300-425 · Question #218
A community bank has three campus locations and one HQ with the data center operations. Each campus location has four Cisco Catalyst 9120 APs. The data center has a Catalyst 9800 WLC with eight…
The correct answer is D. One C9120 AP in each campus must be converted to EWC mode, and the preferred controller is. A single C9120 AP per campus converted to EWC mode is sufficient for branch controller functionality, with the HQ Catalyst 9800 WLC designated as the preferred backup.
Question
A community bank has three campus locations and one HQ with the data center operations. Each campus location has four Cisco Catalyst 9120 APs. The data center has a Catalyst 9800 WLC with eight Catalyst 9120 APs. Poor WAN uplinks cause impacted branch AP and wireless client connectivity back to HQ, and each campus location is now planned to have its own EWC controller based on C9120 AP to keep traffic local. This new design must accommodate these requirements:
- Guest WLAN will be routed locally.
- Employee WLAN must be authenticated 802.1x PEAP via HQ data center
ISE but can pass traffic locally once authenticated.
- HQ WLC will be the primary backup WLC for each WLC.
Which design approach should the consulting engineer take?
Options
- ATwo C9120 campus APs must be converted to EWC mode, one for the active controller and the
- BOne C9120 campus AP must be converted to EWC mode, and the preferred controller is set to
- CTwo C9120 campus APs must be converted to EWC mode, one for the active controller and the
- DOne C9120 AP in each campus must be converted to EWC mode, and the preferred controller is
How the community answered
(32 responses)- A25% (8)
- B6% (2)
- C13% (4)
- D56% (18)
Why each option
A single C9120 AP per campus converted to EWC mode is sufficient for branch controller functionality, with the HQ Catalyst 9800 WLC designated as the preferred backup.
Converting two C9120 APs to EWC mode on the same campus is unnecessary because EWC high availability does not require two independently operating EWC-mode APs in an active-active configuration.
Although one EWC AP is architecturally correct, this option's preferred controller configuration does not satisfy the stated requirement that the HQ Catalyst 9800 WLC serve as the primary backup for each campus EWC.
Two APs in EWC mode per campus represents unnecessary complexity and resource overhead, contradicting Cisco's recommended single-AP EWC model for small branch deployments.
One C9120 per campus running in EWC mode provides full local WLC function while the remaining three campus APs join it as standard lightweight APs, keeping guest and employee traffic local without over-provisioning. Pointing the preferred controller setting to the HQ 9800 WLC satisfies the requirement for HQ to serve as the primary backup, and ISE at HQ can still authenticate 802.1x PEAP centrally while client data traffic is bridged locally post-authentication.
Concept tested: Embedded Wireless Controller single-AP branch deployment with centralized backup
Source: https://www.cisco.com/c/en/us/td/docs/wireless/catalyst_ewc/ewc-deployment-guide/ewc-deployment-guide.html
Topics
Community Discussion
No community discussion yet for this question.