Guests are anchored on a controller in the DMZ. An engineer moves the guest VLAN onto the campus switch so the anchor is no longer in the path. Guests can now reach campus servers. What was bypassed?
Select an answer to reveal the explanation.
Short Explanation
The anchor in the DMZ was the wall between guests and the campus. You moved the guest VLAN onto the campus switch and walked around that wall. Put the guest path back through the anchor.
Full Explanation
A guest anchor finishes the guest session in the DMZ so guest traffic does not enter the campus network. Moving the guest VLAN onto the campus switch takes the anchor out of the path, which is why guests can now reach campus servers. An RF profile does not route guests. A beacon does not tag frames into the DMZ. The country code does not block servers. Guest traffic is anchored in the DMZ. An engineer moves the guest VLAN onto the campus switch, so guests are no longer isolated in the DMZ. Check one live client after the change and leave the rest of the floor alone until that client matches the result you expected. Confirm the symptom on the next attempt before changing anything else. Confirm the symptom on the next attempt before changing anything else. Exam caveat: the anchor only isolates guests if the DMZ firewall also denies the campus. An anchor that sits in the DMZ and is allowed to route everywhere is not isolation. Operational check: put the guest VLAN back on the anchor, join a test guest, and confirm a campus server does not respond.