You are tasked to convert autonomous AP static WEP users to Cisco Unified WLC 802.1X EAP users
using their current Microsoft Active Directory accounts using a single WLAN. You need to preserve
the wired VLAN that these users were connecting on. Which of the below procedures provides the
best solution for this conversion?
A.
Configure the WLAN for Layer 2 security and use the WLC local RADIUS for authentication.
Configure the WLC local RADIUS server to authenticate each user against the Microsoft Active
Directory. Configure the WLC local RADIUS server to pass down IETF RADIUS attributes 64, 65, and
81 containing the appropriate Layer 2 VLAN to the users.
B.
Configure the access point groups feature for two groups and map the WLAN to the correct
interfaces for each group. Set the access points to the correct access point group for where these
converted WEP users will be located. Connecting users will be placed on the correct Layer 2 VLAN.
C.
Configure the WLAN for the appropriate Layer 2 security settings and ensure that AAA override is
configured. Configure an external RADIUS server to authenticate each user against the Microsoft
Active Directory. Configure the external RADIUS server to pass down IETF RADIUS attributes 64, 65,
and 81 containing the appropriate Layer 2 VLAN to the users.
D.
Configure two WLANs, one WEP, and one with EAP, but only broadcast the EAP WLAN so that only
one SSID is visible. Configure each WLAN interface mapping to the correct and corresponding
dynamic interface. Then, use the WLC local RADIUS to authenticate users against the current
Microsoft Active Directory. Configure the WLC connecting trunk port to allow the appropriate user
wired Layer 2 VLAN. Configure the interface group feature to contain all of the dynamic interfaces
needed. Configure the single WLAN to use the interface group and authenticate to an external
RADIUS server configured to check the users against the Microsoft Active Directory. The
authenticated users will be placed on the correct VLANs dynamically.