300-425 · Question #170
A customer uses a Cisco Catalyst 9800 Series wireless controller to manage all of the APs for a campus network. Secure guest access is required for the guest network. A Cisco 5520 anchor controller…
The correct answer is B. Enable control plane encryption on the wireless controller. Enabling control plane encryption on the wireless controller is crucial for establishing a secure mobility tunnel between the wireless controller and the anchor controller. Control plane encryption ensures that the signaling and management traffic traversing the mobility tunnel…
Question
A customer uses a Cisco Catalyst 9800 Series wireless controller to manage all of the APs for a campus network. Secure guest access is required for the guest network. A Cisco 5520 anchor controller is deployed within a DMZ. Which design approach ensures that the mobility tunnel is established successfully between the wireless controller and the anchor controller?
Options
- ARun an Inter-Release Controller Mobility compatible software version on the wireless controller.
- BEnable control plane encryption on the wireless controller.
- CDisable data link encryption on the anchor controller.
- DRun an Inter-Release Controller Mobility compatible software version on the anchor controller.
How the community answered
(45 responses)- A9% (4)
- B82% (37)
- C2% (1)
- D7% (3)
Explanation
Enabling control plane encryption on the wireless controller is crucial for establishing a secure mobility tunnel between the wireless controller and the anchor controller. Control plane encryption ensures that the signaling and management traffic traversing the mobility tunnel is encrypted, providing a secure channel for guest access authentication and authorization processes. This is particularly important when the anchor controller is deployed within a DMZ, as it is exposed to potential external threats. The Cisco Catalyst 9800 Series wireless controller supports control plane security features that can be leveraged to secure the mobility tunnel and ensure the integrity and confidentiality of the control traffic.
Topics
Community Discussion
No community discussion yet for this question.