An engineer is configuring wireless guests using Cisco CWA. When a device connects, it must be redirected to the WebAuth, but this was failing. What must be configured for the device to be redirected correctly?
A.
Configure the ACL name on the anchor controller.
For a device to be correctly redirected to the Central Web Authentication (CWA) portal, ICMP (Internet Control Message Protocol) must be allowed toward the portal. Here's why:
ICMP and Redirection:
When a device connects to the guest network, the WLC uses ICMP to determine if the device can reach the CWA portal. If ICMP is blocked, the WLC cannot verify the portal's reachability, and redirection will fail.
Importance of ICMP:
Allowing ICMP ensures that the WLC can successfully redirect the device to the CWA portal for authentication.
Why the Other Options Are Incorrect:
A. Configure the ACL name on the anchor controller:
While ACLs can be used to control traffic, they are not directly related to the redirection process for CWA.
B. Enable DHCP option 7:
DHCP option 7 is used to specify the log server for DHCP clients. It is not related to the redirection process for CWA.
D. Remove the CN entry from the SAN:
The CN (Common Name) entry in the SAN (Subject Alternative Name) is related to SSL certificates and is not relevant to the redirection process for CWA.
upvoted 1 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rrahim
1 week, 1 day agorrahim
1 week, 1 day ago