ExamGecko
Question list
Search
Search

Related questions











Question 239 - 300-715 discussion

Report
Export

A network security administrator needs a web authentication configuration when a guest user connects to the network with a wireless connection using these steps:

. An initial MAB request is sent to the Cisco ISE node.

. Cisco ISE responds with a URL redirection authorization profile if the user's MAC address is unknown in the endpoint identity store.

. The URL redirection presents the user with an AUP acceptance page when the user attempts to go to any URL.

Which authentication must the administrator configure on Cisco ISE?

A.

device registration WebAuth

Answers
A.

device registration WebAuth

B.

WLC with local WebAuth

Answers
B.

WLC with local WebAuth

C.

wired NAD with local WebAuth

Answers
C.

wired NAD with local WebAuth

D.

NAD with central WebAuth

Answers
D.

NAD with central WebAuth

Suggested answer: D

Explanation:

Central Web Authentication (CWA) is a feature that allows the network access device (NAD) to redirect the web traffic of a guest user to a web portal hosted by Cisco ISE1. The NAD acts as a proxy between the guest user and the ISE node, and performs the authentication and authorization based on the RADIUS attributes returned by ISE1. To configure CWA on ISE, the administrator must create an authorization profile that contains the URL redirection attribute and assign it to the guest user1. The other options are not correct because they do not use CWA. Device registration WebAuth is a feature that allows users to register their devices on ISE before they can access the network2. WLC with local WebAuth is a feature that allows the wireless LAN controller (WLC) to host the web portal and authenticate the guest user locally3. Wired NAD with local WebAuth is a feature that allows the switch to host the web portal and authenticate the guest user locally

asked 07/10/2024
Bulu padhee
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first