ENWLSI 300-430 flashcards
ENWLSI 300-430 · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- CAPWAP data tunnel
- A UDP tunnel (port 5247) carrying client data between an AP and a WLC in local mode; FlexConnect local switching bypasses it for client VLAN traffic.
- DHCP option 43
- A DHCP option that provides Cisco APs with a list of controller management IP addresses in hex format, each prefixed by 0xf1 and length 0x04.
- Regulatory domain
- The country/region suffix on an AP model (such as -A, -E, -K) that must match the WLC's configured country code; a mismatch prevents radios from enabling.
- AP priority
- A value from 1 to 5 assigned to an AP that determines which controller it prefers: 1 is lowest, 4 is medium, and 5 is highest priority.
- RF profile
- A set of 802.11a/b/g radio parameters (DCA channels, TX power, data rates) bound to an AP group; the default RF profile applies to the default AP group.
- Mobility Express
- A controller function embedded in a supported 802.11ac Wave 2 or later access point, using a virtual interface and supporting up to 100 APs.
- Web passthrough
- A Layer 3 web authentication mode that only requires the client to accept an acceptable use policy page; no username or password is validated.
- Web consent
- A Layer 3 web authentication mode that requires a valid local or RADIUS username and password before the client is allowed network access.
- Guest anchor controller
- A controller in the DMZ that terminates guest client traffic forwarded over a mobility tunnel from the foreign controller, providing internet access and IP addressing.
- Client exclusion
- A WLC policy that blocks a client after repeated failed web authentication attempts, typically three by default, for a configurable exclusion timeout.
- Virtual interface certificate
- A CA-signed certificate installed on the WLC for the virtual interface hostname, preventing browser warnings on the web authentication redirect page.
- WPA3 SAE
- Simultaneous Authentication of Equals, the WPA3-Personal key exchange that replaces the WPA2 PSK handshake and resists offline dictionary attacks.
- Protected Management Frames
- The 802.11w feature that encrypts and integrity-protects management frames; required mode breaks clients without 802.11w support, while optional mode permits both.
- Local EAP
- An authentication method on the WLC that uses a local user database with EAP-FAST, PEAP, or EAP-TLS, suitable for small deployments without a RADIUS server.
- RADIUS CoA
- A RADIUS change of authorization message (RFC 5176) that lets Cisco ISE change a client's authorization or disconnect it after posture assessment.
- WPA3 transition mode
- A WLAN setting that allows both WPA2 and WPA3 clients to associate on the same SSID during migration to WPA3 security.
- Platinum QoS profile
- The WLC WLAN QoS profile used for voice traffic, mapping untagged traffic to the highest user priority and the AC_VO access category.
- WMM access categories
- Four 802.11e queues: AC_VO for voice, AC_VI for video, AC_BE for best effort, and AC_BK for background, mapped from user priority values 0 through 7.
- AVC
- Application Visibility and Control uses NBAR2 to identify applications in wireless traffic and can mark or drop them according to policy on the WLAN.
- Fastlane
- A Cisco feature combining 802.11r and QoS that prioritizes voice and video on 11ac Wave 2 APs; it requires the WLAN QoS to be set to Platinum.
- Call Admission Control
- A WLC feature that limits voice calls per AP or radio using bandwidth-based or load-based methods, preventing oversubscription of the voice queue.
- Trust DSCP
- A WLC QoS setting that preserves the DSCP value marked by the wired network instead of applying the WLAN QoS profile's default user priority.
- mDNS gateway
- A WLC function that snoops Bonjour service advertisements on UDP 5353 and answers queries on behalf of devices, controlling which services are bridged.
- mDNS AP mode
- A WLAN setting that converts wired multicast mDNS traffic into unicast frames sent to each AP, reducing multicast airtime and replication problems.
- Multicast group address
- An address in the 224.0.0.0/4 range configured on the WLC and WLAN to carry multicast traffic; it must not overlap other groups in use.
- Bonjour service profile
- A WLC mDNS configuration that defines which service types are allowed or filtered for a WLAN, applied through the default service policy.
- HA SSO
- A WLC active/standby pair linked by redundancy ports that share configuration and management IP, allowing the standby to take over on failover.
- Mobility group
- A set of controllers with the same group name that exchange mobility messages over UDP 16666 and 16667, enabling client roaming across controllers.
- Inter-controller Layer 3 roaming
- A roam where the client moves to a controller on a different subnet; the original controller acts as anchor and forwards traffic over the mobility tunnel.
- Auto-anchor
- A guest anchor redundancy feature where the foreign controller anchors to a primary anchor and falls back to a secondary anchor if the primary fails.
- CleanAir AQI
- The Air Quality Index reported by CleanAir, ranging from 0 to 100, that summarizes interference severity from sources such as microwave ovens and Bluetooth.
- RRM DCA interval
- The default 600-second interval at which Radio Resource Management's Dynamic Channel Assignment reevaluates and changes AP channel assignments.