300-715 · Question #340
A network engineer is configuring a Cisco WLC in order to find out more information about the devices that are connecting. This information must be sent to Cisco ISE to be used in authorization…
The correct answer is D. DHCP. To gather detailed information about connecting devices from a Cisco WLC and send it to Cisco ISE for profiling and authorization policies, the engineer must configure the DHCP profiling mechanism on the WLC. The WLC can extract DHCP options from client requests and forward…
Question
A network engineer is configuring a Cisco WLC in order to find out more information about the devices that are connecting. This information must be sent to Cisco ISE to be used in authorization policies. Which profiling mechanism must be configured in the Cisco WLC to accomplish this task?
Options
- ASNMP
- BCDP
- CDNS
- DDHCP
How the community answered
(38 responses)- A8% (3)
- B3% (1)
- C13% (5)
- D76% (29)
Why each option
To gather detailed information about connecting devices from a Cisco WLC and send it to Cisco ISE for profiling and authorization policies, the engineer must configure the DHCP profiling mechanism on the WLC. The WLC can extract DHCP options from client requests and forward them to ISE for device classification.
SNMP is used for monitoring network devices or for ISE to query devices, but it is not the primary mechanism a WLC uses to gather client device details for ISE profiling.
CDP (Cisco Discovery Protocol) is used for discovering neighboring Cisco devices, not for providing detailed client profiling information to ISE from a WLC.
DNS resolution can be used by ISE for hostname information, but it is not a direct profiling mechanism configured *on the WLC* to extract detailed client device attributes for ISE.
The DHCP profiling mechanism configured on a Cisco WLC allows the controller to capture and forward DHCP options (like DHCP Option 12 for hostname, Option 60 for vendor class identifier) from connected clients to Cisco ISE. This rich information is then used by ISE's profiling service to accurately identify and classify endpoint devices, which can subsequently be used in authorization policies.
Concept tested: Cisco WLC DHCP profiling for ISE
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_guide_31/m_manage_endpoint_profiling.html#concept_C81878F590F845C3B353995BB6138F9B
Topics
Community Discussion
No community discussion yet for this question.