300-425 Question 228
Select 3A company has deployed a Cisco wireless network using a centralized controller architecture. They want to implement identity-based networking to ensure that employees and guests are assigned to different VLANs, receive appropriate QoS settings, and have different access restrictions. Which combination of features should be implemented to achieve this goal?
- A
Dynamic VLAN assignment using RADIUS attributes
- B
QoS profiles mapped to user roles
- C
Static VLAN configuration on the access points
- D
Access Control Lists (ACLs) applied based on user roles
- E
Multicast routing for user groups
Show answer and explanation
Correct answers: A, B, D
Explanation
To implement identity-based networking, the solution must dynamically adapt to user identity. Dynamic VLAN assignment via RADIUS ensures users are placed in the correct VLAN. QoS profiles mapped to user roles provide appropriate traffic prioritization. ACLs applied to user roles enforce access restrictions. Static VLANs and multicast routing are not suitable for dynamic, identity-based configurations.
- A. Correct.
Dynamic VLAN assignment using RADIUS attributes allows for VLANs to be assigned based on user identity, which is essential for separating employees and guests.
- B. Correct.
QoS profiles mapped to user roles ensure that users receive appropriate QoS settings based on their role, such as prioritizing employee traffic over guest traffic.
- C. Incorrect.
Static VLAN configuration on the access points does not support dynamic user-based VLAN assignment and lacks flexibility for identity-based networking.
- D. Correct.
Access Control Lists (ACLs) applied based on user roles enable access restrictions tailored to specific user groups, enhancing identity-based networking implementation.
- E. Incorrect.
Multicast routing is unrelated to identity-based networking as it focuses on optimizing multicast traffic, which is not directly tied to user identity or roles.