300-430 Question 4
Single answerA retail company has deployed Cisco FlexConnect-enabled access points (APs) at their branch locations to ensure continued wireless connectivity even in case of WAN failures. One of their requirements is to allow clients to authenticate locally during WAN outages. Which feature must be configured to meet this requirement?
- A
FlexConnect Local Switching
- B
FlexConnect Central Authentication
- C
FlexConnect Local Authentication
- D
FlexConnect Split Tunneling
Show answer and explanation
Correct answer: C
Explanation
FlexConnect Local Authentication is the correct feature to configure because it enables access points to authenticate clients locally in the absence of a WAN connection. This is critical in environments like retail branches where WAN failures would otherwise disrupt client connectivity and authentication. Other features, such as Local Switching, Central Authentication, and Split Tunneling, do not address the specific need for local client authentication during WAN outages.
- A. Incorrect.
FlexConnect Local Switching allows the AP to locally switch traffic to the local VLAN at the branch site. While important in FlexConnect, this does not handle client authentication during WAN outages.
- B. Incorrect.
FlexConnect Central Authentication requires the WAN connection to be active because authentication is performed by resources located at the central site. This does not meet the requirement of authenticating clients locally during WAN failures.
- C. Correct.
FlexConnect Local Authentication allows the access point to authenticate clients locally using a cached RADIUS server configuration or a local RADIUS server. This meets the requirement of supporting client authentication during WAN outages.
- D. Incorrect.
FlexConnect Split Tunneling enables traffic to be split between local and central paths based on specific policies, but it does not address client authentication during WAN outages.