300-430 Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI) Questions and Answers

When deploying Cisco Hyperlocation, it is important to enable the feature on both the wireless LAN controller and Cisco CMX to ensure proper functionality and data accuracy. Additionally, if the Cisco CMX server is a VM, a high-end VM is required to handle the processing demands of Cisco Hyperlocation deployments.  References : The considerations for deploying Cisco Hyperlocation are covered in the certification guide, which emphasizes the importance of enabling the feature on both the controller and CMX, as well as the hardware requirements for the CMX server.

The image provided shows a packet capture with multiple entries displaying UDP traffic between two IP addresses using different ports (notably port number ‘16666’ which is commonly used for NMSP). Network Mobility Services Protocol (NMSP) is used by wireless controllers like WLCs to communicate with management software such as Cisco’s Mobility Services Engine or CMX. This protocol helps in managing various mobility services across wireless networks.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

When setting up identity-based networking with ISE and configuring AAA override on the WLAN, the attributes that can be used to change the client behavior from the default settings include the DNS server and DSCP value. The DNS server attribute allows for the specification of a DNS server per client, which can be essential for directing traffic through specific network paths or applying policies based on domain name resolutions. The DSCP value attribute is used to mark the packets with a specific Quality of Service (QoS) level, which can prioritize or deprioritize traffic as needed.  References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

For a Layer 2 survey in a mining facility, particularly in a mine shaft, a patch antenna is the most suitable choice. Patch antennas are directional and can be used to focus the signal in a specific direction, which is ideal for the long and narrow structure of a mine shaft. This type of antenna can help in providing better coverage and signal strength in challenging environments like mines.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

When planning an image upgrade for a large number of Access Points (APs) across remote sites with limited WAN bandwidth, it’s crucial to minimize WAN utilization. The best approach in this scenario is:

Predownload the new code to the APs (Option A) : This method involves sending the new firmware image to all APs before actually rebooting them with the new image. It allows APs to download firmware when network usage is low, thus minimizing impact during peak hours.

References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

Split tunneling on a Cisco Aironet 600 Series OfficeExtend AP allows for traffic to be divided between two different networks. In this case, it enables the user to access the corporate network for work-related tasks while simultaneously allowing them to print to a printer on their home network. This is achieved by routing the traffic meant for the corporate network to the WLC, while local traffic such as the connection to a home printer is kept on the local network.  References  := CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

FastLocate technology enhances location updates’ frequency by utilizing probe requests from clients for real-time location tracking. This method increases the refresh rate of client locations significantly compared to other methods that rely on data packets or RSSI measurements of associated clients only. By implementing a probe-based technique, an engineer can achieve higher location refresh rates as required for location services in an office environment.  References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

Disabling DHCP proxy on the Cisco WLC and running the  ip helper-address  command under the VLAN interface to point to DHCP and the two ISE servers is the recommended action. This allows direct communication between clients and DHCP/ISE servers, which is necessary for accurate device profiling.

 The Cisco Mobility Services Engine (MSE) integrates with Cisco DNA Center to provide advanced location services, including the tracking of clients experiencing connectivity issues. This integration allows network administrators to visualize and troubleshoot client locations effectively.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, which details the integration of location services within Cisco DNA Center.

A Public-Signed SAN (Subject Alternative Name) certificate allows multiple domain names to be protected with a single certificate. This is useful in a distributed environment like a guest portal on Cisco ISE, where there may be multiple nodes with different Common Names (CNs). Using a SAN certificate can prevent CN mismatch errors during SSL/TLS handshakes.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

The issue with users configured for EAP-PEAP not being able to connect to the network, when a Cisco Wireless LAN Controller (WLC) is deployed using local EAP, typically points to a misconfiguration in the local EAP profile on the WLC. EAP-PEAP relies on a server-side certificate to create a secure TLS tunnel for the authentication process. If the local EAP profile is not correctly configured with the proper certificate or other necessary settings, the authentication process will fail, preventing users from connecting.  References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

