nerdexam
Cisco

300-365 · Question #169

An engineer implements all remote sites using WLAN in FlexConnect with local authentication and the site experiences delays greater than 300 ms RTT. Which feature is disabled on the infrastructure?

The correct answer is A. AAA override. In FlexConnect mode with local authentication, AAA override is automatically disabled when the WAN round-trip time exceeds 300 ms, as the feature requires reliable communication with a central AAA server.

Wireless Troubleshooting and Optimization

Question

An engineer implements all remote sites using WLAN in FlexConnect with local authentication and the site experiences delays greater than 300 ms RTT. Which feature is disabled on the infrastructure?

Options

  • AAAA override
  • BMFP
  • CaWIPS
  • DLocal Auth

How the community answered

(23 responses)
  • A
    65% (15)
  • B
    17% (4)
  • C
    4% (1)
  • D
    13% (3)

Why each option

In FlexConnect mode with local authentication, AAA override is automatically disabled when the WAN round-trip time exceeds 300 ms, as the feature requires reliable communication with a central AAA server.

AAAA overrideCorrect

AAA override allows the WLC or AAA server to dynamically override VLAN and QoS policy assignments per client. In FlexConnect with local authentication, Cisco disables AAA override when WAN latency exceeds 300 ms RTT because the high latency makes centralized AAA policy enforcement unreliable, and the feature cannot function correctly without timely server responses.

BMFP

MFP (Management Frame Protection) is a security mechanism for protecting 802.11 management frames and is not tied to a 300 ms RTT threshold.

CaWIPS

aWIPS (adaptive Wireless Intrusion Prevention System) detects and mitigates wireless threats and does not have a latency-based disable condition at 300 ms RTT.

DLocal Auth

Local Auth is the authentication method intentionally configured for this scenario - it remains active and is not the feature that gets disabled by high latency.

Concept tested: FlexConnect AAA override and WAN latency impact

Source: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112084-flexconnect-00.html

Topics

#FlexConnect#AAA override#local authentication#high latency RTT

Community Discussion

No community discussion yet for this question.

Full 300-365 Practice