Question

Discuss how to implement an isolated test lab environment to test DHCP split scope, failover scope, and security configurations.

Answer 1

contents

controller recommendations

prune VLANs

DHCP proxy mode

disable internal DHCP

same DHCP servers per interface across

DHCP timeout

IP addressing

virtual gateway IP

LAG mode

non LAG topology.

manager interface vlan tag

preventing traffic leaker guest or AAA overide scenarios

WLAN general recommendations use broadcast SSID

voice- CCKM  timestamp validation

GADIUS source interface

interface groups

security recommendations

fast trasition

DHCP required open

disable airout IE

client exclusion

peer-to-peer blocks

disable local EAP.

DHCP timeout

WLC has a timeout for each client state.it is possible to change default time allowed for a client to complete a successful address nogotiation this could be useful on some topology senarios.

for example:where the same SSID is served by 2 different do not controller groups that share a mobility relationships and you want to force clients to be deleted and restart DHCP negotiation after an inter-controller room.

multi cast VLAN.