300-425 Question 203
Single answerAn organization wants to implement a Guest Wi-Fi network using Cisco ISE's Central Web Authentication (CWA) with a self-registration portal. The IT administrator has configured the WLC and ISE to redirect guest users to the self-registration portal for authentication. However, after connecting to the guest network, users are not redirected to the portal. Which configuration step is MOST likely missing or misconfigured?
- A
The WLC's ACL blocking unauthenticated user access to the Internet is not applied.
- B
The redirect ACL is not configured or is not applied on the WLC.
- C
The ISE Guest Portal is not enabled or published.
- D
The guest SSID is not configured for Layer 3 security with Web Authentication.
Show answer and explanation
Correct answer: B
Explanation
For Cisco ISE's CWA with a self-registration portal to function properly, the WLC must have a redirect ACL configured and applied. This ACL ensures that unauthenticated users are redirected to the ISE portal for authentication. If the redirect ACL is missing or misconfigured, users will not be redirected, causing the issue described in the question.
- A. Incorrect.
This would block unauthenticated users from accessing the Internet, but it is not responsible for redirecting users to the self-registration portal. The issue here relates to redirection, not Internet access control.
- B. Correct.
The redirect ACL specifies the traffic that needs to be intercepted and redirected to the ISE portal. If this is not configured or not applied, users will not be redirected to the portal, causing the described issue.
- C. Incorrect.
While the Guest Portal needs to be enabled and published, this is not the root cause of the specific issue described. If this were the issue, users would see an error page rather than no redirection at all.
- D. Incorrect.
Layer 3 security with Web Authentication is required for guest access, but the described issue is about the redirection to the self-registration portal. This configuration alone does not ensure proper redirection.