300-715 · Question #77
Which scenario does not support Cisco ISE guest services?
The correct answer is B. wireless LAN controller with central WebAuth. Cisco ISE guest services do not support central web authentication (CWA) when the access device is a wireless LAN controller (WLC), as CWA is designed for wired NADs and is not compatible with WLC's typical captive portal flows.
Question
Which scenario does not support Cisco ISE guest services?
Options
- Awired NAD with local WebAuth
- Bwireless LAN controller with central WebAuth
- Cwireless LAN controller with local WebAuth
- Dwired NAD with central WebAuth
How the community answered
(37 responses)- A5% (2)
- B68% (25)
- C19% (7)
- D8% (3)
Why each option
Cisco ISE guest services do not support central web authentication (CWA) when the access device is a wireless LAN controller (WLC), as CWA is designed for wired NADs and is not compatible with WLC's typical captive portal flows.
Wired NADs with local WebAuth are supported for ISE guest services.
Cisco ISE's Central Web Authentication (CWA) is a redirection method primarily designed for wired Network Access Devices (NADs). Wireless LAN Controllers (WLCs) use their own internal captive portal mechanisms or local web authentication, and they do not directly support the CWA flow from ISE for guest services.
Wireless LAN controllers support local WebAuth, where the WLC redirects to the ISE portal for authentication, which is a common deployment for guest services.
Wired NADs with central WebAuth are fully supported, as ISE is designed to handle the redirection and authentication for wired guest access.
Concept tested: Cisco ISE Guest services WebAuth compatibility
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_01000.html#concept_E77626F9A23E4C1897C313C1C7D61957
Topics
Community Discussion
No community discussion yet for this question.