300-425 Question 229
Select 3An enterprise is deploying a wireless network with multiple SSIDs to support different user groups, such as employees, guests, and IoT devices. The network administrator wants to implement Identity-Based Networking to ensure employees are assigned to VLAN 10 with high QoS, guests are assigned to VLAN 20 with limited bandwidth, and IoT devices are assigned to VLAN 30 with restricted access based on ACLs. Which of the following configurations are required to achieve these goals?
- A
Configure a RADIUS server to dynamically assign VLANs based on user authentication.
- B
Apply QoS profiles on the wireless controller to prioritize traffic for VLAN 10.
- C
Use the default ACLs on the wireless controller to restrict IoT device access.
- D
Enable VLAN mapping on the wireless controller to statically assign devices to their respective VLANs.
- E
Create custom ACLs to restrict IoT device access and apply them to VLAN 30.
Show answer and explanation
Correct answers: A, B, E
Explanation
Identity-Based Networking leverages user or device identities to dynamically configure network policies such as VLAN assignments, QoS, and ACLs. In this scenario, the RADIUS server assigns VLANs dynamically based on identity, QoS profiles prioritize traffic for employees, and custom ACLs restrict IoT device access. Static VLAN mapping and default ACLs do not align with the identity-based approach.
- A. Correct.
Correct. A RADIUS server can dynamically assign VLANs to users or devices based on their identity (e.g., user credentials or MAC address). This is a key aspect of Identity-Based Networking.
- B. Correct.
Correct. QoS profiles can be applied on the wireless controller to ensure high-priority traffic for specific VLANs, such as VLAN 10 for employees.
- C. Incorrect.
Incorrect. Default ACLs are typically generic and insufficient for specific security requirements like restricting IoT device access. Custom ACLs should be used instead.
- D. Incorrect.
Incorrect. VLAN mapping is a static approach and does not leverage identity-based policies, which are required in this scenario.
- E. Correct.
Correct. Custom ACLs must be created and applied to VLAN 30 to restrict IoT device access as part of the Identity-Based Networking strategy.