300-430 Question 321
Select 3You are configuring control plane ACLs on a Cisco wireless LAN controller (WLC) to enhance network security. The organization requires you to ensure that only specific management traffic from approved IP ranges is allowed to communicate with the WLC. Which of the following steps should you take to correctly implement the control plane ACLs?
- A
Create an ACL on the WLC and define permit and deny rules for specific IP ranges and protocols.
- B
Apply the control plane ACL to the desired WLAN profile.
- C
Apply the control plane ACL globally to the WLC management interface.
- D
Use the controller’s GUI to monitor hits on the ACL to validate traffic matches.
- E
Enable FlexConnect mode on the access points to enforce the ACL at the edge.
Show answer and explanation
Correct answers: A, C, D
Explanation
Control plane ACLs on a Cisco WLC are used to allow or block specific management traffic to the controller. To implement them effectively, you must first create an ACL with the necessary permit and deny rules, then apply it globally to the management interface of the WLC. Additionally, monitoring the ACL for hit counts helps verify that the rules are working as intended. FlexConnect mode is irrelevant for this case as it pertains to edge access point configurations.
- A. Correct.
Correct. Creating an ACL with permit and deny rules is the first step to controlling allowed traffic and blocking unauthorized access to the WLC.
- B. Incorrect.
Incorrect. Control plane ACLs are not applied to WLAN profiles. Instead, they are applied globally to the management interface or specific interfaces on the WLC.
- C. Correct.
Correct. Applying the ACL globally to the WLC management interface ensures it protects the control plane traffic for the entire controller.
- D. Correct.
Correct. Monitoring ACL hit counts validates the effectiveness of the ACL, ensuring it is correctly filtering traffic as intended.
- E. Incorrect.
Incorrect. FlexConnect mode is unrelated to enforcing control plane ACLs. Control plane ACLs are specifically configured and enforced on the WLC itself.