300-715 · Question #194
An engineer is enabling a newly configured wireless SSID for tablets and needs visibility into which other types of devices are connecting to it. What must be done on the Cisco WLC to provide this…
The correct answer is B. enable MAC filtering. To gain visibility into devices connecting to a wireless SSID and ensure only authorized MAC addresses connect, MAC filtering must be enabled and configured on the Cisco WLC.
Question
An engineer is enabling a newly configured wireless SSID for tablets and needs visibility into which other types of devices are connecting to it. What must be done on the Cisco WLC to provide this information to Cisco ISE?
Options
- Aenable IP Device Tracking
- Benable MAC filtering
- Cenable Fast Transition
- Denable mDNS snooping
How the community answered
(39 responses)- A13% (5)
- B82% (32)
- C3% (1)
- D3% (1)
Why each option
To gain visibility into devices connecting to a wireless SSID and ensure only authorized MAC addresses connect, MAC filtering must be enabled and configured on the Cisco WLC.
IP Device Tracking is typically a switch feature used for wired devices to track IP-to-MAC bindings, not directly relevant for WLCs providing device visibility to ISE in this context.
Enabling MAC filtering (or MAC Authentication Bypass - MAB) on the Cisco WLC will cause the WLC to send MAC addresses of connecting devices to Cisco ISE for authentication and authorization. This provides ISE with visibility into the types of devices connecting and allows it to apply policies based on endpoint identity.
Fast Transition (802.11r) is a Wi-Fi feature designed to improve roaming performance for clients and does not provide device type visibility to Cisco ISE.
mDNS snooping is used to control and optimize mDNS traffic (like Apple Bonjour) within a network segment, not to provide general device type visibility to Cisco ISE for access control.
Concept tested: Cisco WLC MAC Authentication Bypass (MAB) with ISE
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_01014.html#concept_E772A0D4B263445A952179E4C5635C7A
Topics
Community Discussion
No community discussion yet for this question.