Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected. Which action will resolve this issue

Question

Exhibits

Options

• Arequire a DHCP address assignment
• Butilize RADIUS profiling
• Cset a NAC state
• Denable AAA override

• A
  14% (2)
• B
  7% (1)
• C
  7% (1)
• D
  71% (10)

Explanation

Explanation

Enable AAA Override (Option D) is correct because when Cisco ISE assigns VLANs dynamically via RADIUS attributes, the wireless LAN controller (WLC) must have AAA Override enabled on the WLAN/SSID to allow ISE's RADIUS response attributes (such as VLAN assignments) to override the locally configured WLAN settings. Without this feature enabled, the WLC ignores the VLAN attributes returned by ISE and clients remain on the default WLAN VLAN.

Option A (DHCP address assignment) is incorrect because DHCP handles IP address allocation after VLAN assignment has already occurred - it doesn't affect whether the VLAN is correctly applied in the first place. Option B (RADIUS profiling) is incorrect because profiling identifies and classifies endpoints, but enabling it won't resolve the VLAN override issue on the WLC. Option C (NAC state) is incorrect because NAC state relates to posture compliance enforcement, not to VLAN assignment from RADIUS attributes.

Memory Tip: Think of AAA Override as a "permission slip" - ISE (RADIUS) writes the VLAN on the permission slip, but the WLC won't act on it unless AAA Override is enabled to accept that external instruction over its own local settings.

No community discussion yet for this question.