nerdexam
Cisco

350-401 · Question #469

An engineer must update the local web authentication details on a Cisco 5520 WLC. The engineer has one active SSID configured for web authentication and plans to update the virtual interface with a…

The correct answer is D. config interface address virtual 192.0.2.1. To configure the virtual interface on a Cisco WLC, specifically for local web authentication, the config interface address virtual command followed by the desired non-routable IP address is used.

Submitted by chen.hong· Mar 6, 2026Infrastructure

Question

An engineer must update the local web authentication details on a Cisco 5520 WLC. The engineer has one active SSID configured for web authentication and plans to update the virtual interface with a nonroutable IP address. Which command must the engineer apply?

Options

  • Aconfig wlan create wlan_idname
  • Bconfig interface address virtual 1.1.1.1
  • Cconfig interface address dynamic-interface virtual 192.0.2.1
  • Dconfig interface address virtual 192.0.2.1

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    6% (2)
  • C
    3% (1)
  • D
    84% (26)

Why each option

To configure the virtual interface on a Cisco WLC, specifically for local web authentication, the `config interface address virtual` command followed by the desired non-routable IP address is used.

Aconfig wlan create wlan_idname

`config wlan create wlan_idname` is used to create a new WLAN (SSID) and is not related to configuring the virtual interface's IP address.

Bconfig interface address virtual 1.1.1.1

`config interface address virtual 1.1.1.1` uses a routable public IP address which is generally not recommended for the virtual interface; the `192.0.2.1` range is specifically reserved for documentation and examples and is commonly used for this non-routable purpose.

Cconfig interface address dynamic-interface virtual 192.0.2.1

`config interface address dynamic-interface virtual 192.0.2.1` incorrectly includes `dynamic-interface`. The virtual interface is a distinct, static interface, not a dynamic one, and the correct command does not include `dynamic-interface`.

Dconfig interface address virtual 192.0.2.1Correct

The `config interface address virtual <ip-address>` command is the correct syntax on a Cisco WLC to set the IP address for the virtual interface. This interface is specifically used for web authentication and VPN passthrough, typically assigned a non-routable IP like `192.0.2.1` as it doesn't participate in network routing but acts as a source for redirects.

Concept tested: Cisco WLC virtual interface configuration

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/local_web_authentication.html

Topics

#WLC configuration#web authentication#virtual interface#local web auth

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice