nerdexam
Cisco

300-365 · Question #154

An engineer must ensure that clients on an 802.1x WLAN can roam as fast as possible at a remote site that was deployed with FlexConnect. Which configuration ensures that this roaming occurs?

The correct answer is A. FlexConnect group. A FlexConnect group enables fast 802.1x roaming at remote sites by allowing member APs to share PMK cache entries, so clients can skip full EAP re-authentication when roaming between APs.

Mobility Deployment

Question

An engineer must ensure that clients on an 802.1x WLAN can roam as fast as possible at a remote site that was deployed with FlexConnect. Which configuration ensures that this roaming occurs?

Options

  • AFlexConnect group
  • BFlexConnect ACL
  • Clearn client IP address
  • DAAA override

How the community answered

(48 responses)
  • A
    83% (40)
  • B
    2% (1)
  • C
    4% (2)
  • D
    10% (5)

Why each option

A FlexConnect group enables fast 802.1x roaming at remote sites by allowing member APs to share PMK cache entries, so clients can skip full EAP re-authentication when roaming between APs.

AFlexConnect groupCorrect

A FlexConnect group enables Opportunistic Key Caching (OKC) among all member APs at the same remote site, allowing them to share Pairwise Master Key (PMK) security associations. When a client roams to another AP in the same FlexConnect group, it re-uses the cached PMK instead of running a full 802.1x EAP exchange, dramatically reducing roaming latency even when the WLC link is unavailable.

BFlexConnect ACL

FlexConnect ACLs filter locally switched traffic and have no effect on 802.1x re-authentication speed during a roaming event.

Clearn client IP address

The 'learn client IP address' option allows the AP to detect a roaming client's existing IP for local switching continuity, but it does not reduce 802.1x re-authentication overhead.

DAAA override

AAA override enables RADIUS-returned attributes to supersede WLAN settings but does not accelerate the 802.1x key exchange process during roaming.

Concept tested: FlexConnect group OKC fast roaming for 802.1x WLANs

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/flexconnect.html

Topics

#FlexConnect groups#fast roaming#802.1x#key caching

Community Discussion

No community discussion yet for this question.

Full 300-365 Practice