Learn the two essential commands to configure AAA on a Cisco 9800 WLC for central web authentication. Enable RADIUS dynamic authorization and AAA override for the specified WLAN.
Table of Contents
Question
An engineer must configure AAA on a Cisco 9800 WLC for central web authentication. Which two commands are needed to accomplish this task? (Choose two.)
A. Device(config)# aaa server radius dynamic-author
B. (Cisco Controller) > config wlan aaa-override disable < wlan-id >
C. (Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET
D. Device(config-locsvr-da-radius)# client 10.10.10.12 server-key 0 SECRET
E. (Cisco Controller) > config wlan aaa-override enable < wlan-id >
Answer
A. Device(config)# aaa server radius dynamic-author
E. (Cisco Controller) > config wlan aaa-override enable < wlan-id >
Explanation
To configure AAA on a Cisco 9800 WLC for central web authentication, the two commands needed are:
A. Device(config)# aaa server radius dynamic-author
This command enables the RADIUS dynamic authorization feature and enters dynamic authorization local server configuration mode.
E. (Cisco Controller) > config wlan aaa-override enable < wlan-id >
This command enables AAA override for the specified WLAN, allowing AAA authentication to take precedence over local authentication.
The other options are incorrect:
B. Disables AAA override, which is the opposite of what’s needed.
C. Adds a RADIUS accounting server, not related to central web authentication.
D. Configures the RADIUS client in dynamic authorization local server configuration mode, not directly needed for central web authentication.
Cisco 350-401 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Cisco 350-401 exam and earn Cisco 350-401 certification.