300-425 Designing Cisco Enterprise Wireless Networks (ENWLSD) Question and Answers

Optimized roaming is a feature that helps mitigate sticky client behavior by assessing the client’s signal strength and proactively disconnecting clients with a signal below a predefined threshold. This encourages clients to connect to a closer AP with a stronger signal, improving the overall wireless experience in high-density areas.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/80/hdx_final/b_hdx_dg_final/high_density_experience_features_added_in_release_8_0.html

For mobility tunnels to come up between WLCs, they need to be part of the same mobility group. If they are configured with different mobility groups, the mobility tunnels will not establish, preventing the WLCs from sharing client, AP, and security information.

 Cisco workgroup bridges typically support up to 8 wired clients. With 42 users, each having a computer and a VoIP phone, that’s a total of 84 devices. To connect all devices while keeping costs at a minimum, the company would need 6 APs (as 7 x 12 = 84), with each AP supporting 14 devices (7 computers and 7 VoIP phones).

So, each AP will have 25 clients. Minimum 4 APs are sufficient.

When conducting an outdoor bridge site survey, weather and the Fresnel zone are critical criteria to consider. Weather can affect signal propagation and the reliability of the wireless link, while the Fresnel zone relates to the elliptical area around the line-of-sight path between transceivers, which must be clear of obstacles to ensure a strong signal. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

 The design approach should use the 5 GHz frequency band without channel bonding to support 20 MHz channels. This provides a balance between network capacity and interference mitigation.

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/108184-config-802-11n-wlc.html

 The Cisco Aironet 3800 Series APs support mGig, which allows for higher throughput over existing cabling. However, the maximum cable length that supports 5G operation is limited by the quality of the cable and signal attenuation. Category 5e cabling can support 5G operation up to a length of 130 meters, which is within the acceptable range for maintaining the required signal integrity for 5G speeds.

The ‘eping’ command is used on Cisco Wireless LAN Controllers to verify that the redundancy peer in a Stateful Switchover (SSO) pair of controllers is up and connected. This command sends ECHO packets to the peer controller to ensure connectivity.

 A fully measured wireless survey requires tools that support the active functioning of the network and allow for physical access to install and measure equipment. A PoE (Power over Ethernet) battery is necessary to power the access point during the survey. The access point itself is essential for broadcasting the signal. A ladder is needed to reach high places for proper access point placement and to measure coverage areas effectively.

 The Cisco 8540 Wireless Controller is designed for large enterprise and high-density environments. It has the capacity to manage up to 6000 access points, making it suitable for a multicampus architecture that needs to accommodate 4500 access points. Its high availability features ensure that all access points can be supported on one controller setup with minimal downtime.

In Cisco WLC version 8, the need for separate WPlus licenses has been eliminated as all features that were previously part of the WPlus license are now included in the Base license. This consolidation simplifies licensing management and ensures that customers have access to all necessary features without requiring additional licenses. References := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice)

 The AP fallback feature is designed to allow access points to return to their primary controller after they have connected to a secondary controller due to a failure or connectivity issue with the primary. This setting ensures that once the primary controller is back online, the APs will recognize it and re-establish their connection as per the original network design. This feature is crucial for maintaining the intended controller hierarchy and ensuring seamless wireless network operation.

Setting the Anchor priority for the primary controller to 1 ensures that clients connect to the primary controller first. The Anchor priority is a value assigned to each controller within a mobility group to determine the order in which clients should connect to the controllers. A lower priority value has higher precedence. Therefore, by setting the primary controller’s Anchor priority to 1, it becomes the preferred controller for client connections. If the primary controller fails, clients are then pushed to the secondary controller, which should have a higher Anchor priority value.

An active ping survey is used to validate network performance by sending and receiving data packets to measure the end-to-end network performance, including latency, packet loss, and throughput. Ekahau site survey tools can perform active ping surveys to test the connectivity and performance of the wireless network, ensuring that it operates as expected and meets the required service levels.

