300-430 · Question #313
A company has a Cisco 5500 WLC running 8.0 code with 20 access points installed. Company policy dictates that the wireless network must use 802.1x. They do not have a RADIUS server and decide to use t
The correct answer is B. PEAP E. EAP-FAST. Cisco WLC Local EAP supports a limited set of EAP methods natively. Only PEAP and EAP-FAST are valid EAP authentication methods available on the WLC Local EAP feature.
Question
A company has a Cisco 5500 WLC running 8.0 code with 20 access points installed. Company policy dictates that the wireless network must use 802.1x. They do not have a RADIUS server and decide to use the Local EAP feature on the WLC. Which two EAP methods are available to the company using this method? (Choose two.)
Options
- ATKIP
- BPEAP
- CEAP-MDS
- DWEP
- EEAP-FAST
How the community answered
(55 responses)- A2% (1)
- B89% (49)
- C5% (3)
- D4% (2)
Why each option
Cisco WLC Local EAP supports a limited set of EAP methods natively. Only PEAP and EAP-FAST are valid EAP authentication methods available on the WLC Local EAP feature.
TKIP is a wireless encryption cipher used with WPA, not an EAP authentication method.
PEAP (Protected EAP) is supported by the Cisco WLC Local EAP feature, using a TLS tunnel to protect inner authentication credentials without requiring client-side certificates.
EAP-MDS is not a recognized or supported EAP type on Cisco WLC Local EAP; this is a distractor likely referencing the non-WLC-supported EAP-MD5.
WEP is a deprecated wireless encryption standard (cipher), not an EAP authentication method.
EAP-FAST was developed by Cisco as a replacement for LEAP and is natively supported by the WLC Local EAP feature, using a Protected Access Credential (PAC) to establish the TLS tunnel.
Concept tested: Cisco WLC Local EAP supported authentication methods
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/config-guide/b_cg80/b_cg80_chapter_0100001.html
Topics
Community Discussion
No community discussion yet for this question.