Preventing Wireless Client Association with Autonomous AP | CCIE Wireless Written Exam | Cisco

Preventing a Wireless Client with a MAC Address of 00:40:96:a5:b5:d4 from Associating with an Autonomous AP

Question

You want to prevent a wireless client with a MAC address of 00:40:96:a5:b5:d4 from associating with an autonomous AP.

Which commands do you use on the autonomous AP?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

C.

The correct command to prevent a wireless client with a specific MAC address from associating with an autonomous AP is A. dot11 association mac-list 700 access-list 700 deny 0040.96a5.b5d4 ffff.ffff.ffff.

Explanation:

The "dot11 association mac-list" command is used to configure a list of MAC addresses that are allowed or denied access to the AP. The "access-list" command is used to define the list of MAC addresses to be allowed or denied.

The MAC address in question is 00:40:96:a5:b5:d4, and the command must deny this MAC address from associating with the autonomous AP.

Option A uses the correct syntax and configuration to deny access to the MAC address. The access-list 700 is defined with the "deny" keyword, and the MAC address is specified with the correct hexadecimal format. The "ffff.ffff.ffff" argument is used to specify that the entire MAC address should be denied.

Option B is incorrect because it uses the "permit" keyword to specify the default allow rule for all MAC addresses. Also, the MAC address in question should be denied with the "deny" keyword.

Option C is incorrect because it uses the "permit" keyword to specify the default allow rule for all MAC addresses. Also, the "0000.0000.0000" argument is used incorrectly and should be replaced with "ffff.ffff.ffff" to deny the entire MAC address.

Option D is incorrect because it uses the "permit" keyword to specify the default allow rule for all MAC addresses. Also, the "ffff.ffff.ffff" argument is used incorrectly and should be replaced with "0000.0000.0000" to allow the entire MAC address.

Therefore, the correct answer is A. dot11 association mac-list 700 access-list 700 deny 0040.96a5.b5d4 ffff.ffff.ffff.