References := Configuring Active Surveys – Ekahau Customer Support

The 9800 Series Wireless Controller uses CAPWAP tunnels to encapsulate and transport both control and data traffic between access points and the controller. This allows for centralized management and control while also enabling efficient data forwarding.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html

The voice readiness tool in Cisco Prime inspects the network against a dBm range that is suitable for voice over Wi-Fi. The range of -72 to -67 dBm is considered optimal for voice applications, ensuring clear audio quality and minimal packet loss.

https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/34/user/guide/bk_CiscoPrimeInfrastructure_3_4_0_UserGuide/bk_CiscoPrimeInfrastructure_3_4_0_UserGuide_chapter_01010.html

In a mobility group, multiple controllers should be configured with the same virtual IP address to ensure proper roaming. This virtual IP address is used by wireless clients during the roaming process to facilitate seamless mobility between controllers.

 Mobility tunnels between Cisco Wireless LAN Controllers (WLCs) use UDP port 16666 for control messages and UDP port 16667 for data traffic. If EPING is failing, it indicates that the necessary ports are not open. Allowing UDP port 16666 through the firewall would enable the control messages required for establishing the mobility tunnels.

The 5 GHz band is recommended for voice over wireless due to its wider channel bandwidths, allowing for higher data rates. Setting the cell boundary at -67 dBm ensures sufficient signal strength for reliable voice communication. References: CCNP Enterprise Wireless Design ENWLSD 300-425 Official Cert Guide.

 The Cisco 5520 WLC v8.3 requires a base license to use OfficeExtend AP functionality, which allows remote workers to have the same wireless connectivity as they would in an office environment.

 For a pre-deployment site survey, it’s important to know the AP model to understand the capabilities and coverage pattern of the APs. Additionally, knowing the number of clients helps to design a network that can handle the expected client density.

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/116057-site-survey-guidelines-wlan-00.html

 Fast Transition (FT), also known as IEEE 802.11r, is the key-caching mechanism that must be configured to speed up the reauthentication delays on the wireless infrastructure. FT allows for rapid re-authentication when roaming between access points, reducing the time required for re-establishing security keys and thus speeding up the overall process2.

In a high availability setup with Cisco 5508 Wireless LAN Controllers, the standby controller can be accessed via the console connection and the service port interface. The console provides direct access, while the service port interface allows for network-based access to the standby unit for management purposes.

The ‘tracert’ command is used to test connectivity between members of a mobility group by tracing the path that mobility control packets take over the network. This command helps identify any potential issues with the route that the packets are taking, which could affect the ability of guests to connect to the anchor controller in the DMZ. References := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice)

 Mobility groups are created by configuring each Wireless LAN Controller (WLC) to use the same mobility domain name and defining each WLC as a peer in the static mobility members list of every other WLC in the group. This configuration allows WLCs to share information and support seamless roaming for wireless clients across different controllers within the same mobility group.

References := Chapter: Chapter 14 - Configuring Mobility Groups - Cisco

 To optimize RF performance across different buildings and user densities: C. Configure AP groups for each area type - This allows for customized settings for APs serving different areas. D. Configure RF profiles for each area type - RF profiles enable the customization of RF parameters to suit the specific needs of each building or area type.

For outdoor wireless networks, especially in open areas prone to harsh weather, it’s crucial to install lightning arrestors to protect against electrical surges caused by lightning strikes. Additionally, grounding the antenna cables helps dissipate any electrical charge that could damage the equipment.

 For mobility tunneling through a firewall in a Cisco wireless network environment, UDP port 16666 must be open along with IP Protocol number ‘97’, which is used for Encapsulating Security Payload (ESP) traffic typically found in IPsec tunnels. By ensuring these ports are mapped correctly through the firewall, R&D engineers can roam within their department while maintaining a secure mobility tunnel. References := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice)

 RXSOP (Receive Start of Packet Detection Threshold) and TPC (Transmit Power Control) are two features that can help manage the challenges associated with a high AP (Access Point) count in a dense environment like a university auditorium. RXSOP can be adjusted to refine how APs differentiate between noise and valid packets, which is particularly useful in high-density areas where multiple APs might otherwise respond to the same signal. TPC helps in managing the transmit power of APs, allowing for better coverage and reduced interference among APs that are in close proximity to each other. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/80211/200069-Overview-on-802-11h-Transmit-Power-Cont.html

 When designing a backhaul link, the mesh AP role should be set to ‘bridge’ to enable it to connect separate network segments or extend coverage to remote areas.

 Cisco Spectrum Expert is a tool designed to identify and analyze non-Wi-Fi interference sources. During a post-deployment site survey, it can be used to detect interference from various devices such as cordless phones, Bluetooth devices, microwave ovens, and more. This tool provides a visual representation of the RF environment, allowing engineers to pinpoint the exact source of interference and take appropriate measures to mitigate its impact on the wireless network.

