300-370 · Question #30
Scenario The Big Engineering IT team has been working in the lab to do some testing of some new features the existing network won't support. They are AP Croups, AP Failover, and Local Web Auth. They…
The correct answer is A. Change the High Availability Primary Controller Management Interface IP address. C. Add the Local Net User names and passwords D. Change the Layer 2 security to none and Layer 3 Security to Web Policy for the CSE- Contractors E. Remove me current WLAN from the CSE-WLAN AP Group and add all three of the WLANs. To resolve issues with AP Groups, AP Failover, and Local Web Auth, several configuration changes are required including adjusting High Availability settings, configuring local user accounts, modifying WLAN security policies, and correcting WLAN assignments within AP groups.
Question
Scenario The Big Engineering IT team has been working in the lab to do some testing of some new features the existing network won't support. They are AP Croups, AP Failover, and Local Web Auth. They have been having problems with all three features. In this test environment the controllers only support the Composite and Structural Engineering and Aerodynamic Engineering groups. All SSIDs should omit the department name. Refer to the exhibit. This is a diagram of the floor plan for the Big Engineering office and the distribution of the departments. The tables below show how the controllers have been configured. Note, not all menu items, text boxes, or radio buttons are active. When you review the configuration of the test network controller what needs to be changed to resolve the problems? (Choose four.)
Exhibits
Options
- AChange the High Availability Primary Controller Management Interface IP address.
- BRemove the current WLANs and replace them with WLANs that have the same SSID names as
- CAdd the Local Net User names and passwords
- DChange the Layer 2 security to none and Layer 3 Security to Web Policy for the CSE- Contractors
- ERemove me current WLAN from the CSE-WLAN AP Group and add all three of the WLANs
- FAdd the CSE APs to the CSE-WLANs AP-Group.
How the community answered
(16 responses)- A63% (10)
- B25% (4)
- F13% (2)
Why each option
To resolve issues with AP Groups, AP Failover, and Local Web Auth, several configuration changes are required including adjusting High Availability settings, configuring local user accounts, modifying WLAN security policies, and correcting WLAN assignments within AP groups.
An incorrect High Availability (HA) primary controller management IP address can prevent APs from failing over correctly between controllers, directly causing issues with AP Failover.
Removing and replacing WLANs with the same SSID names is unlikely to resolve underlying functional issues related to AP Groups, AP Failover, or Local Web Auth without further specific changes.
For Local Web Authentication to function, the controller must have local user accounts configured with names and passwords for clients to authenticate against.
Local Web Authentication typically requires the WLAN's Layer 2 security to be set to 'none' (open) and Layer 3 security to 'Web Policy' to redirect users to the authentication portal.
If AP Groups are not distributing the intended WLANs, adding all necessary WLANs to the specific AP group ensures they are broadcast by the associated Access Points.
While adding APs to an AP group might be a necessary step in some scenarios, option E specifically addresses WLAN assignments within the group, which is a common AP group configuration issue affecting which WLANs are broadcast.
Concept tested: Wireless LAN Controller configuration for AP Groups, HA, and Web Authentication
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wlc_cg_17_1.html
Topics
Community Discussion
No community discussion yet for this question.