Ch 18: Wireless Infrastructure Flashcards
Suppose that a lightweight AP in default local mode is used to support wireless clients. Which one of the following paths would traffic usually take when passing from one wireless client to another?
- Through the AP only
- Through the AP and its controller
- Through the controller only
- None of these answers (Traffic must go directly over the air.)
2.
An AP transports client traffic through a tunnel back to a wireless LAN controller. Therefore, client-to-client traffic typically passes through both the AP, the controller, and back through the AP.
A centralized wireless network is built with 1 WLC and 32 lightweight APs. Which one of the following best describes the resulting architecture?
- A direct Layer 2 path from the WLC to each of the 32 APs, all using the same IP subnet
- A direct Layer 3 path from the WLC to each of the 32 APs, all using the same IP subnet
- 32 CAPWAP tunnels daisy-chained between the APs, one CAPWAP tunnel to the WLC
- 32 CAPWAP tunnels—1 tunnel from the WLC to each AP, with no IP subnet restrictions
4.
Because the network is built with a WLC and APs, CAPWAP tunnels are required.
One CAPWAP tunnel connects each AP to the WLC, for a total of 32 tunnels. CAPWAP encapsulates wireless traffic inside an additional IP header, so the tunnel packets are routable across a Layer 3 network. That means the APs and WLC can reside on any IP subnet as long as the subnets are reachable. There are no restrictions for the APs and WLC to live on the same Layer 2 VLAN or Layer 3 IP subnet.
Which of the following unique features is true in an embedded wireless network architecture?
- An access layer switch can also function as an AP.
- All WLCs are converged into one device.
- Large groups of APs connect to a single access layer switch.
- An access layer switch can also function as a WLC.
4.
In an embedded design, an access layer switch also functions as a WLC so that all user access (wired and wireless) converges in a single layer.
Which one of the following comes first in a lightweight AP’s state machine after it boots?
- Building a CAPWAP tunnel
- Discovering WLCs
- Downloading a configuration
- Joining a WLC
B.
An AP discovers all possible WLCs before attempting to build a CAPWAP tunnel or join a controller.
If a lightweight AP needs to download a new software image, how does it get the image?
- From a TFTP server
- From an FTP server
- From a WLC
- You must preconfigure it.
3.
After an AP boots, it compares its own software image to that of the controller it has joined. If the images differ, the AP downloads a new image from the controller.
Which of the following is not a valid way that an AP can learn of WLCs that it might join?
- Primed entries
- List from a previously joined controller
- DHCP
- Subnet broadcast
- DNS
- Over-the-air neighbor message from another AP
6.
An AP can learn controller addresses by using any of the listed methods except for an over-the-air neighbor message.
APs do send neighbor messages over the air, but they are used to discover neighboring APs—not potential WLCs to join.
If an AP tries every available method to discover a controller but fails to do so, what happens next?
- It broadcasts on every possible subnet.
- It tries to contact the default controller at 10.0.0.1.
- It reboots or starts discovering again.
- It uses IP redirect on the local router.
3.
If an AP cannot find a viable controller, it reboots and tries the discovery process over again.
Which of the following is the most deterministic strategy you can use to push a specific AP to join a specific controller?
- Let the AP select the least-loaded controller
- Use DHCP option 43
- Specify the master controller
- Specify the primary controller
4.
If the primary controller responds to an AP’s discovery methods, the AP will always try to join it first, ahead of any other controller.
Configuring an AP with a primary controller is the most specific method because it points the AP to a predetermined controller. (Static)
Other methods are possible, but they can yield ambiguous results that could send an AP to one of several possible controllers.
Which of the following antennas would probably have the greatest gain?
a. Patch
b. Dish
c. Yagi
d. Dipole
e. Integrated
2.
A parabolic dish antenna has the greatest gain because it focuses the RF energy into a tight beam.