 To adjust the precedence and override the QoS profile on the WLAN for WebEx, an Application Visibility and Control (AVC) profile needs to be created for WebEx. AVC profiles allow for the identification and prioritization of specific applications over the wireless network, ensuring that critical applications like WebEx receive the necessary bandwidth and QoS treatment.  References  := CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

Cisco CMX Visitor Connect supports various social connectors for guest network login. The configurable social connectors include LinkedIn, Google+, and Facebook, but not Pinterest, Medium, or Myspace.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

The impact of BYOD that should be considered is the potential for increased phishing attacks. BYOD can lead to a greater variety of devices accessing the network, which may not all have the same level of security. This can increase the risk of phishing attacks as attackers may target personal devices that are used to access corporate resources, which might not be as secure as company-owned devices.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

On the Global Configuration page of a Wireless LAN Controller (WLC), for an Access Point (AP) to use IEEE 802.1X for authenticating to the wired infrastructure, it is necessary to configure a RADIUS shared secret. This secret will be used by the AP as part of its credentials when communicating with a RADIUS server during the authentication process.  References : (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

 FlexConnect is a wireless solution for branch office and remote office deployments. It allows APs to switch data traffic locally and perform client authentication locally when their connection to the controller is interrupted. For the scenario described, where a corporation is spread across different countries and wants to minimize delays while ensuring strong connectivity, FlexConnect with central switching enabled is appropriate. This configuration allows traffic to be switched locally at the AP, reducing the amount of traffic traversing the MPLS network to the central WLC, thus minimizing delays.  References  := CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

The FlexConnect AP Upgrade feature allows for a selective upgrade process within a FlexConnect group. By not setting any master APs, the WLC will automatically select one AP of each model with the lowest MAC address to receive the upgrade directly from the controller. This ensures that the upgrade is distributed efficiently across different AP models in the group without manual intervention.

References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

To segregate iOS devices to the guest SSID on VLAN 101 and distribute the rest of the clients on VLAN 102, creating a service template and enabling device classification are required. The service template specifies the VLAN assignment, while device classification identifies the type of device connecting to the network.  References : Cisco Catalyst 9800-80 WLC documentation on local policies and device classification.

 When configuring Cisco OfficeExtend Access Points (OEAPs), enabling NAT IP only for office-extend is necessary if the APs are behind a NAT device and need to communicate with the Wireless LAN Controller (WLC) using the internal IP management address. The command  config flexconnect office-extend nat-ip-only enable  allows the APs to discover and associate with the WLC when the management interface is configured with a NAT address.

When FlexConnect APs are in standalone mode due to losing connection to the WLC, they should still be able to serve clients if local switching and authentication are enabled. The issue described occurs because FlexConnect Local Authentication is disabled. With local auth enabled, the AP can authenticate clients directly, without needing to communicate with the WLC, thus allowing the SSID to remain advertised and clients to stay connected even if the WLC is unreachable.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

To ensure that only admins have access to network device management while allowing guest users to reach the web portal, access to Cisco ISE must be permitted on the pre-authentication ACL. This configuration allows guests to interact with the portal without granting them broader network access.

Graphical user interface, application, Word Description automatically generated

When an IT department needs to locate a stolen laptop using its MAC address, enabling Location History for Clients on the Mobility Services Engine (MSE) is crucial as it allows for historical tracking of client devices’ locations. Furthermore, Client location tracking must also be enabled on the MSE; this feature actively tracks and updates the current position of all client devices in real-time. Both settings are necessary to provide a comprehensive view of where the laptop has been over time and its current location within the wireless network’s coverage area.  References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

In a historic building where adding APs is challenging, the best approach to implement intrusion protection with a focus on on-channel attacks is to use APs in monitor mode with the Wireless Intrusion Prevention System (WIPS) submode. This setup allows the APs to dedicate their time to scanning the environment for threats without serving clients, which is suitable given the adequate coverage and the need to monitor for attacks.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

