CCIE Wireless Written Exam: Preventing Wireless Internet Access for a Building

Preventing Wireless Internet Access for a Building

Question

Corporation XYZ has 25 buildings (with a total of 12000 employees) and would like to implement a single SSID across their entire site.

Which feature would be helpful to prevent wireless internet access from 1 of the 25 buildings?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

To prevent wireless internet access from one of the 25 buildings, you can use the WLAN override feature in combination with AP groups.

WLAN Override allows you to configure a WLAN with a specific set of attributes that will override the attributes of the same WLAN configured globally. This allows you to apply specific configurations to a particular group of access points (APs) or to a specific location, without affecting the entire site.

AP groups allow you to group a set of APs together and apply specific configurations to that group. This is useful for applying different configurations to different areas of the site, such as separating public and private areas, or different floors of a building.

To implement a single SSID across the entire site, you would configure the SSID globally. Then, you would create AP groups for each building and assign the APs in each building to their respective AP group. You can then use WLAN override to configure the SSID for each AP group with different attributes, such as VLAN IDs or security settings.

To prevent wireless internet access from one of the 25 buildings, you can create an AP group for that building and configure the SSID to use a VLAN ID that does not have internet access. This will prevent users in that building from accessing the internet while still allowing them to connect to the wireless network.

AAA override and MAC filtering are not appropriate solutions for this scenario. AAA override allows you to override the authentication and authorization settings for a specific user or group of users, but it does not prevent access to the wireless network itself. MAC filtering allows you to restrict access to the wireless network based on the MAC address of the client device, but it does not allow you to differentiate between buildings or locations within the site.