nerdexam
Huawei

H12-323_V2.0 · Question #143

When an enterprise deploys a WLAN network, user access authentication uses Portal authentication. After successful authentication, the network can be reconnected within a certain period of time…

The correct answer is C. MAC-first Portal authentication. MAC-first Portal authentication works by recording a device's MAC address upon successful Portal login; on subsequent connection attempts within the validity window, the system checks the MAC address first - and if recognized, grants access without prompting for Portal…

WLAN Security Deep Dive

Question

When an enterprise deploys a WLAN network, user access authentication uses Portal authentication. After successful authentication, the network can be reconnected within a certain period of time without entering the user name and password to re-authenticate the portal. Which of the following authentication methods can the enterprise engineer choose to deploy?

Options

  • AExternal Portal server authentication
  • BMAC authentication with Portal server
  • CMAC-first Portal authentication
  • DBuilt-in Portal server authentication

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    17% (6)
  • C
    74% (26)
  • D
    6% (2)

Explanation

MAC-first Portal authentication works by recording a device's MAC address upon successful Portal login; on subsequent connection attempts within the validity window, the system checks the MAC address first - and if recognized, grants access without prompting for Portal credentials again, which is exactly the behavior described. Option A (External Portal server) simply offloads the Portal page to a third-party server but provides no mechanism to skip re-authentication on reconnect. Option B (MAC authentication with Portal server) uses MAC address as the primary authentication method with Portal as a supplement - it's MAC-driven, not Portal-driven with MAC as a bypass shortcut. Option D (Built-in Portal server) only describes where the Portal server is hosted (on the access device itself), not how re-authentication is handled.

Memory tip: Think of the "MAC-first" name literally - the system checks the MAC address first, and if it matches a previously authenticated user, it skips the Portal form entirely; the word order tells you the logic order.

Topics

#MAC-first portal#portal authentication#re-authentication#session persistence

Community Discussion

No community discussion yet for this question.

Full H12-323_V2.0 Practice