300-365 · Question #178
An engineer deployed a high-density design in an auditorium with interface groups. A subgroup of users needs a different interface group than the general group. Which setting takes the highest…
The correct answer is B. AAA override. On a Cisco WLC, AAA override takes the highest priority for interface and VLAN assignment, allowing RADIUS-returned attributes to supersede all locally configured settings including AP group assignments.
Question
An engineer deployed a high-density design in an auditorium with interface groups. A subgroup of users needs a different interface group than the general group. Which setting takes the highest priority on the WLC to use the correct group?
Options
- ADHCP server override
- BAAA override
- CVLAN-ACL mapping
- DAP group
How the community answered
(45 responses)- A4% (2)
- B80% (36)
- C4% (2)
- D11% (5)
Why each option
On a Cisco WLC, AAA override takes the highest priority for interface and VLAN assignment, allowing RADIUS-returned attributes to supersede all locally configured settings including AP group assignments.
DHCP server override changes only the DHCP server used for a client and does not affect interface group assignment, so it cannot redirect a user subgroup to a different interface.
AAA override on the Cisco WLC enables a RADIUS server to return interface, VLAN, or interface group attributes that take precedence over any locally configured AP group or WLAN interface settings. This mechanism is specifically designed so that per-user or per-group policies from the AAA infrastructure are enforced above all other local configurations, making it the highest-priority assignment method on the WLC.
VLAN-ACL mapping applies access control policies to a VLAN after assignment but does not override the interface group assigned to a client and has lower priority than AAA override.
AP group sets a default interface group for clients associating to APs in that group, but this local setting is overridden when the RADIUS server returns a different interface or VLAN attribute via AAA override.
Concept tested: Cisco WLC AAA override priority for interface group assignment
Source: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99594-aaa-override-wlc-vlan.html
Topics
Community Discussion
No community discussion yet for this question.