 The correct configuration for limiting Internet bandwidth for each guest client on a Cisco Catalyst 9800 WLC is through a  policy map . A policy map allows the creation of policies that can manage traffic within a network. By setting a bandwidth limit within the policy map, the WLC can enforce the required QoS for guest clients.  References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

AutoQoS simplifies the deployment of QoS by automating the process. On the Cisco Catalyst 9800 Series Wireless Controller, AutoQoS takes into account the characteristics of wireless traffic and helps in implementing a consistent QoS policy across both wired and wireless parts of the network.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

The command in question is typically used to configure the switch to interact with a RADIUS server for session tracking purposes. The RADIUS server keeps track of authenticated sessions, ensuring that they are still active and monitoring for any changes in status. This is crucial for maintaining network security and ensuring that only authorized users have access to network resources.

 In FlexConnect deployments with local switching, dynamic VLAN assignments are facilitated by Cisco ISE through the use of specific RADIUS attributes. The Tunnel-Private-Group-ID attribute is essential for communicating the VLAN ID to the access point, which then applies it to the wireless client after successful authentication.

When a wireless controller is configured to authenticate clients against Microsoft Active Directory using PEAP (Protected Extensible Authentication Protocol), it uses RADIUS (Remote Authentication Dial-In User Service) as the protocol to communicate with the authentication server. RADIUS is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service.

The feature that must be enabled to ignore non-802.11 interference is “Avoid Persistent Non-WiFi Interference.” This setting allows the Radio Resource Management (RRM) to not react to non-802.11 noise and interference, which can be crucial in environments where such interference is common but does not significantly impact wireless performance. By enabling this feature, RRM will not change the channel in response to non-IEEE 802.11 interferers, thus maintaining a stable channel plan.  References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

When performing a Cisco Hyperlocation accuracy test, the relevant parameters include the X, Y real location and the client MAC address. The X, Y coordinates provide the actual location data needed for the test, while the client MAC address identifies the specific device being located.

 In a self-registration setup for guest/BYOD devices, when an employee tries to connect multiple devices simultaneously, the system allows the registration of all devices. However, it restricts the active connection to only one device at a time. This ensures that network resources are not overburdened by a single user connecting multiple devices.  References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

For optimal voice over WLAN performance with a Cisco 8821 wireless phone, the Cisco recommended configuration is to set the switch port to access mode and trust the DSCP markings. This ensures that voice traffic is appropriately prioritized in the network, providing better quality of service for voice communications.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

Protocol Independent Multicast (PIM) sparse mode and dense mode are two different multicast routing mechanisms. Sparse mode uses distribution trees and is designed for networks where multicast groups are sparsely distributed across the network, minimizing unnecessary traffic. In contrast, dense mode floods the network with multicast traffic and then prunes back the branches where there are no interested receivers, which can lead to inefficient use of bandwidth.  References  := CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

The configuration that must be applied in the RADIUS Authentication Settings section from the ISE Network Device page when clients are able to authenticate successfully but the ISE policies designed to place them on different interfaces are not working is to change the CoA Port. The CoA (Change of Authorization) port is used by ISE to send messages to the network device to apply different policies post-authentication. If the CoA port is not correctly configured, the network device will not receive or act upon these messages, resulting in clients not being placed on the correct interfaces as per ISE policies.  References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

To enable VLAN tagging for wireless Identity-Based Networking on a WLAN, an engineer must enable AAA override, which allows for dynamic VLAN assignment. Additionally, the RADIUS server attributes need to be updated to include tunnel type 64, medium type 65, and tunnel private group type 81, which are necessary for VLAN tagging information.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

The issue is likely caused by the CPU ACL on the controller, which is blocking HTTP/HTTPS traffic from the guest clients. When a WLAN with Web Authentication is used, the wireless client’s browser is redirected to a web page for authentication. If the CPU ACL is configured to only allow controller web management traffic from the IT subnet, it may inadvertently block the necessary HTTP/HTTPS traffic for the Web Authentication process, leading to a timeout on the wireless client browser.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, specifically the sections discussing CPU ACLs and their impact on network traffic.

