350-401 · Question #1045
Refer to the exhibit. An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending t
The correct answer is A. Enable AAA Override.. Enabling AAA Override on the Wireless LAN Controller (WLC) allows it to apply dynamic mDNS roles pushed by Cisco ISE to users.
Question
Refer to the exhibit. An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending the correct values, but name resolution is not functioning as expected. Which WLC configuration change resolves the issue?
Exhibits
Options
- AEnable AAA Override.
- BEnable Aironet IE.
- CSet MFP client protection to Required.
- DChange NAC state to ISE NAC.
How the community answered
(36 responses)- A56% (20)
- B14% (5)
- C25% (9)
- D6% (2)
Why each option
Enabling AAA Override on the Wireless LAN Controller (WLC) allows it to apply dynamic mDNS roles pushed by Cisco ISE to users.
When Cisco ISE dynamically assigns policies, such as mDNS roles, to users, the Wireless LAN Controller (WLC) must have 'AAA Override' enabled on the WLAN. This feature permits the WLC to accept and enforce attributes (like mDNS profiles) pushed from the AAA server (ISE) after successful authentication and authorization.
Aironet IE (Information Element) relates to Cisco's proprietary wireless extensions for features like load balancing or rogue AP detection, not dynamic policy assignment via ISE.
MFP (Management Frame Protection) client protection secures management frames, which is a security feature unrelated to mDNS resolution or dynamic policy application.
Changing NAC state to ISE NAC configures the WLC to use ISE for Network Access Control, which is a prerequisite, but 'AAA Override' is the specific setting allowing the WLC to apply dynamic attributes from ISE.
Concept tested: WLC AAA Override for ISE policies
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/m_aaa_override.html
Topics
Community Discussion
No community discussion yet for this question.

