nerdexam
Cisco

300-425 · Question #60

An engineer has successfully configured high availability and SSO using two Cisco 5508 Wireless LAN Controllers. The engineer can access the Active Primary WLC, but the Secondary Standby WLC is not…

The correct answer is A. via the console connection C. SSH to the service port interface. In a Cisco 5508 HA/SSO pair, the standby WLC blocks normal management access, so only the physical console port and the dedicated service port interface remain reachable.

WLAN High Availability

Question

An engineer has successfully configured high availability and SSO using two Cisco 5508 Wireless LAN Controllers. The engineer can access the Active Primary WLC, but the Secondary Standby WLC is not accessible. Which two methods allow access to the standby unit? (Choose two.)

Options

  • Avia the console connection
  • BSSH to the redundancy management interface of the primary WLC
  • CSSH to the service port interface
  • DSSH to the virtual interface of the secondary WLC
  • ESSH to the management interface of the primary WLC

How the community answered

(32 responses)
  • A
    88% (28)
  • B
    3% (1)
  • D
    3% (1)
  • E
    6% (2)

Why each option

In a Cisco 5508 HA/SSO pair, the standby WLC blocks normal management access, so only the physical console port and the dedicated service port interface remain reachable.

Avia the console connectionCorrect

Direct physical console access to the standby unit hardware is always available regardless of HA/SSO state, making it a reliable out-of-band method to reach the standby WLC.

BSSH to the redundancy management interface of the primary WLC

SSH to the redundancy management interface of the primary WLC connects you to the primary controller, not the standby unit.

CSSH to the service port interfaceCorrect

The service port on the standby WLC maintains an independent, dedicated IP address that is not part of the HA redundancy pair synchronization, allowing SSH connectivity to the standby unit for management even while it is in hot-standby mode.

DSSH to the virtual interface of the secondary WLC

The virtual interface is a non-routable, placeholder IP used solely for client web authentication redirects and does not support SSH management sessions.

ESSH to the management interface of the primary WLC

SSH to the management interface of the primary WLC provides access only to the active primary unit, not the standby.

Concept tested: Cisco 5508 WLC HA/SSO standby unit management access

Source: https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-lan-controllers/113260-wlc-ha-sso-faq-00.html

Topics

#high availability#SSO#standby WLC#service port access

Community Discussion

No community discussion yet for this question.

Full 300-425 Practice