QuestionQ68

Wireless Network Implementation

A medium-sized enterprise must deliver wireless internet access to lobby visitors through a Cisco 9800 WLC. The solution must satisfy these requirements:

  • Ensure guests cannot reach the corporate LAN.
  • Redirect guests to a login page before they browse.
  • Use a guest network VLAN that is separate from internal users.
  • Limit access to web browsing only.
  • Do not require preshared keys or certificates for guest access.

Which two actions are required to implement this solution?

Choose two
  • A Apply a webauth WLAN with mDNS mode set to drop.
  • B Configure a policy profile that uses an external only ACL and guest VLAN.
  • C Implement a policy profile with p2p blocking enabled and a guest VLAN.
  • D Deploy a WLAN policy that points wireless users to a webauth parameter map.
  • E Create a WLAN that uses a web policy and points to a consent parameter map.
Explanation

A Cisco 9800 guest WLAN uses web authentication with a web-auth parameter map to redirect unauthenticated clients to the login portal while allowing an open Layer 2 WLAN without a preshared key or certificate. The policy profile assigns the separate guest VLAN and an external-only ACL, which restricts guest traffic to permitted external web access and prevents access to corporate LAN resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!