LAN Controller (WLC) GUI for enterprise clients requiring 802.1X authentication and centralized CAPWAP traffic forwarding. During initial client association tests, clients fail to complete 802.1X authentication and fail to receive an IP address via DHCP. Inspection of the WLC GUI shows that the WLAN status is enabled, but client traffic is mapped to the default management interface, and no authentication server is processing client login requests for this WLAN. Which TWO configurations within the WLC GUI WLAN edit menu must be applied to resolve these client connectivity issues? (Select two.)
- Navigate to WLANs > Edit > Security > AAA Servers tab and select the active RADIUS server under Server 1 in the Authentication Servers section.Cevap
- Navigate to WLANs > Edit > General tab and change the Interface/Interface Group dropdown from management to the mapped dynamic client VLAN interface.Cevap
- CNavigate to WLANs > Edit > Security > Layer 3 tab and enable Web Authentication with RADIUS server fallback.
- DNavigate to WLANs > Edit > Advanced tab and check the FlexConnect Local Switching box.
Cevap
To resolve 802.1X client authentication failure and improper DHCP address assignment, the administrator must select an active RADIUS server under the Security > AAA Servers tab and reassign the WLAN interface mapping from management to the client dynamic VLAN interface under the General tab.
In the Cisco WLC GUI, establishing functional client connectivity for an 802.1X enterprise WLAN requires configuring AAA authentication server bindings under WLANs > Edit > Security > AAA Servers. Additionally, assigning client traffic to the correct dynamic interface corresponding to the client VLAN must be performed under the WLANs > Edit > General tab.
Adım Adım Çözüm
Anahtar Kavram
WLAN Interface Mapping and AAA Server Association in Cisco WLC GUI