An engineer is deploying a new guest WLAN for a company. The company wants this WLAN to use a sponsored guest portal for secure guest access. The wireless LAN controller must direct the guests to a we

The correct answer is A. CWA. CWA (Central Web Authentication) is the correct method when the wireless LAN controller (WLC) is configured to redirect unauthenticated guests to a web portal hosted on Cisco ISE. In CWA, the WLC performs MAB first; ISE returns a redirect URL pointing to its guest portal, and the

Web Auth and Guest Services

Question

An engineer is deploying a new guest WLAN for a company. The company wants this WLAN to use a sponsored guest portal for secure guest access. The wireless LAN controller must direct the guests to a web page on Cisco ISE for authentication. Which type of authentication must be configured for the guest portal in Cisco ISE?

Options

ACWA
Bweb portal
CEWA
DDWA

How the community answered

(26 responses)

A
92% (24)
C
4% (1)
D
4% (1)

Explanation

CWA (Central Web Authentication) is the correct method when the wireless LAN controller (WLC) is configured to redirect unauthenticated guests to a web portal hosted on Cisco ISE. In CWA, the WLC performs MAB first; ISE returns a redirect URL pointing to its guest portal, and the WLC intercepts HTTP traffic from the guest and forwards them to that ISE-hosted portal page. The sponsored guest workflow then occurs on ISE. EWA (External Web Authentication, option C) hosts the web page on the WLC itself, not ISE. 'Web portal' (option B) is not a specific authentication type in this context. DWA (option D) is not a valid Cisco authentication type.

Topics

#Guest Access#Cisco ISE#Central Web Authentication (CWA)#Web Portal

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice