nerdexam
Cisco

300-370 · Question #57

A recently acquired Cisco Aironet 1550 series AP is unable to join the WLC. This message is observed on the AP console: AAA Authentication Failure for UserName: CC93.1981.0035 User Type: WLAN USER…

The correct answer is A. Add MAC address CC93.1981.0035 to the Security AAA AP policy Authorization List. The 'AAA Authentication Failure' for an AP's MAC address indicates that the Wireless LAN Controller's (WLC) AP authorization policy is preventing the AP from joining.

Troubleshooting Wireless Infrastructure

Question

A recently acquired Cisco Aironet 1550 series AP is unable to join the WLC. This message is observed on the AP console:

AAA Authentication Failure for UserName: CC93.1981.0035 User Type: WLAN USER Which action must be taken for the AP to associate with the controller?

Options

  • AAdd MAC address CC93.1981.0035 to the Security AAA AP policy Authorization List.
  • BAuthenticate the AP to the WLC from the console using an admin account on the WLC.
  • CAdd MAC address CC93.1981.035 to the Security AAA MAC Filtering tab.
  • DImport the self-signed certificate of the AP to the Security:Certificate:LSC tab.
  • EImport the self-signed certificate of the AP to the Security:Certificate:SSC tab.

How the community answered

(39 responses)
  • A
    72% (28)
  • B
    3% (1)
  • C
    3% (1)
  • D
    15% (6)
  • E
    8% (3)

Why each option

The 'AAA Authentication Failure' for an AP's MAC address indicates that the Wireless LAN Controller's (WLC) AP authorization policy is preventing the AP from joining.

AAdd MAC address CC93.1981.0035 to the Security AAA AP policy Authorization List.Correct

The error message 'AAA Authentication Failure for UserName: CC93.1981.0035 User Type: WLAN USER' specifically points to a failure in the WLC's AAA authorization process for the AP's MAC address, indicating that the MAC must be added to the WLC's Security AAA AP policy Authorization List to allow it to join.

BAuthenticate the AP to the WLC from the console using an admin account on the WLC.

Authenticating an AP from the WLC console using an administrator account is not the correct mechanism for an AP to join; APs use their MAC addresses or certificates for authorization during the join process.

CAdd MAC address CC93.1981.035 to the Security AAA MAC Filtering tab.

MAC filtering is typically applied to wireless clients rather than access points joining the controller, and the MAC address provided in the option has a typo compared to the error message.

DImport the self-signed certificate of the AP to the Security:Certificate:LSC tab.

Importing a Local Significant Certificate (LSC) is used for secure AP-WLC communication when LSC authentication is enabled, but the error message clearly indicates a MAC-based AAA authorization failure, not a certificate issue.

EImport the self-signed certificate of the AP to the Security:Certificate:SSC tab.

Importing a Self-Signed Certificate (SSC) is not a standard or typical method for AP authentication to a WLC; certificate-based authentication usually involves LSC or Manufacturer Installed Certificates (MIC) with a trusted Certificate Authority.

Concept tested: AP authentication and authorization on WLC

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/b_cg85_chapter_01000.html

Topics

#AP join process#AAA authentication#MAC authentication#WLC security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-370 Practice