300-430 Question 14
Select 3A branch office of a retail company is deploying FlexConnect on their wireless network to handle intermittent WAN link failures. They require local authentication for clients during these outages while ensuring that critical VLANs are mapped to specific SSIDs. Which two configurations should the network engineer implement to meet these requirements?
- A
Enable VLAN-based central switching for all SSIDs
- B
Configure local EAP on the FlexConnect access points
- C
Enable local switching on the required SSIDs
- D
Map VLANs to SSIDs under the FlexConnect group settings
- E
Disable FlexConnect local authentication to force centralized authentication
Show answer and explanation
Correct answers: B, C, D
Explanation
FlexConnect is designed for branch deployments where WAN connectivity to the central controller might be unreliable. In this scenario, local EAP allows the AP to authenticate clients locally, local switching ensures traffic is handled locally during WAN outages, and VLAN-SSID mapping ensures traffic is segmented correctly. Together, these configurations meet the client's requirements for resilience and proper network segmentation during outages.
- A. Incorrect.
VLAN-based central switching forces all traffic to the central controller, which negates the benefits of FlexConnect during WAN link failures.
- B. Correct.
Local EAP enables the access point to handle client authentication locally, which is required during WAN outages to maintain connectivity.
- C. Correct.
Local switching allows traffic to be handled at the local site instead of being tunneled to the central controller, ensuring connectivity during WAN link failures.
- D. Correct.
Mapping VLANs to SSIDs in the FlexConnect group ensures proper traffic segmentation and adherence to network policies even in FlexConnect mode.
- E. Incorrect.
Disabling FlexConnect local authentication would prevent clients from authenticating during WAN link failures, which is contrary to the requirements in this scenario.