A WLAN on the WLC is configured for web authentication as the Layer 3 Security policy with the web-auth type External. Which two elements are required as part of the configuration? (Choose two.)
A.
WLAN being not present in the default AP group
B.
HTTPS redirection enabled
C.
nonroutable IP address assigned to the virtual interface
D.
web-auth secure web option enabled
E.
preauth ACL to allow access to the external web server
C. Nonroutable IP address assigned to the virtual interface: The virtual interface on the WLC must be configured with a nonroutable IP address (e.g., 1.1.1.1) to facilitate web authentication. This ensures that clients are redirected to the external web server for authentication.
E. Preauth ACL to allow access to the external web server: A preauthentication ACL (preauth ACL) must be configured to allow clients to access the external web server for authentication before they are granted full network access.
Why not the other options?
A. WLAN being not present in the default AP group: This is not required for web authentication configuration.
B. HTTPS redirection enabled: While HTTPS redirection can enhance security, it is not a mandatory requirement for external web authentication.
D. Web-auth secure web option enabled: This is optional and not required for basic external web authentication.
Thus, the two required elements are a nonroutable IP address assigned to the virtual interface and a preauth ACL to allow access to the external web server.
C and E. https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217457-configure-and-troubleshoot-external-web.html.
ACL is automatically created in 9800 but is required.
I believe Minsait is correct. Per the packet flow diagram in the doc Minsait shared, the web communication between the client and WLC (GET and Redirect) is HTTP and not HTTPS. I think this rules out B & D and, option A doesn't seem relevant to the question.
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.300-430 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
AhcMez
Highly Voted 9 months, 1 week agorrahim
Most Recent 2 months, 3 weeks agotera671
7 months, 3 weeks agoAhcMez
9 months, 1 week agoAhcMez
9 months, 1 week ago[Removed]
9 months, 2 weeks agoBrockHarbor
8 months, 4 weeks ago