QuestionQ64

Guest

A customer wants contractors and guests to authenticate through the same SSID and the same web login page, while receiving different access rights after authentication. How can this be achieved?

  • A Assign a pre-auth role to guests, but a post-auth role to contractors.
  • B Sending different pre-auth roles from ClearPass to the controller for guests and contractors.
  • C Sending different post-auth roles from ClearPass to the controller for guests and contractors.
  • D This is possible, but only if you use multiple web login pages.
Explanation

A shared pre-authentication role can provide access to the captive portal for both user types. After successful authentication, ClearPass can return distinct post-authentication roles to the controller according to the user’s authorization attributes, allowing contractor and guest access policies to differ. ClearPass supports role-based network-policy enforcement for authenticated access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!