300-430 Question 38
Select 3A remote worker requires secure access to the corporate wireless network from their home using an OfficeExtend Access Point (OEAP). As a network engineer, what must you ensure is properly configured on the Cisco Wireless LAN Controller (WLC) to enable this functionality?
- A
The AP must be configured in FlexConnect mode.
- B
The OfficeExtend feature must be enabled on the WLC.
- C
The remote worker's home SSID must match the corporate wireless SSID.
- D
A secure tunnel between the OEAP and the WLC must be established.
- E
The WLC must be configured with a public IP address accessible from the internet.
Show answer and explanation
Correct answers: B, D, E
Explanation
To implement OfficeExtend, the OfficeExtend feature must be enabled on the WLC, a secure CAPWAP tunnel must be established between the OEAP and the WLC, and the WLC must be reachable from the remote location via a public IP address. These configurations ensure secure and seamless access to corporate resources for remote workers while keeping the network manageable and secure.
- A. Incorrect.
FlexConnect mode is not required for OfficeExtend Access Points. OEAPs are designed to work in centralized mode, where traffic is tunneled back to the WLC.
- B. Correct.
The OfficeExtend feature must be enabled on the WLC to allow the AP to function in OfficeExtend mode. This enables secure communication between the OEAP and the WLC.
- C. Incorrect.
The SSID does not need to match the corporate wireless SSID at the remote worker's home. The OEAP broadcasts the corporate SSID for the remote user.
- D. Correct.
A secure tunnel (typically CAPWAP) between the OEAP and the WLC is essential for secure data transmission and management traffic.
- E. Correct.
The WLC must be accessible from the internet so the OEAP can establish a connection. This typically requires a public IP address or proper NAT configuration.