15 - Examining Wireless Deployment Options Flashcards

1
Q

• ___
o Used for hotspots or smaller enterprises
o Individual Access Point management
o Simple to deploy
• ___
o Campus environment where traffic is centralised
o APs connect to switches, which connect to centralised WLC
• ___
o Designed for enterprises that have branch or remote offices
o Locations with a relatively small number of APs where deployment of a WLC is not justified or desired
o WLAN data traffic is either tunnelled back to a central WLC (central switching) or data traffic is broken out locally at the wired interface (local switching) of the AP
• ____
o Integration of wireless access in the SD-Access architecture
o Moves the enterprise network from the current VLAN-centric architecture to a user group-based enterprise architecture with flexible Layer2 extensions within and across sites
o Automated network provisioning via the DNA Centre application
• ___
o Cloud-based virtual controllers provided via the Cisco Meraki or Cisco 9800 Cloud Controller solutions
o Centralised installation and management
o Scales from small branches to large networks
o Reduces operational costs
o Reduces IT staff size

A

• Autonomous
o Used for hotspots or smaller enterprises
o Individual Access Point management
o Simple to deploy
• Centralised
o Campus environment where traffic is centralised
o APs connect to switches, which connect to centralised WLC
• FlexConnect
o Designed for enterprises that have branch or remote offices
o Locations with a relatively small number of APs where deployment of a WLC is not justified or desired
o WLAN data traffic is either tunnelled back to a central WLC (central switching) or data traffic is broken out locally at the wired interface (local switching) of the AP
• SD-Access Wireless
o Integration of wireless access in the SD-Access architecture
o Moves the enterprise network from the current VLAN-centric architecture to a user group-based enterprise architecture with flexible Layer2 extensions within and across sites
o Automated network provisioning via the DNA Centre application
• Cloud managed
o Cloud-based virtual controllers provided via the Cisco Meraki or Cisco 9800 Cloud Controller solutions
o Centralised installation and management
o Scales from small branches to large networks
o Reduces operational costs
o Reduces IT staff size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Each AP is an ___ – operates independently and has no knowledge of any other APs

A

independent cell

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The greatest benefit of an ___ AP deployment is that it is a simple and cost-effective way to extend an existing wired infrastructure for a small network

A

autonomous

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

In an autonomous AP deployment, up to _ APs should be used.

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are some benefits of an autonomous AP deployment?

A
  • Lower CapEx
  • Adapted to small deployments
  • Flexible features for simplified deployments in small networks (RADIUS, user database, DHCP)
  • Allow for basic dynamic channel assignments
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are some limitations of an autonomous AP deployment?

A

• Each AP is managed individually
o Prone to configuration inconsistencies
o Individual software upgrades
o Scalability issues
• Base-level wifi functionality
o No dynamic RRM (Radio resource management)
o No advanced security such as rogue detection and mitigation, wIPS, guest access
• Fast, secure, and seamless roaming between subnets is not possible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Because autonomous AP environments are small, factors such as roaming, and tightly synchronised AP transmit levels do not apply. Typical configuration parameters include:

A
  • SSID
  • Wireless security choice
  • Transmit power levels to set the transmit power level of the APs so that the signal does not propagate into adjacent building spaces belonging to other tenants or into the parking lot
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the autonomous deployment traffic flow for a wireless to wired client?

A
  • Client traffic flows across the wireless interface through the AP
  • Coverts 803.11 frame to 802.3 frame
  • Sends frame to local access switch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the autonomous deployment traffic flow for a wireless to wireless client (same AP)?

A
  • Traffic flows from one client to another client via the same AP
  • Does not go beyond AP to the switch
  • Does not create load of switch supporting AP
  • AP cannot route between different VLANs so if clients are in different VLANs the AP must forward to the LAN until it reaches a router that will forward to the second client
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the autonomous deployment traffic flow for a wireless to wireless client (different AP)?

A

• Must transit through wired infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Compared to autonomous APs, the APs in a __ architecture do not function independently. The have reduced functionality in the AP and depend upon the __ to configure, control and manage several APs.

A

centralised, WLC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In a centralised WLC deployment, APs handle only the __ MAC functionality and all the not-real-time MAC functionality is processed by the WLC

A

real time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

APs have visibility and awareness of the __ APs. The WLC can be informed if one of the APs becomes faulty and __ APS adjust power levels to compensate. WLC can also offload clients to a __ AP if one of the APs becomes overloaded.

