An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?
the redirect to ISE is standard on port 8443 (already a non-standard port)
the reason it does that is because ISE is sending the radius packet containing the redirect URL containing the port
as per best practices on the port you need to allow access to ISE like
permit tcp any host <ISE IP> eq 8443
if you want to change this to a different port you need to allow this communicaiton to ISE using the different port
personally I would't really use option A because it opens up too much but it does the trick
the other answers are not related to web authentication
A is not the answer as it doesn't do any redirection.
To configure web authentication on a non-standard port, the ip http port <port number> command should be used on the switch. This command specifies the HTTP server port number on the switch, enabling it to listen for HTTP requests on a different port than the default (which is typically port 80). When web authentication uses a non-standard port, this command ensures that traffic is redirected to the correct port.
A is correct, you must create an ACL and do a deny for the IP of the Cisco ISE server (used in my environment on a WLC for redirection, also explained in this document: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/113362-config-web-auth-ise-00.html
To configure web authentication on a non-standard port, the ip http port <port number> command should be used on the switch. This command specifies the HTTP server port number on the switch, enabling it to listen for HTTP requests on a different port than the default (which is typically port 80). When web authentication uses a non-standard port, this command ensures that traffic is redirected to the correct port.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
MORTND
Highly Voted 1 year, 5 months agoUW
2 months ago327c7c8
Most Recent 4 days, 22 hours agoRedou2201
1 month, 2 weeks agoUW
2 months ago[Removed]
1 year agoTHEODORABLE
1 year, 8 months agoCnoteone
1 year, 9 months agoIlPerdan0
2 years ago