300-425 Question 157
Select 3An enterprise network administrator is configuring a captive portal for guest Wi-Fi access in a large office building. The company wants to ensure that guests are redirected to a login page where they must accept terms and conditions before gaining internet access. Additionally, the administrator wants to ensure that the captive portal integrates seamlessly with an external RADIUS server for user authentication. Which configuration steps must the administrator complete to meet these requirements?
- A
Configure the wireless LAN (WLAN) to enable Layer 3 security and select the captive portal option.
- B
Integrate the captive portal with the external RADIUS server for authentication and accounting.
- C
Set the client redirection URL to point to an internal DNS server for login page hosting.
- D
Enable 802.1X on the WLAN to enforce authentication through the captive portal.
- E
Ensure the DHCP server is configured to provide valid IP addresses and DNS information to clients.
Show answer and explanation
Correct answers: A, B, E
Explanation
To configure a captive portal with RADIUS integration, the administrator must first enable Layer 3 security with the captive portal option to redirect clients to the login page. Integration with the RADIUS server fulfills the requirement for external authentication and accounting. Proper DHCP configuration ensures clients can obtain IP addresses and DNS information to access the portal and internet. Redirecting to an internal DNS server and enabling 802.1X are not relevant to this scenario.
- A. Correct.
Correct: Enabling Layer 3 security and selecting the captive portal option is required to enforce the redirection of clients to the login page.
- B. Correct.
Correct: Integrating the captive portal with the RADIUS server allows for centralized authentication and accounting, which aligns with the requirement.
- C. Incorrect.
Incorrect: The login page can typically be hosted on the controller or an external web server, but redirecting clients to an internal DNS server is not a standard procedure for captive portals.
- D. Incorrect.
Incorrect: Enabling 802.1X is not required for captive portals; instead, Layer 3 security mechanisms are typically used to redirect unauthenticated clients to the portal.
- E. Correct.
Correct: Proper DHCP configuration is essential to ensure that clients can access the captive portal and the internet after authentication.