References := Designing Cisco Enterprise Wireless Networks (ENWLSD)

 Frequent disconnections may occur if the RSSI threshold set for optimized roaming is too high, causing clients to attempt roaming too late. Disabling optimized roaming and enabling 802.11v support allows for better client steering by the AP, as 802.11v includes the BSS Transition Management feature, which guides clients to a better AP based on the network’s conditions.

 To ensure the anchored traffic remains up if a single WLC in the high-availability cluster fails, the mobility MAC address for the high-availability cluster should be configured. This allows the APs to recognize the cluster as a single entity, maintaining the CAPWAP tunnel to the anchor WLC in the DMZ even if one of the WLCs in the cluster fails.

 Smartphones and tablets typically have fewer antennas than laptops, which can affect their signal reception and transmission capabilities. Additionally, they often support lower data rates compared to laptops due to their smaller size and power constraints.

To focus the coverage heat map on the desired coverage, the engineer should use the RSSI slider to set the heat map to the desired cutoff filter. This action will adjust the display to show only the signal levels that meet or exceed the specified RSSI value, effectively filtering out weaker signals and highlighting areas with sufficient coverage. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

To support a high density of mobile devices and bond channels in groups of two, the channel width for 802.11a should be set to 40 MHz. Setting the data rates to 24 MB and Mandatory ensures that only APs can send 802.11 management frames at this rate, which helps in managing the airtime fairness. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

 AP groups allow the mapping of specific WLANs (SSIDs) to distinct VLANs for different locations. This design enables clients to be on different subnets based on their building location without modifying the access points’ mode of operation.

 Before replacing old APs with IEEE 802.11ac-capable APs, it is crucial to check the software version of the wireless LAN controller. The controller’s firmware must support the newer standards and capabilities of 802.11ac APs. An outdated software version may not support the advanced features and performance enhancements offered by 802.11ac technology, leading to compatibility issues and suboptimal network performance.

 The decision to avoid installing APs directly in offices is likely due to transmit power considerations. Placing APs within offices could lead to excessive coverage for small areas, causing interference with other APs and reducing overall network performance. By placing them in common areas like corridors, engineers can ensure more uniform coverage across larger spaces while managing transmit power more effectively for optimal performance.

For handheld mobile scanners processing credit card payments, security and seamless roaming are critical. The 802.11w standard, also known as Protected Management Frames (PMF), provides enhanced security that helps prevent disconnections and issues when roaming between access points. Incorporating 802.11w in the design ensures that the scanners maintain a secure and consistent connection while moving throughout the environment. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice

When configuring high availability on an access point, a network engineer can configure a maximum of two controllers. One serves as the primary controller, and the other serves as the secondary controller.

 In a high-density environment where 5 GHz coverage is provided by nine APs, disabling the 2.4 GHz radios on some APs can reduce co-channel interference because the 2.4 GHz band has fewer non-overlapping channels. This approach helps maintain coverage while mitigating interference.

The data path issue between the Cisco Catalyst 9800-CL and AireOS 5520, despite an active control path, is likely due to encrypted mobility being enabled on the AireOS 5520. Encrypted mobility requires both peers to have a matching configuration for encryption, which includes proper certificates and shared secrets. If there’s a mismatch, the control path may be established, but the data path can fail due to the inability to establish an encrypted tunnel.

 Cisco FlexConnect mode is designed for branch offices that lack a wired backhaul. It allows APs to switch client data traffic locally while still performing client authentication centrally. This mode provides the flexibility needed for branch deployments, ensuring that client traffic is handled efficiently even if the WAN link to the central site is down. References: Cisco FlexConnect technical documentation and Designing Cisco Enterprise Wireless Networks (ENWLSD) training.

 For a government agency requiring high security between device communications, enabling Mobility Encryption across the network is essential. Mobility Encryption enhances the security of the mobility group by encrypting the traffic exchanged between mobility peers, including AireOS, Cisco IOS-XE controllers, and Cisco 4800 Series APs. This encryption helps to protect against potential eavesdropping and unauthorized access, ensuring that sensitive government data remains confidential during wireless transmission.

To address aesthetic concerns, using enclosures can effectively conceal wireless infrastructure, such as access points, within the environment. This helps maintain the visual appeal of the area while still providing the necessary wireless coverage.

