An engineer must configure AAA on a Cisco 9800 WLC for central web authentication. Which two commands are needed to accomplish this task? (Choose two.)

Question

Options

• ADevice(config)# aaa server radius dynamic-author
• B(Cisco Controller) > config wlan aaa-override disable < wlan-id >
• C(Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET
• DDevice(config-locsvr-da-radius)# client 10.10.10.12 server-key 0 SECRET
• E(Cisco Controller) > config wlan aaa-override enable < wlan-id >

• A
  82% (14)
• C
  6% (1)
• E
  12% (2)

Explanation

AAA Configuration for Central Web Authentication on Cisco 9800 WLC

Configuring Central Web Authentication (CWA) on a Cisco 9800 WLC requires enabling RADIUS Change of Authorization (CoA), which allows the ISE/RADIUS server to dynamically modify a client's session after initial authentication. Option A (aaa server radius dynamic-author) enters the dynamic authorization server configuration mode, and Option D (client 10.10.10.12 server-key 0 SECRET) defines the specific RADIUS client and shared secret within that mode - together, these two commands establish the CoA trust relationship needed for CWA to function.

The distractors are wrong because Options B and E use the legacy AireOS CLI syntax ((Cisco Controller) >), which applies to older WLC platforms, not the IOS-XE based 9800 series. Option C is also AireOS syntax and incorrectly uses port 1812 for accounting (accounting uses 1813), making it doubly incorrect for this scenario.

Memory Tip: Think "DAD" - Dynamic-Author + Dynamic-client. The 9800 WLC uses IOS-XE syntax (no (Cisco Controller) prompt), so any answer showing that legacy prompt is automatically wrong for a 9800 question.

No community discussion yet for this question.