Explanation
+ From the output of WLC show interface summary, we learned that the WLC has four VLANs: 999, 14, 15 and 16. + From the show ap config general FlexAP1 output, we learned that FlexConnect AP has four VLANs: 10, 11, 12 and 13. Also the WLAN of FlexConnect AP is mapped to VLAN 10 (from the line WLAN
1: ...... 10 (AP-Specific)).
From the reference at:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise FlexConnect VLAN Central Switching Summary Traffic flow on WLANs configured for Local Switching when FlexConnect APs are in connected mode are asfollows:
+ If the VLAN is returned as one of the AAA attributes and that VLAN is not present in the FlexConnect APdatabase, traffic will switch centrally and the client is assigned this VLAN/Interface returned from the AAAserver provided that the VLAN exists on the WLC. (-> as VLAN 15 exists on the WLC so the client inconnected mode would be assigned this VLAN -> Answer 'When the AP is in connected mode, the client will beplaced in VLAN 15' is correct) + If the VLAN is returned as one of the AAA attributes and that VLAN is not present in the FlexConnect APdatabase, traffic will switch centrally. If that VLAN is also not present on the WLC, the client will be assigned aVLAN/Interface mapped to a WLAN on the WLC. + If the VLAN is returned as one of the AAA attributes and that VLAN is present in the FlexConnect APdatabase, traffic will switch locally. + If the VLAN is not returned from the AAA server, the client is assigned a WLAN mapped VLAN on thatFlexConnect AP and traffic is switched locally.
Traffic flow on WLANs configured for Local Switching when FlexConnect APs are in standalone mode are asfollows:
+ If the VLAN returned by the AAA server is not present in the FlexConnect AP database, the client will be puton a default VLAN (that is, a WLAN mapped VLAN on a FlexConnect AP) (-> Therefore answer 'While the APis in standalone mode, the client will be placed in VLAN 10' is correct). When the AP connects back, this clientis de-authenticated (-> Therefore answer 'When the AP transitions to connected mode, the client will be de-authenticated' is correct) and will switch traffic centrally.