FlexConnect APs must be in a FlexConnect group to support 802.11r Fast Transition (FT). This grouping allows for local authentication and key management, which are necessary for fast roaming methods that improve voice quality and wireless IP phone performance during roaming.

 To predict the number of APs needed to support approximately 300 wireless devices on a new floor with an 802.11ac network, the Demand Settings in the Cisco Prime Infrastructure Planning Tool must be adjusted. This setting allows the planner to specify client density and throughput requirements, which are crucial for determining the correct number of APs.

 The Cisco Aironet 3800 Series APs support mGig, which allows for higher throughput over existing cabling. However, the maximum cable length that supports 5G operation is limited by the quality of the cable and signal attenuation. Category 5e cabling can support 5G operation up to a length of 130 meters, which is within the acceptable range for maintaining the required signal integrity for 5G speeds.

In a mobility group design, it is essential that all Wireless LAN Controllers (WLCs) share the same mobility domain name to ensure seamless client mobility and roaming between WLCs. This allows for clients to be recognized across the network and maintain their sessions as they roam. Additionally, when WLCs are in a Stateful Switch Over (SSO) high availability pair, they must use the same virtual IP address to present a single network entity to the wireless clients, ensuring uninterrupted service in the event of a failover.

To reduce full authentication requests and optimize roaming, enabling Cisco Centralized Key Management (CCKM) on the voice SSID is effective. CCKM allows for fast re-authentication during roaming, which is beneficial for voice applications. Adding APs to a FlexConnect group helps manage APs in remote branches more efficiently.

For a point-to-multipoint mesh network site survey, configuring the Rx power and Tx power is essential. Rx power will determine the sensitivity of the AP to incoming signals, which is crucial for understanding the reach of each mesh point. Tx power settings will influence the strength of the signals transmitted from the AP, affecting the network’s overall coverage. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

The Cisco AIR-2702i AP can be set to various modes for different purposes. For conducting a Layer 1 site survey to discover non-Wi-Fi interference, the AP should be set to Monitor mode. In this mode, the AP can scan the radio environment for interference sources without serving any clients, making it ideal for use with tools like Metageek Chanalyzer.

When a client roams between two access points (APs) that are registered to different controllers with interfaces in the same client subnet, the controllers will exchange mobility control messages over UDP port 16666. This is in accordance with the Designing Cisco Enterprise Wireless Networks (ENWLSD) guidelines. The purpose of these messages is to ensure seamless roaming, where the client’s session and authentication state are transferred from one controller to another without requiring re-authentication or re-association by the client. The mobility control messages facilitate the coordinated transfer of the client database entry from the original controller to the new one, maintaining a consistent experience for the user.

In a medical treatment environment where both data and voice services are required, continuous coverage of -67 dBm from one access point is the minimum requirement. This ensures that there is sufficient signal strength for reliable voice communication, which is critical in medical settings. The -67 dBm threshold is commonly recommended for voice applications to ensure call quality and reliability.

So -67dBm covers both Data & Voice with a single AP

To minimize channel utilization and interference with existing tenant networks, it’s best to use the UNII-1 channels, which are typically less congested, and stick to 20-MHz channels to provide more non-overlapping channels and reduce co-channel interference.

The issue described indicates that there are more critical priority access points than the backup Cisco WLC can handle with its available licenses. Since there are only 10 licenses available and 7 access points are set to critical priority, not all of them can failover when the primary Cisco WLC is at full capacity. This oversubscription of critical priority access points prevents all of them from failing over as expected.

 Cisco Hyperlocation requires a high degree of accuracy in client location tracking. A recommended cell overlap of 50% ensures that client devices are consistently within the range of multiple access points, which improves location accuracy and reliability. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

In a hospital setting, the kitchen is a common source of 2.4 GHz RF noise due to the use of microwave ovens which operate on the same frequency. X-ray radiography equipment, while primarily using higher frequency ranges, can also contribute to RF noise in both the 2.4 GHz and 5 GHz bands due to electronic components and shielding inefficiencies. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

https://www.ciscopress.com/articles/article.asp?p=2351131 &seqNum=2

Access points can be assigned different failover priorities to determine the order in which they will failover in the event of a primary controller failure. An access point with priority 1 is given the highest priority level and is considered critical. This means it will failover before other access points with lower priorities, ensuring that the most critical areas remain covered.