300-435 Question 300
Select 3Your organization has implemented Cisco DNA Center and is using an external captive portal to authenticate guest users. You are tasked with integrating the external captive portal using APIs. Which of the following steps are required to successfully implement this integration?
- A
Register the external captive portal's URL in Cisco DNA Center under the guest wireless network settings.
- B
Use Cisco DNA Center's API to retrieve the session ID for guest users during authentication.
- C
Implement the RADIUS Change of Authorization (CoA) to allow user redirection after authentication.
- D
Develop the external captive portal to handle POST requests from Cisco DNA Center containing guest session data.
- E
Configure Cisco DNA Center to use the external captive portal's IP address directly instead of the URL.
Show answer and explanation
Correct answers: A, C, D
Explanation
To integrate an external captive portal with Cisco DNA Center, it is necessary to register the portal's URL in the guest network settings, ensure that the portal can handle POST requests from Cisco DNA Center, and use RADIUS CoA for redirecting authenticated users. Using an IP address instead of a URL is not supported, and DNA Center does not retrieve guest session IDs directly via its API.
- A. Correct.
This is correct. Cisco DNA Center requires the external captive portal's URL to be registered in its settings to redirect guests for authentication.
- B. Incorrect.
This is incorrect. The session ID for guest users is typically handled by the external captive portal and not retrieved via Cisco DNA Center's API in this context.
- C. Correct.
This is correct. RADIUS Change of Authorization (CoA) is a critical step for redirecting authenticated users to the appropriate network access.
- D. Correct.
This is correct. The external captive portal must be developed to accept POST requests from Cisco DNA Center, which will include session data for authentication.
- E. Incorrect.
This is incorrect. Cisco DNA Center integrates with external portals using their URLs, not direct IP addresses.