Local EAP (Extensible Authentication Protocol) allows wireless LAN controllers to directly authenticate clients using an internal database, which can be useful when external RADIUS servers are unreachable. By enabling local EAP, client devices can still connect to wireless networks even if communication with RADIUS servers fails, ensuring continuous network access for users.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

 To connect a Workgroup Bridge (WGB) to a wireless network and authenticate its certificate against a RADIUS server like ISE, the following steps are necessary:

A. Configure the certificate, WLAN, and radio interface on WGB : This is essential because the WGB needs to have the correct certificate to present to the RADIUS server for authentication. Additionally, the WLAN and radio interface must be configured to ensure proper communication with the wireless network.

E. Configure WGB as a network device in ISE : By configuring the WGB as a network device within ISE, it becomes a recognized entity that can be authenticated and authorized accordingly.

F. Configure a policy on ISE to allow devices to connect that validate the certificate : This step ensures that only devices with a validated certificate, such as the WGB, can connect to the network, enhancing security.

To ensure reliable streaming of video content on the wireless network between Cisco FlexConnect APs, Multicast Direct must be enabled. This feature allows for efficient multicast traffic delivery by converting multicast streams into unicast streams for each client, which guarantees delivery even in environments where reliable multicast is not feasible.  References  := CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

If the Cisco 5520 Series Wireless LAN Controller is no longer manageable via the network after implementing a CPU ACL, permit statements must be added to the top of the ACL in both directions (A). These statements should specify the network from which management is allowed and the virtual interface of the controller to ensure proper management access.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

 In a distributed deployment of Cisco ISE, profiling services are configured on Policy Services Nodes (PSNs). These nodes handle all context-based access control, including profiling services.

With the implementation of a BYOD policy, the security director should be concerned about malware and lost and stolen devices. Malware can compromise the corporate network if infected devices connect to it. Lost and stolen devices pose a risk of unauthorized access to corporate data and resources, potentially leading to data breaches.  References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

The issue described indicates a problem with the 802.1X authentication policy on the authenticator, which is typically the wireless controller or access point. Even though the CA certificate is correctly installed on the laptop, if the authenticator’s policy is incorrectly configured or does not match the required settings for the corporate network, the user’s authentication attempts will fail. It is essential to review and correct the 802.1X policy settings on the authenticator to resolve this issue.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

When an engineer enables CPU ACLs on a Cisco device through Security > Access Control Lists > CPU Access Control Lists menu, this change applies immediately to both wireless and wired traffic directed towards the CPU of the device. This includes all management traffic destined for control plane services within the device itself, providing an additional layer of security against potential threats.  References : (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

 Application Visibility and Control (AVC) profiles in AireOS controllers allow the identification and management of bandwidth consumption by different applications. By using AVC, administrators can set policies to prioritize or restrict bandwidth for specific applications, thus ensuring that critical services like voice and video are not adversely affected by bandwidth-heavy programs.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

The configuration required is to trust the DSCP (Differentiated Services Code Point) on the controller switch port. This ensures that the voice traffic’s class of service is maintained throughout the network. By trusting DSCP, the switch will preserve the DSCP value set by the wireless LAN controller, which is responsible for marking the voice packets.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

 Cisco DNA Center is likely ignoring the interference detected by the AP because it includes only Cisco CleanAir interferers in the AP health score (option C), and the interference is less than or equal to 30% on the 5 GHz radio (option D). Cisco DNA Center’s AP health score algorithm may not consider interference that falls below a certain threshold or interference that is not identified as a CleanAir event.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, particularly the chapters on Cisco DNA Center and CleanAir technology.

