Which event happens when a wireless client connects to a Cisco 5760 Converged Access Controller with a WLAN configured for AAA override enabled and an invalid VLAN (not configured on the Cisco 5760) is returned as part of RADIUS accept message by the CISCO ISE server?
Click on the arrows to vote for the correct answer
A. B. C. D.A.
When a wireless client connects to a Cisco 5760 Converged Access Controller with a WLAN configured for AAA override enabled and an invalid VLAN is returned as part of RADIUS accept message by the CISCO ISE server, the behavior depends on the specific configuration and settings of the WLAN and the controller.
Here are the possible outcomes based on the answer options:
A. The client is put in exclusion list by the WL: If the WLAN is configured with AAA override enabled, the controller will use the VLAN ID returned by the RADIUS server for the user session. If the VLAN ID is invalid (not configured on the controller), the client may be put in an exclusion list by the WLAN. This means that the client will not be allowed to connect to the WLAN again until the issue is resolved.
B. The client is marked as authenticated but does not get an IP address: If the WLAN is configured to use local switching and DHCP server is not available on the client's VLAN, the client may be marked as authenticated but will not receive an IP address. This means the client will not be able to communicate on the network.
C. The client is marked as associated and DHCP required state: If the WLAN is configured for central switching and DHCP server is available on the client's VLAN, the client will be marked as associated and will go into DHCP required state. In this state, the client will send a DHCP request to obtain an IP address.
D. The client is out in the RUN state and is mapped to the wireless management VLAN: If the WLAN is configured for central switching and the invalid VLAN ID returned by the RADIUS server is mapped to the wireless management VLAN, the client may be put in the RUN state and will be mapped to the wireless management VLAN. This means the client will be able to communicate with devices on the wireless management VLAN.
In summary, the specific outcome depends on the configuration of the WLAN and the controller. In general, if an invalid VLAN is returned as part of RADIUS accept message, the client may not be able to communicate on the network, may be put in an exclusion list, or may be mapped to a different VLAN.