300-435 Question 297
Select 4An enterprise network administrator is designing a Guest Wi-Fi solution where guest users are redirected to an external portal for authentication. The administrator intends to leverage Cisco's External Captive Portal API to integrate with the external authentication system. Which of the following steps are required to successfully implement this solution?
- A
Develop a REST API-based external captive portal and host it on the external server.
- B
Configure the Cisco wireless LAN controller (WLC) to redirect unauthenticated users to the external portal URL.
- C
Use Cisco DNA Center to configure the external captive portal's API token and validate its connection.
- D
Ensure the external portal implements HTTP POST requests for authentication responses back to the WLC.
- E
Enable Layer 3 security on the WLAN to support external captive portal redirection.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To integrate Cisco's External Captive Portal API for guest Wi-Fi authentication, the administrator needs to ensure that a REST API-based portal is developed and hosted, configure the WLC to redirect users to the portal, and ensure the external portal communicates authentication responses back to the WLC via HTTP POST. Additionally, Layer 3 security must be enabled on the WLAN to facilitate redirection. Cisco DNA Center is not a requirement for this specific API integration.
- A. Correct.
Correct: Developing a REST API-based external captive portal is a fundamental requirement for integrating with Cisco's External Captive Portal API.
- B. Correct.
Correct: The WLC must be configured to redirect unauthenticated users to the external captive portal URL for authentication.
- C. Incorrect.
Incorrect: Cisco DNA Center is not directly required for configuring or validating the external captive portal's API integration. This step is unnecessary in this context.
- D. Correct.
Correct: The external portal should implement HTTP POST requests to send the authentication status back to the WLC as per the API requirements.
- E. Correct.
Correct: Layer 3 security (such as web redirection) must be enabled on the WLAN to support the redirection to the external captive portal.