300-425 Designing Cisco Enterprise Wireless Networks (ENWLSD) Questions and Answers

 When configuring Cisco Prime Infrastructure, to represent the impact of a thick glass wall with an attenuation of 2dB on the RF signal, the obstacle that should be placed in the map editor is glass. This is because the material-specific attenuation values are used to model the RF signal’s behavior as it passes through different types of obstacles, and the thick glass wall’s impact is best represented by the glass obstacle in the map editor.

 In a high-density environment where 5 GHz coverage is provided by nine APs, disabling the 2.4 GHz radios on some APs can reduce co-channel interference because the 2.4 GHz band has fewer non-overlapping channels. This approach helps maintain coverage while mitigating interference.

 In a scenario where a customer has multiple Wireless LAN Controllers (WLCs) running N+1 redundancy with Access Points (APs) equally distributed, the critical APs must have priority in case of a WLC failure. If critical APs remain unregistered during a WLC failure, it indicates that the AP failover priority is not enabled globally on the backup WLC. Enabling AP failover priority ensures that critical APs are given precedence over other APs, allowing them to register with the backup WLC first.

When conducting a Layer 2 site survey, it is recommended to match the survey to the worst client available. This ensures that the wireless network is designed to provide adequate coverage and performance even for the clients with the poorest capabilities, thereby ensuring a consistent user experience for all devices2.

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/116057-site-survey-guidelines-wlan-00.html

 Adjusting the RX-SOP (Receiver Start of Packet Detection Threshold) can help to control cell size by making APs less sensitive to low-level signals, thus requiring clients to be closer to the AP to connect, which can ensure they connect to the nearest AP with the highest data rates.

 The Cisco 8540 Wireless Controller is designed for large enterprise and high-density environments. It has the capacity to manage up to 6000 access points, making it suitable for a multicampus architecture that needs to accommodate 4500 access points. Its high availability features ensure that all access points can be supported on one controller setup with minimal downtime.

 Optimized roaming is a feature that helps manage the client’s roaming behavior by disassociating clients with a signal strength below a predefined threshold. This feature is designed to prevent clients from sticking to an AP with poor connectivity, which can lead to suboptimal performance. If the BSS Transition Management query is causing the client to roam and the disassociation imminent feature is not enabled, it indicates that optimized roaming is likely enabled, prompting the client to seek a better AP connection.

 When a data path mobility tunnel fails to come up, one of the troubleshooting steps is to check if the necessary ports are open and not being blocked by any firewalls in the path. Since the mobility tunnel uses CAPWAP, which operates on UDP ports 16666 (control path) and 16667 (data path), establishing a Telnet connection to the firewall on port 16666 can help determine if the control path is open and if there are any issues that need to be addressed3.

 Changing the TPC Power Threshold to -65 dBm would generally result in a decrease in the transmit power of APs to maintain a smaller cell size. This helps in reducing interference and improving overall network performance. A lower threshold means the APs reduce their power to ensure the signal does not exceed -65 dBm, leading to decreased signal strength at the client side.

Devices that only support 2.4 GHz can increase congestion on this frequency band, especially in environments where multiple devices are present. This is because the 2.4 GHz band has fewer non-overlapping channels compared to 5 GHz, leading to more interference and potential performance issues.

In Cisco WLC release 8.9, the controller software can scale up to 20 WLCs and 3000 APs within a single RF group. This capability allows the Radio Resource Management (RRM) algorithms to function effectively across a larger network, optimizing the wireless experience by managing the RF environment and resources across multiple controllers and access points.

References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice.

 Interface groups allow for flexible WLAN to VLAN mappings by grouping multiple interfaces into a single entity. This enables a single WLAN to be mapped to multiple VLANs, providing scalability and flexibility in network design. AP groups are used to manage the configuration of multiple APs collectively, allowing for consistent WLAN to VLAN mappings across different APs in separate facilities.

The data path issue between the Cisco Catalyst 9800-CL and AireOS 5520, despite an active control path, is likely due to encrypted mobility being enabled on the AireOS 5520. Encrypted mobility requires both peers to have a matching configuration for encryption, which includes proper certificates and shared secrets. If there’s a mismatch, the control path may be established, but the data path can fail due to the inability to establish an encrypted tunnel.

To support a high density of mobile devices and bond channels in groups of two, the channel width for 802.11a should be set to 40 MHz. Setting the data rates to 24 MB and Mandatory ensures that only APs can send 802.11 management frames at this rate, which helps in managing the airtime fairness. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

 Enabling control plane encryption on the wireless controller is crucial for establishing a secure mobility tunnel between the wireless controller and the anchor controller. Control plane encryption ensures that the signaling and management traffic traversing the mobility tunnel is encrypted, providing a secure channel for guest access authentication and authorization processes. This is particularly important when the anchor controller is deployed within a DMZ, as it is exposed to potential external threats. The Cisco Catalyst 9800 Series wireless controller supports control plane security features that can be leveraged to secure the mobility tunnel and ensure the integrity and confidentiality of the control traffic.

