300-430 Question 37
Select 3An enterprise is deploying the Cisco OfficeExtend solution to support remote workers. The network administrator wants to ensure secure communication between the remote OfficeExtend Access Point (OEAP) and the corporate network. Which of the following steps are required to implement Cisco OfficeExtend successfully?
- A
Ensure the wireless LAN controller (WLC) is configured to support OEAP with a management IP address accessible from the internet.
- B
Assign a dedicated VLAN on the WLC for corporate SSIDs while using a different VLAN for the personal SSID.
- C
Configure a pre-shared key (PSK) for the OEAP to establish secure communication with the WLC.
- D
Enable Split Tunneling on the OEAP to separate corporate and personal traffic.
- E
Ensure that the OEAP is connected to a home router with a public IP address.
Show answer and explanation
Correct answers: A, B, E
Explanation
To implement Cisco OfficeExtend, the wireless LAN controller must be accessible via its management IP address, and proper VLAN configuration is required to segregate corporate and personal traffic. Additionally, the OEAP must connect to a home network with internet access to establish a secure CAPWAP connection with the WLC. PSK authentication is not used, and Split Tunneling is optional depending on the organization's design.
- A. Correct.
Correct. The WLC must have an accessible management IP address to allow the OEAP to establish a secure CAPWAP tunnel to the corporate network.
- B. Correct.
Correct. A dedicated VLAN for corporate SSIDs ensures proper segmentation of traffic, while a separate VLAN for personal SSIDs prevents interference with corporate resources.
- C. Incorrect.
Incorrect. OEAPs do not require a pre-shared key for secure communication with the WLC. Instead, CAPWAP is used for encrypted communication.
- D. Incorrect.
Incorrect. Split Tunneling is not a mandatory requirement for implementing Cisco OfficeExtend. While it can be configured, it is not a default step in deployment.
- E. Correct.
Correct. The OEAP must connect to a home network with internet access, and the home router must provide a public IP address for the OEAP to reach the WLC.