An omnidirectional antenna usually has which of the following characteristics? (Choose two.)
- Low gain
- Small beamwidth
- High gain
- Zero gain
- Large beamwidth
1 and 5.
An omnidirectional antenna is usually used to cover a large area. Therefore, it has a large beamwidth. Because it covers a large area, its gain is usually small.
Cisco APs can operate in one of two modes—__________ or __________ —depending on the code image that is installed.
Cisco APs can operate in one of two modes—autonomous or lightweight—depending on the code image that is installed.
As the names imply, autonomous APs are self-sufficient and standalone, while lightweight APs require something bigger to complete their purpose.
The lightweight mode is interesting because it can support several different network topologies, depending on where the companion wireless LAN controllers (WLCs) are located.
What is a BSS?
The basic service set (BSS) is a set of all stations that can communicate with each other at PHY layer.
Basic service sets (BSS) are a subgroup of devices within a service set (SSID) which are additionally also operating with the same physical layer medium access characteristics (i.e. radio frequency, modulation scheme, security settings etc.) such that they are wirelessly networked.
Every BSS has an identification (ID) called the BSSID, which is the MAC address of the access point servicing the BSS. There are two types of BSS: Independent BSS (also referred to as IBSS), and infrastructure BSS.
While devices may have multiple BSSIDs, usually each BSSID is associated with at most one basic service set at a time.
What is an SSID?
In IEEE 802.11 wireless local area networking standards, a service set (also known as extended service set or ESS) is a group of wireless network devices which are identified by the same SSID (service set identifier).
SSIDs serve as “network names” and are typically natural language labels.
A service set forms a logical network – that is operating with the same level 2 networking parameters – they are on the same logical network segment (e.g., IP subnet or VLAN).
T/F: Each autonomous AP must be configured and maintained individually unless you leverage a management platform such as Cisco Prime Infrastructure.
True.
An autonomous AP must also be configured with a management IP address to enable remote management. This is necessary when you want to configure SSIDs, VLANs, and many RF parameters like the channel and transmit power.
The management address is not normally part of any of the data VLANs, so a dedicated management VLAN must be added to the trunk links to reach the AP.
Because the data and management VLANs may need to reach every autonomous AP, the network configuration and efficiency can become cumbersome as the network scales.
What is split-MAC architecture?
Recall that Cisco APs can be configured to operate in either autonomous or lightweight AP mode. In lightweight mode, an AP loses its self-sufficiency to provide a working BSS for wireless users. Instead, it has to join a WLC to become fully functional. This cooperation is known as a split-MAC architecture, where the AP handles most of the real time 802.11 processes and the WLC performs the management functions.
How is a lightweight AP connected to a WLC?
An AP and a WLC are joined by a logical pair of CAPWAP tunnels that extend through the wired network infrastructure.
Control and data traffic are transported across the tunnels. Many APs can join the same WLC, each with its own pair of CAPWAP tunnels.
A wireless network can scale in this fashion, provided the WLC can support the maximum number of APs in use. Beyond that, additional WLCs would be needed.
What is the Cisco definition of a “centralized or unified wireless LAN topology”?
This is when a WLC is placed in a central location, usually in a data center or near the network core, so that you can maximize the number of APs joined to it. This is known as a centralized or unified wireless LAN topology, as shown in Figure 18-3.
This tends to follow the concept that most of the resources users need to reach are located in a central location, such as a data center or the Internet. Traffic to and from wireless users travels from the APs over CAPWAP tunnels that reach into the center of the network. A centralized WLC also provides a convenient place to enforce security policies that affect all wireless users.