For accurate location services, it is recommended that each location-ready AP hears at least four other APs at a signal level of -75 dBm or better. This ensures sufficient signal overlap and triangulation accuracy for reliable client location tracking. References: Cisco’s guidelines on wireless network design for location services.

The sticky client issue occurs when a wireless client device clings to a suboptimal access point instead of roaming to a better one with a stronger signal. Enabling Optimize Roaming on the Cisco 9800 Series Wireless Controller can alleviate this issue. This feature prompts clients to roam by disassociating them when their signal strength drops below a threshold, encouraging them to seek a better connection.

The Virtual Switching Link (VSL) is essential for communication between the active and standby Wireless LAN Controllers (WLCs) in a Stateful Switch Over (SSO) setup. If the VSL goes down, it can lead to a split-brain scenario where both WLCs assume they are active, causing network disruptions and inconsistencies in client handling. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425) Official Cert Guide.

To optimize roaming in a wireless network with multiple controllers, it is essential to use the same WLAN name (SSID) across all controllers. This allows clients to roam seamlessly between access points managed by different controllers without having to re-authenticate or experience disconnections1.

The Catalyst 9300X-48HX switches support PoE, which can power the 9166 APs. To ensure that all APs run with full functionalities, including PoE, the engineer should connect the APs to all available ports on the stack of two Catalyst 9300X-48HX switches. This will provide sufficient power and connectivity for the APs to operate effectively. References: Cisco Catalyst 9300X switch specifications and PoE requirements for 9166 APs.

To minimize channel utilization and interference with existing tenant networks, it’s best to use the UNII-1 channels, which are typically less congested, and stick to 20-MHz channels to provide more non-overlapping channels and reduce co-channel interference.

The ‘eping’ command is used on Cisco Wireless LAN Controllers to verify that the redundancy peer in a Stateful Switchover (SSO) pair of controllers is up and connected. This command sends ECHO packets to the peer controller to ensure connectivity.

 In the scenario described, where some APs did not failover to their secondary controller despite having sufficient licenses, the issue likely lies with the configuration of the APs to recognize the secondary controller. Since the controllers are not in a mobility group but have A records for their hostnames in DNS, this suggests that they rely on DNS for AP discovery and failover. If APs are not failing over as expected, it could be due to an incorrect IP address configured for the secondary controller on the AP or within DNS. The exhibit shows that the “Secondary Controller” field has an IP address of “10.42.89.11”, which should be verified against DNS records and actual controller settings to ensure accuracy. References := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice)

The data path being down while the control path is up indicates an issue with the data plane security configuration. The data-dtls setting on the AireOS 5520 WLC is responsible for enabling Datagram Transport Layer Security (DTLS) for the data plane, which encrypts the data traffic between the controllers. If this setting is disabled, the data path cannot be established securely, leading to the observed issue. Therefore, enabling data-dtls on the AireOS 5520 WLC is necessary to resolve the data path downtime.

Jammers are non-Wi-Fi interferers that can be identified by Metageek Chanalyzer. They intentionally disrupt wireless communications by emitting radio frequencies that interfere with Wi-Fi signals. Chanalyzer is designed to detect such patterns of interference.

https://www.metageek.com/training/resources/wifi-and-non-wifi-interference

 A fully measured wireless survey requires tools that support the active functioning of the network and allow for physical access to install and measure equipment. A PoE (Power over Ethernet) battery is necessary to power the access point during the survey. The access point itself is essential for broadcasting the signal. A ladder is needed to reach high places for proper access point placement and to measure coverage areas effectively.

References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

https://www.cisco.com/c/en/us/td/docs/wireless/technology/mesh/81/design/guide/b_mesh_81/Site_Preparation_and_Planning.html

 The Cisco Aironet 3800 Series APs support mGig, which allows for higher throughput over existing cabling. However, the maximum cable length that supports 5G operation is limited by the quality of the cable and signal attenuation. Category 5e cabling can support 5G operation up to a length of 130 meters, which is within the acceptable range for maintaining the required signal integrity for 5G speeds.

Typically, a Cisco workgroup bridge can support up to 20 wired client connections. This allows for a reasonable number of devices to be connected while maintaining performance.

