200-301 - Network Access - Section 2.6

Describe Cisco wireless architectures and AP modes, the physical and management connections of WLAN components, and interpret WLAN GUI configuration for client connectivity including security and QoS settings.

Compare autonomous, cloud-managed, and split-MAC (controller-based) wireless architectures and the AP modes each uses, and trace how access points connect to a WLC over trunk or access ports with LAG. Identify the management access paths to an AP or WLC - Telnet, SSH, HTTP, HTTPS, console, and TACACS+/RADIUS - and read a WLAN GUI to confirm SSID, security, and QoS settings for client connectivity.

Cisco wireless architecturesAP modesWLC connections and LAGWLAN GUI configurationWLAN QoS and security settings

Practice question for this objective

Free sampleNetwork Accessmedium

An engineer is cabling a centralised AireOS wireless LAN controller into the campus and reviewing how its access points and the wired network connect to it in a split-MAC design. Which two statements correctly describe the physical and management connections of these WLAN components? Select TWO.

  • AThe lightweight access points reach the controller through CAPWAP tunnels carried over the routed wired network rather than a direct cable to it. Correct
  • BA controller distribution-system port connects to the wired switch and carries both client data and CAPWAP traffic to and from the joined access points. Correct
  • CThe controller service port is the data uplink that carries production client traffic and CAPWAP tunnels between the controller and the access points.
  • DEach access point must be cabled directly to a dedicated port on the controller chassis before it is able to serve any of its wireless clients.
  • EThe access points provide the controller with its uplink into the wired distribution layer and relay the controller management traffic upstream.
Identify that lightweight APs join a WLC over CAPWAP across the wired network while the controller distribution-system ports carry client and CAPWAP traffic. In a centralised split-MAC architecture the WLC attaches to the switched network through distribution-system ports that carry CAPWAP and client data, while lightweight APs build CAPWAP tunnels to the controller across the routed wired infrastructure instead of being directly cabled to it. The service port is a separate out-of-band management connection used for setup and recovery, not for client traffic.

Why A is correct: In a centralised split-MAC design the APs encapsulate control and client traffic in CAPWAP and tunnel it to the WLC across the existing wired infrastructure, so no dedicated AP-to-WLC cabling is required.

Why B is correct: Distribution-system ports are the data-plane uplinks that attach the controller to the switched network and carry the CAPWAP and client traffic for the APs that have joined it.

Why C is wrong: The service port is tempting because it is a physical controller port, but it is an out-of-band management interface for initial setup and recovery and does not carry client data or CAPWAP traffic.

Why D is wrong: This sounds plausible to someone picturing a wired hub, but lightweight APs join the controller over the routed network through CAPWAP and are not individually patched into the controller.

Why E is wrong: This reverses the roles: the controller connects to the wired network through its own distribution-system ports, and the APs depend on that network to reach the controller, not the other way around.

See more 200-301 practice questions, answers explained.

More in this domain

Back to all Network Access objectives, or the 200-301 cert hub.

Examworthy is not affiliated with or endorsed by Cisco. Original, blueprint-aligned practice material only.