A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN must be specified after the authentication completes. Which action must be performed to allow the ISE server to specify the guest VLAN?
To allow the ISE server to specify the guest VLAN, you must enable AAA Override. This setting allows the Wireless LAN Controller (WLC) to accept the attributes returned by the RADIUS server and apply these attributes to its clients, which includes VLAN assignment. This is essential for dynamic VLAN assignment based on RADIUS server attributes.
The Answer is A AAA Override Here's the Link: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html#anc18 Yet another incorrect answer, it would be amazing if they fix this as some people will fail the exam if they solely go by the answers provided by examtopics
Perhaps that's the point, has you study rather than blind memorization
Enable AAA Override. Correct me if im wrong!
A - AAA Override From the Advance tab, enable the Allow AAA Override check box to override the WLC configuration when the RADIUS server returns the attributes needed to place the client on the proper VLAN as shown in the image
Please correct.
Please fix
I agree. Enable AAA Override... "to apply VLAN tagging to individual clients based on the returned RADIUS attributes from the AAA server." https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_aaa_override.pdf
A is correct
A is correct
A https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_aaa_override.pdf On the controller, enable the Allow AAA Override configuration parameter using the GUI or CLI. Enabling this parameter allows the controller to accept the attributes returned by the RADIUS server. The controller then applies these attributes to its clients.
Maybe question answer for d have typo, question seem to be about cisco ise related ise profiling can be use to assign vlan for guest specific Using ISE Profiling Services to classify devices allows ISE to apply different policies to a non-authenticating endpoint such as a printer or IP phone using MAB, or to apply a different policy to an authenticated employee when connecting using a personal workstation versus a corporate workstation https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456
AAA override is on WLC. Radius Profiling is on ISE?
the answer is A