300-425 Question 28
Select 2A retail company is implementing a Cisco FlexConnect deployment for their branch locations. They want to use VLAN-based central switching for some SSIDs while enabling local switching for others. Additionally, they need to enforce access control policies on locally switched traffic using Flex ACLs. Which of the following statements are true regarding this configuration?
- A
VLAN-based central switching sends all wireless traffic to the centralized controller regardless of the VLAN assigned to the SSID.
- B
Flex ACLs allow traffic filtering at the branch location for locally switched traffic without involving the centralized controller.
- C
Local switching can be enabled on a per-SSID basis in a FlexConnect deployment.
- D
Flex ACLs are applied only to VLAN-based central switched traffic.
- E
VLAN-based central switching requires the SSID to have the 'Central DHCP' option enabled.
Show answer and explanation
Correct answers: B, C
Explanation
In a FlexConnect deployment, VLAN-based central switching sends traffic to the centralized controller, while local switching allows traffic to be forwarded at the branch location. Flex ACLs are specifically designed to filter traffic at the branch for locally switched SSIDs, providing localized access control. This configuration ensures flexibility and reduces the controller's load for branch-level traffic.
- A. Incorrect.
Incorrect: VLAN-based central switching sends traffic to the controller, but it does not route all wireless traffic for an SSID unless central switching is explicitly configured for that SSID.
- B. Correct.
Correct: Flex ACLs allow filtering of locally switched traffic directly at the branch location, reducing the dependency on the centralized controller.
- C. Correct.
Correct: In a FlexConnect deployment, local switching can be configured on a per-SSID basis, allowing flexibility in traffic forwarding.
- D. Incorrect.
Incorrect: Flex ACLs are used specifically for locally switched traffic, not for VLAN-based central switched traffic.
- E. Incorrect.
Incorrect: VLAN-based central switching does not require the 'Central DHCP' option. Central DHCP is a separate feature and may or may not be used depending on the deployment requirements.