A

neighbouring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the benefits of a centralised WLC deployment?

A
  • Centralised management and troubleshooting for low total cost of ownership
  • Easy to deploy and manage
  • RRM (Radio resource management)
  • High availability
  • Rogue detection and mitigation
  • wIPS
  • Identity networking, RADIUS change of authorisation, and Cisco ISE
  • Voice and data over WLAN seamless roaming
  • Location services
  • Guest access
  • Mesh (indoor and outdoor)
  • Highly customisable and advanced feature set
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the limitations of a centralised WLC deployment?

A
  • All end-user traffic is forwarded to WLC
  • Poor use of LAN and WAN infrastructure when internal resources are distributed
  • WLC can become a bottleneck
  • WLC can be a single point of failure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When APs join onto a controller, they only handle some 802.11 MAC functionality. The WLC handles the rest. This is called __ mode.

A

split MAC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

__ is used extensively between APs and WLCs within the centralised architecture

A

CAPWAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are some features of CAPWAP?

A
  • Is an open protocol that enables a controller to manage a collection of APs
  • APs can discover and join a CAPWAP controller
  • Control messages that are exchanged between the WLC and AP
  • WLC control messages are used to support wireless station access, authentication and mobility
  • Can also be used for statistics gathering and wireless security
  • Differentiates between the control plane and data plane
  • Protocol supports two modes of operation. Split MAC in centralised mode or the local-MAC in FlexConnect mode.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the centralised deployment traffic flow models?

A

standard model, inter-controller, intra-controller different AP, intra-controller same AP

20
Q

__
• APs are in local mode
• All wireless client data traffic is first sent to the controller
• The controller then decides on the policy to apply to the incoming traffic (ACL, QoS) before deciding how to forward to the final destination
• Client data reaches the AP and is encapsulated in CAPWAP and forwarded to controller. This means that between the AP and the controller, you can see CAPWAP data packets from the AP IP address, with a random client port, sent to the controller AP manager IP address to CAPWAP data port udp/5247. The same logic applies to return traffic

A

standard model

21
Q

___
• Controller does not route between VLANs and subnets, so a router decides how to reach destination network
• On the last hop, the router sends an ARP request to resolve the MAC of the destination.
• The second controller acts as an ARP proxy and answers the request in the name of the wireless client
• The last hop router forwards to the second controller
• The second controller converts 802.3 frame to 802.11, and encapsulates into CAPWAP and sends to the AP

A

inter-controller

22
Q

___
• Controller receives CAPWAP encapsulated data from AP
• After deciding on QoS and security policy, controller examines the destination MAC and IP
• If destination MAC is a wireless client of controller in same subnet, 802.11 frame is re-encapsulated into CAPWPA and forwarded to AP
• If destination MAC is not a wireless client of controller, or a different wireless client of the controller, but different VLAN, the 802.11 is converted to 802.3 and forwarded to the controller interface of the associated VLAN

A

intra-controller different AP

23
Q

__
• Traffic is still forwarded to controller first before being sent back to the AP to be distributed to the client
• The frame must first reach the controller so that QoS and security policies can be applied

A

intra-controller same AP

24
Q

___ architecture is an extension to the centralised architecture designed for brand off and remote office deployments.

A

FlexConnect

25
Q

FlexConnect is best suited for locations with a relatively __ number of APs where a deployment of a Cisco WLC is not justified or desired.

A

small

26
Q

FlexConnect enables the configured and control of APs in a branch or remote office from the corporate office through a WAN link without the deployment of a __ in each office.

A

controller

27
Q

FlexConnect: Clients connecting to APs at remote locations can be:

A
  • Authenticated locally and have their data bridged to the local ethernet segment (local switching)
  • Have their traffic tunnelled over the WAN via CAPWAP to a WLC at a central site to be switched to the network (central switching)
28
Q

the AP will make the decision on the most efficient switching method rather than client traffic being needlessly sent across the WAN link via CAPWAP just to be returned over the WAN as ethernet traffic.

A

split tunneling

29
Q

What are the benefits of Flexconnect deployment?

