nerdexam
Cisco

350-401 · Question #469

An engineer must update the local web authentication details on a Cisco 5520 WLC. The engineer has one active SSID configured for web authentication and plans to update the virtual interface with a no

The correct answer is D. config interface address virtual 192.0.2.1. To configure the virtual interface on a Cisco WLC, specifically for local web authentication, the config interface address virtual command followed by the desired non-routable IP address is used.

Submitted by chen.hong· Mar 6, 2026Infrastructure

Question

An engineer must update the local web authentication details on a Cisco 5520 WLC. The engineer has one active SSID configured for web authentication and plans to update the virtual interface with a nonroutable IP address. Which command must the engineer apply?

Options

  • Aconfig wlan create wlan_idname
  • Bconfig interface address virtual 1.1.1.1
  • Cconfig interface address dynamic-interface virtual 192.0.2.1
  • Dconfig interface address virtual 192.0.2.1

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    6% (2)
  • C
    3% (1)
  • D
    84% (26)

Why each option

To configure the virtual interface on a Cisco WLC, specifically for local web authentication, the `config interface address virtual` command followed by the desired non-routable IP address is used.

Aconfig wlan create wlan_idname

`config wlan create wlan_idname` is used to create a new WLAN (SSID) and is not related to configuring the virtual interface's IP address.

Bconfig interface address virtual 1.1.1.1

`config interface address virtual 1.1.1.1` uses a routable public IP address which is generally not recommended for the virtual interface; the `192.0.2.1` range is specifically reserved for documentation and examples and is commonly used for this non-routable purpose.

Cconfig interface address dynamic-interface virtual 192.0.2.1

`config interface address dynamic-interface virtual 192.0.2.1` incorrectly includes `dynamic-interface`. The virtual interface is a distinct, static interface, not a dynamic one, and the correct command does not include `dynamic-interface`.

Dconfig interface address virtual 192.0.2.1Correct

The `config interface address virtual <ip-address>` command is the correct syntax on a Cisco WLC to set the IP address for the virtual interface. This interface is specifically used for web authentication and VPN passthrough, typically assigned a non-routable IP like `192.0.2.1` as it doesn't participate in network routing but acts as a source for redirects.

Concept tested: Cisco WLC virtual interface configuration

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/local_web_authentication.html

Topics

#WLC configuration#web authentication#virtual interface#local web auth

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice