An engineer configures an ACL on a Cisco WLC v8.7. The engineer must control Pv4 traffic to the CPU of the controller. Which rules should be added at the top of the ACL to control IPv4 traffic?
When configuring an ACL on a Cisco WLC to control IPv4 traffic to the CPU, it is critical to allow mobility traffic to ensure proper communication between controllers in a mobility group. Here's why:
Mobility Ports (16666, 16667, and 16668):
These ports are used for communication between controllers in a mobility group. Blocking these ports can disrupt controller-to-controller communication, leading to issues such as client roaming failures.
Therefore, the ACL must include rules to allow traffic on these ports at the top of the ACL to ensure uninterrupted mobility operations.
Why the Other Options Are Incorrect:
Option B: Deny mobility ports 16666, 16667, and 16668.
Denying these ports would disrupt mobility communication between controllers, leading to roaming issues and network instability.
Option C: Deny RRM ports 12124–12125 and 12134–12135.
These ports are used for Radio Resource Management (RRM) communication. While controlling RRM traffic might be necessary in some cases, it is not the top priority when configuring an ACL for CPU traffic control.
Option D: Allow RRM ports 12124–12125 and 12134–12135.
While allowing RRM traffic is important, it is not as critical as allowing mobility traffic. Mobility traffic must be prioritized to ensure seamless roaming and controller communication.
Before you apply ACL rules, ensure that you have explicitly set the following RRM ports to allow in the CPU ACL:
12124-12125
12134-12135
Also ensure that you add these ACL rules specifically at the top of the ACL list.
If you do not set these RRM ports to allow, the ports are blocked by default
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rrahim
1 week, 1 day agorrahim
1 week, 1 day agoLe91
3 months, 3 weeks agoLe91
3 months, 3 weeks ago