An ACL configured for BYOD clients to redirect to a guest portal must allow access to the RADIUS server and Cisco ISE. The RADIUS server is crucial for authentication services, a core component of network access control for BYOD. Cisco ISE integrates with the network infrastructure to provide comprehensive security, including guest access management, thus its accessibility is essential for the redirection process to function correctly.  References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

The Platinum QoS marking is typically used for the highest-priority traffic, such as voice and video. Given the requirement for a high average bitrate for the video application, Platinum would be the appropriate QoS marking to ensure the necessary bandwidth and priority on the WLAN.  References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

The Cisco Aironet 1800s Active Sensor is designed to work with Cisco DNA Center. It is a compact, flexible sensor that provides insights into the wireless network’s health and is used for proactive monitoring and troubleshooting.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, which includes information on Cisco DNA Center and compatible AP models.

In a distributed wireless deployment model, the traffic can either be switched locally or sent back to the controller. For the corporate WLAN “Corp-401266017”, it is essential that the traffic goes through the controllers in the data center to access the file servers securely. Therefore, local switching should be disabled for this WLAN. Conversely, for the guest WLAN “Guest-19283746”, the requirement is to use the local Internet line. Enabling local switching for this WLAN allows the traffic to bypass the controller and use the local internet, reducing latency and potentially providing a better user experience for guests.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, specifically the sections discussing WLAN traffic forwarding and local switching options.

 When a Cisco Wireless LAN Controller (WLC) is added to Cisco ISE as a network device for authentication purposes, it is crucial to verify the shared secret configured within the network device settings. The shared secret is used to secure communication between the WLC and ISE, ensuring that the authentication messages are encrypted and authenticated. If the shared secret does not match on both the WLC and ISE, the authentication will fail.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

 The issue described occurs when the  fallback  feature is  disabled  on the Cisco AireOS controller. When fallback is disabled, the controller does not attempt to reconnect to the primary TACACS+ server after it becomes available again following a failure. Instead, it continues to use the secondary server until it fails or the controller is rebooted. Enabling fallback would allow the controller to periodically attempt to reconnect to the primary server.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

In this scenario where branch wireless users can still associate locally but cannot access head office services due to WAN downtime indicates that Cisco FlexConnect is likely in use. The correct elements are: A - authentication-local/switch-local: This means that client authentication and data switching are happening locally at the branch. E - standalone mode: With WAN down, FlexConnect APs operate in standalone mode allowing clients to associate even without connectivity back to WLC. F - WEB authentication: This could be used as an authentication method regardless of WAN state since it’s processed locally at AP level.  References  := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

 If all APs are receiving multicast traffic instead of only those that need it, it indicates that Multicast Internet Group Management Protocol (IGMP) snooping is not enabled. IGMP snooping is a feature that allows a network switch to listen to IGMP network traffic and ensure that multicast packets are only sent to the ports associated with interested receivers, thus preventing unnecessary traffic on the network.  References  := CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

To separate different types of client authentication on a Cisco ISE deployment, policy sets and policy groups can be used. Policy sets allow the creation of policies based on conditions such as device type, while policy groups categorize clients for the application of specific policies.  References : Cisco ISE documentation on policy sets and policy groups will have detailed information.

To create an account for CLI access to an access point for troubleshooting, the WLC must be configured to allow user access with the capability to make changes. The ReadWrite User Access Mode enables an engineer to have full read and write access to the AP’s configuration via the CLI, which is necessary for performing troubleshooting tasks.  References : CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

The output observed in Prime Infrastructure suggests that there is at least one strong interferer impacting connectivity at this site. This conclusion is drawn from observing areas marked with intense red coloring indicating high levels of RF interference which could degrade wireless performance significantly if not addressed. 

 A single SSID method satisfies the requirements for a BYOD policy that includes onboarding unknown machines, scalability, and low overhead on the wireless network. It simplifies network access for users and reduces overhead by minimizing broadcast traffic associated with multiple SSIDs.

The true statement about the VideoStream/Multicast Direct feature is that each VideoStream client acknowledges receiving a video IP multicast stream. This feature enhances the reliability of IP multicast traffic over WLAN by using client acknowledgments to ensure delivery.

References  := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )