300-425 Question 201
Select 3An enterprise network administrator is configuring a Guest Wi-Fi network using a Central Web Authentication (CWA) solution with Cisco ISE. The goal is to allow guest users to self-register, receive login credentials via email, and access the network after authentication. Which of the following actions are required to ensure a successful CWA implementation?
- A
Configure a redirect ACL on the WLAN to allow unauthenticated users to reach the ISE portal.
- B
Enable Layer 3 Security with WPA2-Enterprise on the guest SSID.
- C
Set up a self-registration portal on Cisco ISE and link it to the guest WLAN.
- D
Configure the WLC to redirect HTTP/HTTPS traffic to the Cisco ISE portal.
- E
Assign guest users to a restricted VLAN after authentication.
Show answer and explanation
Correct answers: A, C, D
Explanation
Central Web Authentication (CWA) using Cisco ISE involves redirecting unauthenticated users from the guest SSID to an ISE-hosted portal for authentication and self-registration. Key steps include configuring a redirect ACL, setting up a self-registration portal on ISE, and enabling traffic redirection on the WLC. WPA2-Enterprise is not applicable for guest networks in this scenario, and while VLAN assignment may be done post-authentication, it is not a requirement for CWA implementation.
- A. Correct.
Correct: The redirect ACL is required to allow unauthenticated users to access the Cisco ISE portal for self-registration and authentication.
- B. Incorrect.
Incorrect: WPA2-Enterprise is not typically used for guest networks; instead, open authentication with redirection to a CWA portal is used.
- C. Correct.
Correct: A self-registration portal must be configured on Cisco ISE to collect guest user details and generate login credentials.
- D. Correct.
Correct: HTTP/HTTPS traffic needs to be redirected to the Cisco ISE portal for user authentication and registration.
- E. Incorrect.
Incorrect: While assigning users to a restricted VLAN is a good practice, it is not a requirement for the CWA implementation process itself.