300-425 Question 194
Select 4An organization has deployed a Cisco Wireless LAN Controller (WLC) integrated with Cisco Identity Services Engine (ISE) to implement client profiling. The network administrator notices that certain devices, such as printers, are not being classified correctly. What steps should the administrator take to resolve this issue?
- A
Verify that DHCP and HTTP profiling are enabled on the WLC.
- B
Ensure that the WLC is configured to forward RADIUS Accounting messages to ISE.
- C
Update the endpoint profiling policies in ISE to include custom attributes for printers.
- D
Increase the timeout period for 802.1X authentication on the WLC.
- E
Check if device profiling is enabled on the specific WLAN SSID.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Client profiling on Cisco WLC and ISE requires proper configuration of profiling mechanisms such as DHCP and HTTP, as well as ensuring that profiling data is sent to ISE through RADIUS Accounting messages. Additionally, updating endpoint profiling policies in ISE and enabling profiling on the WLAN SSID are necessary steps to ensure accurate classification of devices. Increasing the 802.1X authentication timeout does not contribute to profiling and is not relevant to resolving this issue.
- A. Correct.
Enabling DHCP and HTTP profiling on the WLC allows it to capture device information such as DHCP options and HTTP User-Agent strings, which are critical for accurate client profiling.
- B. Correct.
Forwarding RADIUS Accounting messages to ISE provides detailed information about client sessions, which helps ISE build a complete profile of the device.
- C. Correct.
Updating the endpoint profiling policies in ISE to include custom attributes ensures that devices like printers are correctly categorized based on unique characteristics.
- D. Incorrect.
Increasing the timeout period for 802.1X authentication on the WLC is unrelated to client profiling and will not address the issue of incorrect device classification.
- E. Correct.
Device profiling must be explicitly enabled on the specific WLAN SSID to ensure that relevant profiling data is captured and analyzed.