350-101: Implementing and Operating Cisco Wireless Core TechnologiesDemo

By Cisco · Question Mode

QuestionQ56

Wireless Network Implementation

A hotel needs to give guests wireless connectivity through a captive portal on a Cisco 9800 WLC. The solution must satisfy these requirements:

  • Ensure guests are redirected to a custom login web page and, after authentication, have Internet-only access.
  • The guest SSID must require no password and be visible to every client.
  • VLAN-level network segmentation between staff and guests is required.

What must the IT team configure on the WLAN?

  • A central web authentication with WPA2-PSK security and a DNS ACL assigned to the WLAN profile
  • B open authentication with a local web server for the guest WLAN
  • C PSK WLAN with VLAN override and enable mDNS for guest users
  • D central web authentication and assign a policy with ACLs restricting access to internal networks
Explanation

Central Web Authentication supports captive-portal redirection to a customized web portal. The guest WLAN should use open Layer 2 authentication, while its associated policy assigns the guest VLAN for separation from staff and applies ACLs that block internal networks after authentication, leaving Internet access available. Cisco documents Central Web Authentication as using redirect settings and a redirect ACL, and its guest WLAN guidance disables WPA/WPA2 and 802.1X for this type of access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!