350-401 Question 274
Single answerA network administrator is configuring WebAuth on a Cisco wireless LAN controller (WLC) to allow guest users to authenticate before accessing the network. The administrator wants to use the WebAuth internal login page hosted on the WLC. However, after implementing the configuration, users report that they are not redirected to the login page when trying to access the internet. What could be the most likely cause of this issue?
- A
The DNS server used by the guest clients is not reachable.
- B
The WLC does not have a valid SSL certificate installed.
- C
HTTP traffic is explicitly blocked by an ACL applied to the guest VLAN.
- D
The WebAuth feature is not supported on the current WLC software version.
Show answer and explanation
Correct answer: A
Explanation
For WebAuth to function properly, the guest clients must be able to resolve the domain name of the web page they are trying to access. If the DNS server is not reachable, the WLC cannot intercept the HTTP request for redirection, and users will not be directed to the WebAuth login page. This makes the DNS issue the most likely cause of the problem described in the scenario.
- A. Correct.
If the DNS server is not reachable, the client's browser cannot resolve the URL to the WLC's redirection page, resulting in the failure of the WebAuth redirection process.
- B. Incorrect.
While having a valid SSL certificate is recommended for secure connections, the absence of one would not prevent the redirection but may cause a certificate warning in the browser.
- C. Incorrect.
Blocking HTTP traffic on the guest VLAN would prevent users from accessing websites, but it would not affect the redirection process itself as the WLC intercepts the HTTP request for redirection.
- D. Incorrect.
WebAuth is a widely supported feature on Cisco WLCs, and it is highly unlikely that the feature is unsupported unless the WLC is running an extremely outdated or incompatible software version.