Refer to the exhibit. An engineer must configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network. The Cisco Wireless LAN Controller and the Cisco ISE were configured, and the RADIUS-related ports were opened on the firewall. Which additional port must be opened to allow communication between the Cisco Wireless LAN Controller and Cisco ISE?
Answer(s): D
In a Central Web Authentication (CWA) setup, Cisco Wireless LAN Controller (WLC) interacts with Cisco ISE to redirect guest users to a web portal for authentication. The additional port required for this communication is TCP 8443, which is used by Cisco ISE for the web portal redirection and communication with the WLC.
The Cisco Wireless LAN Controller and guest portal must be set up in Cisco ISE. These configurations were performed:configured all the required Cisco Wireless LAN Controller configurations added the wireless controller to Cisco ISE network devicescreated an endpoint identity group configured credentials to be sent by email configured the SMTP serverconfigured an authorization profile with redirection to the guest portal and redirected the access control list configured an authentication policy for MAB userscreated an authorization policyWhich two components must be created to complete the configuration? (Choose two.)
Answer(s): D,E
In a Cisco ISE guest access deployment, several components must be configured to provide a complete guest experience. In this scenario, many of the necessary configurations have already been completed (such as network device settings, SMTP server configuration, and redirection via the authorization profile). However, to fully enable guest access via a Cisco Wireless LAN Controller with a guest portal, two additional components must be created:Self-Registered Guest Portal:Since the configuration already includes settings for sending credentials by email and redirection to a guest portal, the environment is set up for self-service guest registration. The self-registered guest portal is the web interface where guests can register themselves to obtain access. Without this portal, guests would not have a method to register and receive their credentials.Guest Type:Cisco ISE uses guest types to categorize and manage different kinds of guest accounts (such as contractors, visitors, etc.). Creating a guest type is essential because it defines the attributes and policies that apply to the guest sessions. This classification helps enforce the proper access controls and facilitates reporting.
A network engineer must define a Redirect ACL on a Cisco Wireless LAN Controller. The ACL must force unknown users to authenticate via a captive portal located on a Cisco ISE PSN on another network segment separated by a firewall. Which port must be permitted in the firewall to allow traffic between the Cisco WirelessLAN Controller and Cisco ISE?
Answer(s): B
When configuring a Redirect ACL on a Cisco Wireless LAN Controller (WLC) to force unknown users to authenticate via a captive portal on a Cisco ISE PSN, the communication between the WLC and the ISE PSN for web authentication is conducted over HTTPS. Cisco ISE uses TCP port 8443 for its web-based captive portal redirection services.Allowing TCP port 8443 through the firewall ensures that the redirection traffic from the WLC reaches the ISE PSN without interruption. The other ports listed are associated with RADIUS (UDP ports 1812 for authentication and 1645 for legacy RADIUS) or a non-standard port (TCP 8445), none of which are used for the captive portal redirection.
An engineer is deploying a new guest WLAN for a company. The company wants this WLAN to use a sponsored guest portal for secure guest access. The wireless LAN controller must direct the guests to a web page on Cisco ISE for authentication. Which type of authentication must be configured for the guest portal in Cisco ISE?
Answer(s): A
Central Web Authentication (CWA) must be configured for the guest portal in Cisco ISE. CWA allows the wireless LAN controller to redirect guest users to a web portal hosted on Cisco ISE for authentication, which is the standard approach for sponsored guest access.
Which default “guest type” is included with Cisco ISE?
The default "guest type" included with Cisco ISE is "guest." This guest type provides basic access permissions and is used for standard guest user provisioning out of the box.
Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-715 content, but please register or login to continue.