300-430 · Question #302
An engineer configures an ACL on a Cisco WLC v8.7. The engineer must control IPv4 traffic to the CPU of the controller. The engineer updates the ACL via the GUI and has to define the direction in whic
The correct answer is A. Inbound. On Cisco WLC v8.7, a CPU ACL controlling IPv4 traffic destined to the controller itself must be applied in the Inbound direction to filter packets as they arrive at the CPU.
Question
An engineer configures an ACL on a Cisco WLC v8.7. The engineer must control IPv4 traffic to the CPU of the controller. The engineer updates the ACL via the GUI and has to define the direction in which the ACL must be applied. Which value should be applied to the direction option?
Options
- AInbound
- BNone
- COutbound
- DAny
How the community answered
(45 responses)- A82% (37)
- B4% (2)
- C11% (5)
- D2% (1)
Why each option
On Cisco WLC v8.7, a CPU ACL controlling IPv4 traffic destined to the controller itself must be applied in the Inbound direction to filter packets as they arrive at the CPU.
CPU ACLs on the Cisco WLC are designed to protect the controller's management plane by filtering traffic that is directed toward the CPU; applying the ACL as Inbound means it inspects packets arriving at the CPU before they are processed, which is the correct and only functional direction for this feature on WLC.
Selecting None disables direction enforcement entirely, meaning the ACL would not be applied and would provide no traffic control.
Outbound would apply the ACL to traffic leaving the CPU, which does not protect the CPU from unwanted inbound management traffic.
Any is not a valid direction option in the WLC CPU ACL configuration and would result in a misconfiguration.
Concept tested: WLC CPU ACL direction for management plane protection
Source: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112042-wlc-acl-config-00.html
Topics
Community Discussion
No community discussion yet for this question.