T/F: A Cisco unified WLC meant for a large enterprise can support up to 6000 APs.
True.
Which provides the more efficient path for connecting users - Autonomous or Lightweight APs?
Autonomous AP is more efficient for the path data takes to connect two wireless users associated with the same autonomous AP. They can reach each other directly through the autonomous AP.
In contrast, the path between two wireless users in a centralized network is shown in Figure 18-4. The traffic from one client must pass through the AP, where it is encapsulated in the CAPWAP tunnel, and then travel high up into the network to reach the WLC, where it is unencapsulated and examined. The process then reverses, and the traffic goes back down through the tunnel to reach the AP and back out into the air to the other client.

T/F: The RTT between the AP and WLC is a design consideration.
True.
The length of the tunnel path can be a great concern for lightweight APs.
The round-trip time (RTT) between an AP and a controller should be less than 100 ms so that wireless communication can be maintained in near real time. If the path has more latency than that, the APs may decide that the controller is not responding fast enough, so they may disconnect and find another, more responsive controller.
What is embedded wireless network topology?
This is a design where the WLC is located further down in the network hierarchy. In Figure 18-5, the WLC is co-located with an access layer switch. This can be desirable when the switch platform can also support the WLC function. This is known as an embedded wireless network topology because the WLC is embedded in the switch hardware.
A Cisco embedded WLC typically supports up to 200 APs.

Is it possible to move the WLC even below the access layer and into an AP?
Yes, it is possible.
Figure 18-7 illustrates the Mobility Express topology, where a fully functional Cisco AP also runs software that acts as a WLC. This can be useful in small scale environments, such as small, midsize, or multi-site branch locations, where you might not want to invest in dedicated WLCs at all. The AP that hosts the WLC forms a CAPWAP tunnel with the WLC, as do any other APs at the same location. A Mobility Express WLC can support up to 100 APs.

Put the following steps of a lightweight AP state machine in order.
- Reset
- WLC join
- AP boots
- CAPWAP tunnel:
- WLC discovery
- Download config
- Download image
- Run state
The correct order from the question is: 3, 5, 4, 2, 7, 6, 8, 1.
The sequence of the most common states, as 7 in Figure 18-8, is as follows:
- AP boots: Once an AP receives power, it boots on a small IOS image so that it can work through the remaining states and communicate over its network connection. The AP must also receive an IP address from either a Dynamic Host Configuration Protocol (DHCP) server or a static configuration so that it can communicate over the network.
- WLC discovery: The AP goes through a series of steps to find one or more controllers that it might join. The steps are explained further in the next section.
- CAPWAP tunnel: The AP attempts to build a CAPWAP tunnel with one or more controllers. The tunnel will provide a secure Datagram Transport Layer Security (DTLS) channel for subsequent AP-WLC control messages. The AP and WLC authenticate each other through an exchange of digital certificates.
- WLC join: The AP selects a WLC from a list of candidates and then sends a CAPWAP Join Request message to it. The WLC replies with a CAPWAP Join Response message. The next section explains how an AP selects a WLC to join.
- Download image: The WLC informs the AP of its software release. If the AP’s own software is a different release, the AP downloads a matching image from the control- ler, reboots to apply the new image, and then returns to step 1. If the two are running identical releases, no download is needed.
- Download config: The AP pulls configuration parameters down from the WLC and can update existing values with those sent from the controller. Settings include RF, service set identifier (SSID), security, and quality of service (QoS) parameters.
- Run state: Once the AP is fully initialized, the WLC places it in the “run” state. The AP and WLC then begin providing a BSS and begin accepting wireless clients.
- Reset: If an AP is reset by the WLC, it tears down existing client associations and any CAPWAP tunnels to WLCs. The AP then reboots and starts through the entire state machine again.

T/F: To discover a WLC, an AP sends a unicast CAPWAP Discovery Request to a controller’s IP address over UDP port 5264 or a broadcast to the local subnet. If the controller exists and is working, it returns a CAPWAP Discovery Response to the AP
False.
To discover a WLC, an AP sends a unicast CAPWAP Discovery Request to a controller’s IP address over UDP port 5246 or a broadcast to the local subnet. If the controller exists and is working, it returns a CAPWAP Discovery Response to the AP.



