CCNP Enterprise 300-430 Book

Mobile Device Management (MDM) integration with Cisco ISE increases security for lost devices by providing functions such as data wipe and jailbreak/root detection. Data wipe allows the remote erasure of sensitive information from lost devices, preventing unauthorized access. Jailbreak/root detection helps identify compromised devices that may bypass standard security measures, ensuring that they do not access network resources.

For central web authentication with Cisco ISE in a Cisco AireOS WLC environment using auto-anchor for the guest network, the foreign WLC must have UDP ports 1812 and 1813 open to ISE for RADIUS authentication and accounting. Additionally, a downloadable preauth ACL on ISE is required to define the permissions for the guest user before authentication, and a local preauth ACL on the WLC is needed to restrict or allow traffic prior to authentication. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, particularly the chapters on WLC configuration for guest access and integration with Cisco ISE for security and access control.

The correct command to configure the controller to update Cisco CMX every 5 seconds for rogue devices is “config nmsp notification interval rssi rogues 5”. NMSP (Network Mobility Services Protocol) is used by Cisco wireless controllers to manage and communicate with connected services such as Cisco CMX. The command structure “config nmsp notification interval” followed by the specific type of device or metric, in this case, ‘rssi rogues’, and the desired interval time ‘5’ seconds, sets the frequency of NMSP notifications for RSSI updates related to rogue devices.

References := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )

If the Cisco 5520 Series Wireless LAN Controller is no longer manageable via the network after implementing a CPU ACL, permit statements must be added to the top of the ACL in both directions (A). These statements should specify the network from which management is allowed and the virtual interface of the controller to ensure proper management access. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide