350-401 Question 272
Single answerAn enterprise network administrator has configured WebAuth for guest users on a WLAN. However, users are reporting that they are unable to access the WebAuth login page when connecting to the guest network. Which possible issue should the administrator investigate?
- A
The VLAN assigned to the guest network does not have a valid IP address configured.
- B
The AAA server is misconfigured and not reachable from the controller.
- C
The WebAuth redirect URL is not properly configured on the wireless LAN controller (WLC).
- D
The guest devices do not support HTTPS connections.
Show answer and explanation
Correct answer: A
Explanation
For WebAuth to function properly, the VLAN associated with the guest network must have a valid Layer 3 interface (IP address) configured on the WLC. Without this, the WLC cannot redirect users to the login page. The other options might cause other issues with WebAuth but would not prevent users from reaching the login page entirely.
- A. Correct.
If the VLAN assigned to the guest network does not have a valid IP address, the wireless LAN controller (WLC) cannot redirect users to the WebAuth login page because it requires a valid Layer 3 interface to perform the redirection.
- B. Incorrect.
While AAA misconfiguration could prevent authentication, it would not prevent the WebAuth login page from being displayed. WebAuth login failure due to AAA happens after the page is reached.
- C. Incorrect.
An incorrect WebAuth redirect URL configuration would not completely prevent users from accessing the login page; it might cause issues after the redirection but not block access to the page entirely.
- D. Incorrect.
Modern WebAuth implementations support both HTTP and HTTPS, but most WebAuth login pages default to HTTP. Device support for HTTPS would not typically block access to the login page.