QuestionQ35

Security for Wireless Client Connectivity

An engineer configured identity-based networking with ISE and enabled AAA override on the WLAN.

Which two attributes must be used to alter client behavior from the default settings?

Choose two
Explanation

AAA override lets ISE return RADIUS attributes that apply per-client policies on a WLAN. An IPv6 ACL is a supported AAA-override attribute for enforcing an individual client’s IPv6 access policy, and DSCP is a supported vendor-specific attribute for applying QoS packet marking/treatment. DHCP timeout is the strongest distractor because it could affect a client’s connectivity experience, but it is not an AAA-override attribute used to assign an identity-based WLAN policy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!