QuestionQ43

FlexConnect

An engineer needs to implement Cisco Identity-Based Networking Services at a remote site by using ISE to dynamically assign groups of users to specific IP subnets.

If the subnet assigned to a client is available at the remote site, traffic must be offloaded locally; subnets unavailable at the remote site must be tunneled back to the WLC.

Which feature meets these requirements?

Explanation

VLAN-based central switching uses the VLAN returned through the AAA/ISE override to determine forwarding. If that VLAN is present in the FlexConnect AP's local VLAN database, client traffic is switched locally. If it is not available locally but exists on the WLC, traffic is centrally switched and tunneled to the WLC. FlexConnect local authentication is only an authentication capability; it does not select local versus central data switching according to the dynamically assigned VLAN.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!