 The decision to avoid installing APs directly in offices is likely due to transmit power considerations. Placing APs within offices could lead to excessive coverage for small areas, causing interference with other APs and reducing overall network performance. By placing them in common areas like corridors, engineers can ensure more uniform coverage across larger spaces while managing transmit power more effectively for optimal performance.

References:

• CCNP Enterprise Wireless Design ENWLSD 300-425 Official Cert Guide

https://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob30dg/RFDesign.html#wp1000551

The Cisco 5520 WLC supports Link Aggregation (LAG), which allows multiple physical interfaces to be treated as a single logical channel. By connecting a second 10-GB interface and implementing LAG, the customer can increase the throughput capacity and provide redundancy without the need for a second controller. This approach also simplifies network design and management by reducing the number of IP addresses needed for the controllers and APs. References: Designing Cisco Enterprise Wireless Networks (ENWLSD) training and certification materials.

 To ensure the anchored traffic remains up if a single WLC in the high-availability cluster fails, the mobility MAC address for the high-availability cluster should be configured. This allows the APs to recognize the cluster as a single entity, maintaining the CAPWAP tunnel to the anchor WLC in the DMZ even if one of the WLCs in the cluster fails.

When configuring high availability on an access point, a network engineer can configure a maximum of two controllers. One serves as the primary controller, and the other serves as the secondary controller.

In a Cisco wireless network, when designing for client roaming between access points (APs) that are connected to different controllers, especially in a global enterprise with multiple data centers, it is essential to ensure seamless client mobility. Mobility lists are used in such scenarios to define which controllers are allowed to participate in client roaming. This feature allows the APs connected to controllers within one group (e.g., Group ABC) to recognize and facilitate roaming clients from another group (e.g., Group XYZ). The mobility list is configured on each controller and includes the IP addresses of other controllers that should be considered part of the same mobility domain. When a client roams from an AP on one controller to an AP on another controller, if both controllers are in each other’s mobility list, they will establish a mobility tunnel through which they exchange the client’s context and security credentials. This ensures that the client can roam without re-authentication and maintains session continuity.

References:

• CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice Test.
• Designing Cisco Enterprise Wireless Networks (ENWLSD) course and training videos available on Cisco Learning Network and Cisco official website.

Voice over wireless roaming is sensitive to delays and interruptions. Full reauthentication, as mentioned in option A, can cause noticeable gaps in a voice conversation because it requires time to re-establish security credentials. This process can interrupt the seamless experience expected in voice communications. Option E is also correct because roaming with only 802.1x authentication indeed requires full reauthentication, which can introduce significant delays affecting voice quality. References: For more detailed information, refer to the CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/vowlan/41dg/vowlan41dg-book/vowlan_ch5.html

Access points can be assigned different failover priorities to determine the order in which they will failover in the event of a primary controller failure. An access point with priority 1 is given the highest priority level and is considered critical. This means it will failover before other access points with lower priorities, ensuring that the most critical areas remain covered.

 During a client roaming event, the Wireless LAN Controller (WLC) is responsible for communicating the new Layer 2 Endpoint ID (EID) mapping of a wireless supplicant to the fabric domain. The WLC acts as a mobility orchestrator within the Cisco Digital Network Architecture (DNA) to ensure seamless roaming and connectivity. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/deploy-guide/cisco-dna-center-sd-access-wl-dg.pdf

In a high-density environment like an auditorium, where APs are in close proximity and a large number of devices are connected, the RF profile is used to adjust the radio frequencies of the APs to minimize co-channel interference. The RF profile allows for the configuration of power levels, channel width, and channel assignment to optimize wireless performance and reduce interference. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice

When designing a wireless network for diverse clients, it’s crucial to ensure that the network will be reliable for all users. Therefore, surveys should be conducted with the client that has the worst RF characteristics, as indicated in option D. This approach ensures that the network is designed to support even the weakest client, thereby providing a consistent experience for all users. 

https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Conducting_Site_Surveys_with_MR_Access_Points

For an effective office site survey, it’s recommended to: A. Use a battery pack to power APs - This allows for mobility and testing in various locations without relying on fixed power sources. B. Use a drawing of the office space to mark AP and client placements - This helps in planning the optimal locations for AP installation. F. Use APs with built-in antennas - They are commonly used for site surveys as they represent the typical deployment scenario.

References: The official Cisco ENWLSD 300-425 certification guide will have more details on conducting site surveys.

https://www.cisco.com/c/en/us/td/docs/wireless/technology/mesh/8-4/b_mesh_84/Site_Preparation_and_Planning.html#ID3405

 For a pre-deployment site survey, it’s important to know the AP model to understand the capabilities and coverage pattern of the APs. Additionally, knowing the number of clients helps to design a network that can handle the expected client density.

