300-715 Question #115: Real Exam Question with Answer & Explanation

Question

What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?

Options

• ASet the NAC State option to SNMP NAC.
• BSet the NAC State option to RADIUS NAC.
• CUse the radius-server vsa send authentication command.
• DUse the ip access-group webauth in command.

Explanation

To configure Central Web Authentication (CWA) using Cisco ISE and a WLC, the NAC State option on the WLC must be set to RADIUS NAC.

Common mistakes.

• A. Setting the NAC State option to SNMP NAC (Network Access Control) uses SNMP for communication, which is not the mechanism for Central Web Authentication with ISE; CWA relies on RADIUS.
• C. The radius-server vsa send authentication command is typically used on a switch/router to send vendor-specific attributes (VSAs) during authentication, but it is not the primary configuration for CWA on a WLC itself.
• D. The ip access-group webauth in command is used for applying access lists on a wired network device for web authentication, not the primary configuration for CWA on a WLC.

Concept tested. Cisco ISE - WLC Central Web Authentication Configuration

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ise_admin_guide_3_0/b_ise_admin_guide_30_chapter_0100.html#concept_067C1F033F534F40BC4522B0054F6BA6

No community discussion yet for this question.