nerdexam
Cisco

300-365 · Question #178

An engineer deployed a high-density design in an auditorium with interface groups. A subgroup of users needs a different interface group than the general group. Which setting takes the highest…

The correct answer is B. AAA override. On a Cisco WLC, AAA override takes the highest priority for interface and VLAN assignment, allowing RADIUS-returned attributes to supersede all locally configured settings including AP group assignments.

Wireless Deployment

Question

An engineer deployed a high-density design in an auditorium with interface groups. A subgroup of users needs a different interface group than the general group. Which setting takes the highest priority on the WLC to use the correct group?

Options

  • ADHCP server override
  • BAAA override
  • CVLAN-ACL mapping
  • DAP group

How the community answered

(45 responses)
  • A
    4% (2)
  • B
    80% (36)
  • C
    4% (2)
  • D
    11% (5)

Why each option

On a Cisco WLC, AAA override takes the highest priority for interface and VLAN assignment, allowing RADIUS-returned attributes to supersede all locally configured settings including AP group assignments.

ADHCP server override

DHCP server override changes only the DHCP server used for a client and does not affect interface group assignment, so it cannot redirect a user subgroup to a different interface.

BAAA overrideCorrect

AAA override on the Cisco WLC enables a RADIUS server to return interface, VLAN, or interface group attributes that take precedence over any locally configured AP group or WLAN interface settings. This mechanism is specifically designed so that per-user or per-group policies from the AAA infrastructure are enforced above all other local configurations, making it the highest-priority assignment method on the WLC.

CVLAN-ACL mapping

VLAN-ACL mapping applies access control policies to a VLAN after assignment but does not override the interface group assigned to a client and has lower priority than AAA override.

DAP group

AP group sets a default interface group for clients associating to APs in that group, but this local setting is overridden when the RADIUS server returns a different interface or VLAN attribute via AAA override.

Concept tested: Cisco WLC AAA override priority for interface group assignment

Source: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99594-aaa-override-wlc-vlan.html

Topics

#AAA override#interface groups#VLAN assignment#priority order

Community Discussion

No community discussion yet for this question.

Full 300-365 Practice