300-425 Question 227
Single answerAn enterprise network uses a Cisco wireless architecture with a centralized controller. The organization requires that specific users connecting to the wireless network be assigned to separate VLANs and have different QoS policies based on their role in the organization. Which configuration should the network administrator implement to achieve this requirement?
- A
Use VLAN pooling with a static VLAN assignment for each SSID.
- B
Configure a RADIUS server to return VLAN and QoS attributes based on user identity.
- C
Enable Fast SSID Changing to allow users to manually select their VLAN and QoS settings.
- D
Create multiple SSIDs, each mapped to a specific VLAN and QoS profile.
Show answer and explanation
Correct answer: B
Explanation
The correct answer is to configure a RADIUS server to return VLAN and QoS attributes based on user identity. This approach allows for centralized control of user-specific settings, such as VLANs and QoS policies, based on the user's role or group membership. The RADIUS server communicates with the wireless controller, dynamically assigning these attributes during the authentication process, which is a core concept of identity-based networking.
- A. Incorrect.
VLAN pooling with static VLAN assignment does not dynamically assign VLANs or QoS policies based on user identity. It is used to distribute load across multiple VLANs but lacks identity-based networking capabilities.
- B. Correct.
Using a RADIUS server to return VLAN and QoS attributes based on user identity allows dynamic assignment of network resources depending on the user's role, aligning with identity-based networking requirements.
- C. Incorrect.
Fast SSID Changing is not relevant for dynamically assigning VLANs or QoS policies. It is a feature to allow seamless transitions between SSIDs but does not address identity-based networking.
- D. Incorrect.
Creating multiple SSIDs mapped to specific VLANs and QoS profiles is inefficient and does not scale well for large organizations, as it requires users to connect to the correct SSID manually.