300-430 Question 209
Select 2An enterprise network is implementing a Guest Wi-Fi solution using Local Web Authentication (LWA). The IT team uses an external Cisco Identity Services Engine (ISE) server for authentication while the Wireless LAN Controller (WLC) handles web redirection. During testing, users report that they are not being redirected to the login portal when connecting to the Guest SSID. What could be the cause of this issue?
- A
The WLC does not have a pre-authentication ACL configured.
- B
The ISE server's RADIUS settings are not correctly configured on the WLC.
- C
The Guest SSID is configured to use WPA2-Enterprise instead of an open authentication method.
- D
The WLC is not configured with the correct virtual IP address (1.1.1.1) for web redirection.
- E
The ISE server's certificate is not trusted by the client device.
Show answer and explanation
Correct answers: A, D
Explanation
Local Web Authentication (LWA) relies on proper configuration of both the WLC and the external ISE server. The WLC must have a pre-authentication ACL to allow unauthenticated users to access the ISE portal, and the virtual IP address (commonly 1.1.1.1) must be configured for redirection. These are essential components for ensuring a seamless user redirection to the login portal.
- A. Correct.
Without a pre-authentication ACL, the WLC cannot allow users to access the ISE portal for login. This is a critical configuration for LWA.
- B. Incorrect.
While RADIUS settings are important for authentication, they do not directly affect the redirection to the web portal in an LWA setup.
- C. Incorrect.
LWA requires an open authentication method for the Guest SSID. Using WPA2-Enterprise for authentication would not align with the requirements of LWA.
- D. Correct.
The virtual IP address (1.1.1.1) is used by the WLC for web redirection. If this is not configured, users will not be redirected to the login portal.
- E. Incorrect.
Client trust of the ISE server's certificate is important for secure communication, but it does not directly impact web redirection in this scenario.