nerdexam
Cisco

300-715 · Question #86

An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?

The correct answer is B. Create the redirect ACL on the WLC and add it to the Cisco ISE policy. For Cisco ISE guest services with web authentication, the redirect ACL must be created on the WLC and then referenced in the Cisco ISE policy.

Web Auth and Guest Services

Question

An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?

Options

  • ACreate the redirect ACL on the WLC and add it to the WLC policy
  • BCreate the redirect ACL on the WLC and add it to the Cisco ISE policy.
  • CCreate the redirect ACL on Cisco ISE and add it to the WLC policy
  • DCreate the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy

How the community answered

(61 responses)
  • A
    3% (2)
  • B
    89% (54)
  • C
    7% (4)
  • D
    2% (1)

Why each option

For Cisco ISE guest services with web authentication, the redirect ACL must be created on the WLC and then referenced in the Cisco ISE policy.

ACreate the redirect ACL on the WLC and add it to the WLC policy

Adding the ACL to a WLC policy is not the standard way to integrate it with ISE for guest redirection; ISE policies reference the ACL name on the WLC.

BCreate the redirect ACL on the WLC and add it to the Cisco ISE policy.Correct

For guest services with web authentication, the redirect ACL must be created and applied on the Wireless LAN Controller (WLC) to intercept traffic and redirect users to the guest portal. This WLC-side ACL is then referenced by a Cisco ISE authorization policy that dictates its application to specific user sessions.

CCreate the redirect ACL on Cisco ISE and add it to the WLC policy

Redirect ACLs are configured on the network access device (WLC) that performs the redirection, not directly on Cisco ISE itself.

DCreate the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy

Redirect ACLs are configured on the WLC, and while ISE policies reference them, the ACL itself isn't created on Cisco ISE.

Concept tested: Cisco ISE Guest Access Redirect ACL

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_3_1/m_guest_access.html

Topics

#Cisco ISE#Guest Services#WLC#Redirect ACL

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice