Exam 300-430 topic 1 question 197 discussion

A. Configure the internal WLC IP address on the OEAPs. Explanation: OEAPs are designed to connect to the internal IP address of the WLC, not the public IP address. Even though NAT is configured to map the public IP to the internal WLC IP, the OEAPs must be configured with the internal WLC IP address to establish a connection. Why not the other options? B. Create an ACL in WLC to accept the OEAPs: This is not necessary unless there are specific access restrictions, and it does not address the core issue of IP address configuration. C. Enable NAT on the WLC to configure the public IP address: NAT is already configured on the security team's device, and the WLC does not need to handle NAT. D. Configure the public WLC IP address on the home router: This is not required, as the OEAPs should be configured with the internal WLC IP address. Thus, the correct action is to configure the internal WLC IP address on the OEAPs.

C: If your WLC does not have a publicly reachable IP then you need to have NAT IP where controller management IP is reachable. In that case you need to enable NAT on WLC management interface & map NAT IP on to it

Cisco OEAPs are designed to work behind a router or other gateway device that is using network address translation (NAT). NAT allows a device, such as a router, to act as an agent between the Internet (public) and a personal network (private), enabling an entire group of computers to be represented by a single IP address. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-7/config-guide/b_cg87/m_configuring_officeextend_access_points.html#:~:text=Cisco%20OEAPs%20are,single%20IP%20address.

wouldnt this be B? A really badly worded question, with all answers being a bit odd

C is correct

Enabling NAT on the WLC to configure the public IP address would not resolve the issue because the security team has already configured NAT with a public IP address that points to the internal WLC IP address. Therefore, option C would not be the correct solution in this case.

C is the correct

C is the correct answer.

C. You need to select the management interface on the WLC and click the NAT checkbox. Then enter the public NAT IP. In this case it would be the public NAT IP that the security team created. D. is incorrect. The users home internet router does not need any configuration.