Refer to the exhibit. Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?
A.
the controller management interface
B.
the controller virtual interface
C.
the interface specified on the WLAN configuration
Check the RADIUS Server Overwrite interface check box to enable the per-WLAN RADIUS source support, the controller uses the interface specified on the WLAN configuration as identity and source for
all RADIUS related traffic on that WLAN.
When disabled, the controller uses the management interface as the
identity in the NAS-IP-Address attribute. If the RADIUS server is on a directly connected dynamic interface,
the RADIUS traffic will be sourced from that interface. Otherwise, the management IP address is used
I think answer is A.
WLC is not capable to route through WLAN interfaces and use it only if WLC is directly connected to the WLAN interface:
"The controller sources RADIUS traffic from the IP address of its management interface unless the configured RADIUS server exists on a VLAN accessible via one of the controller Dynamic interfaces. If a RADIUS server is reachable via a controller Dynamic interface, RADIUS requests to this specific RADIUS server will be sourced from the controller via the corresponding Dynamic interface. "
"Radius server override interface" is used as a "NAS-IP-Address attribute", but not used as source interface for communication with Radius server
From the guide, the the tick box wasn't checked it would be A. - Check the RADIUS Server Overwrite interface check box to enable the per-WLAN RADIUS source support.
When enabled, the controller uses the interface specified on the WLAN configuration as identity and source for
all RADIUS related traffic on that WLAN
Definitely A
If the RADIUS server is on a directly connected dynamic interface, the RADIUS traffic will be sourced from that interface. Otherwise, the management IP address is used.
There's a reason they state the RADIUS server is in a different subnet here.
"C" is right
RADIUS Server Overwrite interface check box to enable the per-WLAN RADIUS source support:
1.When enabled, the controller uses the interface specified on the WLAN configuration as identity and source for all RADIUS related traffic on that WLAN.
2. When disabled, the controller uses the management interface as the identity in the NAS-IP-Address attribute.
"C" is correct. See what "Radius server overwrite interface" does at:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_01100111.pdf
Step 3 Click the Security tab, and then click the AAA Servers tab.
Step 4 Check the RADIUS Server Overwrite interface check box to enable the per-WLAN RADIUS source support.
When enabled, the controller uses the interface specified on the WLAN configuration as identity and source for
all RADIUS related traffic on that WLAN. When disabled, the controller uses the management interface as the
identity in the NAS-IP-Address attribute. If the RADIUS server is on a directly connected dynamic interface,
the RADIUS traffic will be sourced from that interface. Otherwise, the management IP address is used. In all
cases, the NAS-IP-Address attribute remains the management interface, unless the feature is enabled.
This section is not available anymore. Please use the main Exam Page.350-401 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ayman_B
Highly Voted 1 year, 9 months agoGlass17
Highly Voted 3 years, 2 months ago[Removed]
Most Recent 4 months, 4 weeks agoChuckzero
1 year, 1 month agoWooker
2 years, 1 month agodanny_f
2 years, 5 months agoFarid77
2 years, 6 months agoalfaxyz
2 years, 7 months agoViolator
2 years, 7 months agokthekillerc
3 years, 1 month agojerryguo1019
3 years, 1 month agoanonymous1966
3 years, 2 months agoXalaGyan
2 years, 10 months ago[Removed]
3 years, 5 months ago