300-425 Question 191
Select 3An enterprise wants to enable client profiling to enhance network access control and policy enforcement. They are using a Cisco WLC and Cisco ISE in their network. Which steps are required to correctly configure client profiling on both devices?
- A
Enable RADIUS profiling on the Cisco WLC and ensure it is pointing to the Cisco ISE.
- B
Configure the Cisco ISE to use the DHCP probe for client profiling.
- C
Enable client profiling globally on the Cisco WLC.
- D
Manually assign device profiles to clients on the Cisco WLC.
- E
Ensure that the Cisco ISE is configured as a RADIUS server on the Cisco WLC.
Show answer and explanation
Correct answers: A, B, E
Explanation
Client profiling in a Cisco WLC and ISE integration requires enabling RADIUS profiling on the WLC, configuring the ISE to use relevant probes (e.g., DHCP) to collect profiling data, and ensuring that the WLC can communicate with the ISE as a RADIUS server. These configurations allow the ISE to analyze client behavior and assign appropriate device profiles automatically. Manual device profile assignment or enabling a global client profiling setting on the WLC is unnecessary.
- A. Correct.
Correct: Enabling RADIUS profiling on the Cisco WLC allows client profiling data to be sent to Cisco ISE for processing.
- B. Correct.
Correct: The DHCP probe is a key mechanism for Cisco ISE to gather profiling data based on DHCP requests from clients.
- C. Incorrect.
Incorrect: Client profiling is not a feature that must be globally enabled on the WLC; it depends on specific configurations such as RADIUS profiling and DHCP snooping.
- D. Incorrect.
Incorrect: Device profiles are automatically assigned by Cisco ISE based on the profiling data collected; manual assignment is not required in this context.
- E. Correct.
Correct: Cisco ISE must be added as a RADIUS server on the WLC to facilitate communication and profiling data exchange.