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/116057-site-survey-guidelines-wlan-00.html

The 9800 Series Wireless Controller uses CAPWAP tunnels to encapsulate and transport both control and data traffic between access points and the controller. This allows for centralized management and control while also enabling efficient data forwarding.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html

Jitter is the variation in time between packets arriving, caused by network congestion, timing drift, or route changes. In a Wi-Fi network designed to support video over Wi-Fi, if video multicast traffic is unreliable despite good coverage, jitter is a key performance metric to investigate. High jitter can cause the video to play erratically, freeze, or have sync issues between video and audio streams

When the mobility tunnel is not operational for the data path, it is essential to validate the network’s firewall settings. Firewall port 16666 must be open to allow mobility control messages to pass through, and firewall IP protocol 97 (EtherIP) must be permitted to enable the encapsulation of IP within IP, which is necessary for the data path of the mobility tunnel. Ensuring these firewall settings are correctly configured is critical for facilitating inter-controller roaming and operational mobility tunnels.

AP Fallback is a feature that allows APs to rejoin their primary controller after they have connected to a secondary controller due to a failure. By enabling AP Fallback on the primary controller, the APs will automatically rejoin it when it becomes available again after a power interruption. This ensures that APs return to their designated primary controller for normal operations.

In a medical treatment environment where both data and voice services are required, continuous coverage of -67 dBm from one access point is the minimum requirement. This ensures that there is sufficient signal strength for reliable voice communication, which is critical in medical settings. The -67 dBm threshold is commonly recommended for voice applications to ensure call quality and reliability.

So -67dBm covers both Data & Voice with a single AP

 In an outdoor mesh network designed to cover sports fields, a 5 GHz, 14-dBi patch antenna is suitable for the RAP for backhaul connectivity. The higher gain and directional nature of a patch antenna help in focusing the signal over longer distances and in specific directions, which is ideal for connecting various points in a large outdoor area5.

https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-antennas-accessories/product_data_sheet09186a008008883b.html

 In an auditorium seating 500 students with laptops, a high-density design model is appropriate. This model focuses on supporting a large number of devices in a concentrated area with sufficient coverage and bandwidth. It involves strategic AP placement, proper channel planning, and capacity planning to ensure all students have reliable wireless access. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice

https://www.cisco.com/c/dam/en_us/solutions/industries/docs/education/cisco_wlan_design_guide.pdf

 Cisco workgroup bridges typically support up to 8 wired clients. With 42 users, each having a computer and a VoIP phone, that’s a total of 84 devices. To connect all devices while keeping costs at a minimum, the company would need 6 APs (as 7 x 12 = 84), with each AP supporting 14 devices (7 computers and 7 VoIP phones).

So, each AP will have 25 clients. Minimum 4 APs are sufficient.

 The redundancy management heartbeat in Cisco Wireless LAN Controllers (WLCs) running 8.x code in Stateful Switch Over (SSO) mode uses UDP packets for communication. When troubleshooting connectivity issues between two WLCs, it is essential to filter for UDP packets in a packet capture to verify the heartbeat communication. The heartbeat packets are sent on a specific UDP port, and filtering for this port can help isolate the heartbeat traffic from other types of traffic in the capture.

For a point-to-multipoint mesh network site survey, configuring the Rx power and Tx power is essential. Rx power will determine the sensitivity of the AP to incoming signals, which is crucial for understanding the reach of each mesh point. Tx power settings will influence the strength of the signals transmitted from the AP, affecting the network’s overall coverage. References: Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

The behavior of guest client sessions in the US being anchored to the WLCs in Europe despite the presence of a local anchor WLC can be explained by the failure and subsequent recovery of the US anchor WLC. During the failure, the guest sessions would have been transferred to the European WLCs. After recovery, if the priority settings were not correctly restored or if the system did not automatically revert back to the local anchor, the sessions would remain anchored to the European WLCs3.

References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide Premium Edition and Practice.

 Smartphones and tablets typically have fewer antennas than laptops, which can affect their signal reception and transmission capabilities. Additionally, they often support lower data rates compared to laptops due to their smaller size and power constraints.

 When designing a backhaul link, the mesh AP role should be set to ‘bridge’ to enable it to connect separate network segments or extend coverage to remote areas.

In a hospital setting, the kitchen is a common source of 2.4 GHz RF noise due to the use of microwave ovens which operate on the same frequency. X-ray radiography equipment, while primarily using higher frequency ranges, can also contribute to RF noise in both the 2.4 GHz and 5 GHz bands due to electronic components and shielding inefficiencies. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

https://www.ciscopress.com/articles/article.asp?p=2351131 &seqNum=2