300-425 Question 319
Select 3You are managing a Cisco Wireless LAN Controller (WLC) in an enterprise environment. To enhance the security of the network control plane, you need to implement control plane ACLs. Which of the following actions should you take to ensure only authorized devices can communicate with the WLC's management interfaces?
- A
Define an ACL to allow traffic only from trusted subnets to the management interface.
- B
Enable control plane policing (CoPP) on the WLC.
- C
Apply the ACL to the management interface of the WLC.
- D
Permit all traffic to the management interface to avoid misconfigurations.
- E
Regularly monitor and update the ACL to adapt to network changes.
Show answer and explanation
Correct answers: A, C, E
Explanation
To secure the control plane of a Cisco Wireless LAN Controller (WLC), control plane ACLs should be used to restrict access to authorized devices only. This involves defining an ACL that permits traffic from trusted sources, applying it to the management interface, and regularly reviewing the ACL to adapt to network changes. These steps collectively help mitigate unauthorized access to the WLC's management interface.
- A. Correct.
Defining an ACL to allow traffic only from trusted subnets ensures that only authorized devices can communicate with the WLC management interface, enhancing security.
- B. Incorrect.
Control plane policing (CoPP) is not directly related to ACLs on the controller. It is used for protecting the control plane of network devices but is not specific to WLC management ACLs.
- C. Correct.
Applying the ACL to the management interface enforces the defined rules, ensuring only permitted traffic can access the management interface.
- D. Incorrect.
Allowing all traffic to the management interface is a significant security risk and defeats the purpose of implementing control plane ACLs.
- E. Correct.
Regularly monitoring and updating the ACL ensures that the configuration remains effective as the network evolves, avoiding potential vulnerabilities.