Exam 300-715 topic 1 question 344 discussion

Actual exam question from Cisco's 300-715

Question #: 344
Topic #: 1

A network engineer must define a Redirect ACL on a Cisco Wireless LAN Controller. The ACL must force unknown users to authenticate via a captive portal located on a Cisco ISE PSN on another network segment separated by a firewall. Which port must be permitted in the firewall to allow traffic between the Cisco Wireless LAN Controller and Cisco ISE?

A. UDP port 1812
B. TCP port 8443
C. UDP port 1645
D. TCP port 8445

Show Suggested Answer

Suggested Answer: A 🗳️

by Cachaman at March 16, 2025, 2:07 a.m.

Comments

Submit Cancel

Cachaman

3 months, 1 week ago

Selected Answer: A

Correct Answer is A. PSN ------------------- ASA---------------------WLC RADIUS UDP 1812 PSN---------------------ASA---------------------Guest VLAN TCP 8443 The communication between ISE and the WLC is via RADIUS, so UDP port 1812 must be opened. TCP 8443 is the default port used by the guest portals, but this port must be opened between ISE and the Guest Vlan, so the guest-users are able to reach ISE on port 8443/guest portal.

upvoted 3 times

Rododendron2

2 months, 1 week ago

I would guess they want to hear TCP8443 - central wlan, traffic goes via WLC = traffic between WLC and ISE (for guest subnet) to be opened on TCP8443....

upvoted 2 times

...