You are tasked to convert autonomous AP static WEP users to Cisco Unified WLC 802.1X EAP
users using their current Microsoft Active Directory accounts using a single WLAN. You need to
preserve the wired VLAN that these users were connecting on. Which of the below procedures
provides the best solution for this conversion?

A.
Configure the WLAN for Layer 2 security and use the WLC local RADIUS for authentication.
Configure the WLC local RADIUS server to authenticate each user against the Microsoft Active
Directory.
Configure the WLC local RADIUS server to pass down IETF RADIUS attributes 64, 65, and 81
containing the appropriate Layer 2 VLAN to the users.

B.
Configure the access point groups feature for two groups and map the WLAN to the correct
interfaces for each group.
Set the access points to the correct access point group for where these converted WEP users will
be located.
Connecting users will be placed on the correct Layer 2 VLAN.

C.

Configure the WLAN for the appropriate Layer 2 security settings and ensure that AAA override is
configured.
Configure an external RADIUS server to authenticate each user against the Microsoft Active
Directory.
Configure the external RADIUS server to pass down IETF RADIUS attributes 64, 65, and 81
containing the appropriate Layer 2 VLAN to the users.

D.

Configure two WLANs, one WEP, and one with EAP, but only broadcast the EAP WLAN so that
only one SSID is visible.
Configure each WLAN interface mapping to the correct and corresponding dynamic interface.
Then, use the WLC local RADIUS to authenticate users against the current Microsoft Active
Directory.
Configure the WLC connecting trunk port to allow the appropriate user wired Layer 2 VLAN.
Configure the interface group feature to contain all of the dynamic interfaces needed.
Configure the single WLAN to use the interface group and authenticate to an external RADIUS
server configured to check the users against the Microsoft Active Directory.
The authenticated users will be placed on the correct VLANs dynamically.