A
  • Many of the same benefits as centralised architecture
  • High availability and WLAN survivability
  • Fast, secure roaming
  • Dynamic VLAN and ACL assignment per user
  • Flexible deployment and configuration
  • Simple wireless operations with a data centre-hosted controller
  • Efficient use of WAN resources for branches
  • Only desired traffic is tunnelled to controller
  • Scalable
30
Q

What are the limitations of a FlexConnect deployment?

A

• WAN connectivity limitations
o RTT must be below 300 ms data (100 ms voice)
o Minimum 500 bytes WAN MTU
o Deployments require the implementation of a site-wide VLAN for roaming.

31
Q

By changing APs to ___ mode, you can configure the traffic for one or several remote site WLANs to be switched locally.

A

FlexConnect

32
Q

If the controller becomes unreachable, the FlexConnect AP takes over the ___and key management. As long as the controller stays reachable, ___ is performed at the controller level.

A

client authentication

33
Q

The ___deployment option offers wireless networking as a service for clients who require ease of use and management. The function of the WLC is no longer limited to an appliance in the network. The functionality can be located via software in the public cloud.

A

Cisco Meraki

34
Q

What are the benefits of a Cisco Meraki deployment?

A
  • Ease of deployment – zero-touch provisioning shortens deployment and configuration
  • Centralised management and monitoring
  • BYOD support – automatically apply access policies
  • Cisco Connected Mobile Experiences (CMX) Location Analytics – ability to capture powerful metrics such as visitor capture rate, user visit time
  • Application visibility and control
  • High-capacity RF
  • Automatic RF optimisation
  • Dedicated security radio
35
Q

What are the limitations of a Cisco Meraki deployment?

A
  • Organization much embrace cloud services
  • Limited customisation capability
  • Single architecture means less flexibility
  • No layer 3 roaming
  • Requires site-wide VLAN for roaming (VoWLAN)
  • Limited integration with third party solutions
36
Q

Cisco Meraki devices automatically connect to the ___ over a secure link, register with their network, and download their configuration.

A

Cisco Meraki cloud

37
Q

With ___, there is no need to manually stage APs or log in to switches for manual configuration and provisioning

A

Cisco Meraki

38
Q

Meraki APs use ___ to self-configure and optimise RF settings from maximum performance

A

Auto AF

39
Q

Meraki uses an ___ management architecture, meaning that only management data flows through the meraki cloud infrastructure. No user traffic passes through the Meraki data centres.

A

out-of-band

40
Q

Cisco Catalyst ___ Series Controllers are next-gen WLCs built for intent-based networking

A

9800

41
Q

What are some features of the Cisco Catalyst 9800 Series Controller?

A
  • High availability and seamless software updates
  • Built-in security: secure boot, run-time defences, image signing, integrity verification, and hardware authenticity
  • Can be deployed anywhere – on-premise, on cloud, embedded on a switch
  • Can be managed using Cisco DNA centre, NETCONF/YANG, web-based GUI or CLI
  • Built on a modular OS. Open and programmable APIs enable the automation of your Day 0-N network operations
42
Q

____ is a reliable and affordable wireless solution for enterprise branches or small to medium size businesses that want a managed AP solution without the need to buy, maintain and manage a separate WLAN controller appliance.

A

Cisco Mobility express

43
Q

__ is a virtual wireless LAN controller integrated on an access point. By default, all APs run the Cisco Aironet CAPWAP image. To acquire the wireless LAN controller functionality, the CME image needs to be installed on a Cisco 802.11 ac Wave 2 AP.

A

Cisco Mobility express

44
Q

CME solution consists of the following:

A
  • Master Access Point – AP which runs the virtual WLC function. Depending on the model, the master AP can manage up to 100 APs and 2000 clients.
  • Subordinate AP – AP which are managed by the master AP in a CME network. Subordinate APs only service clients and do not actively run the WLC function.
45
Q

How do you configure the master AP in a Cisco Mobility Express deployment?

A
  • Power up Master AP by connecting to PoE enabled switch
  • After AP has finished rebooting, it will broadcast the CiscoAirProvision SSID. This can take up to 10 mins
  • Connect wifi to SSID. When prompted, enter password
  • Open browser and access mobilyexpress.cisco to navigate to the setup wizard.