Exam 300-715 topic 1 question 119 discussion

This question was in my today's exam

! Must enable HTTP/HTTPS for URL-redirection on port 80/443 https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_switch_wlc_config.html

Ensure you include the following command lines in your switch configuration to enable standard Web Authenticating functions for Cisco ISE, including provisions for URL redirection upon authentication. ip classless ip route 0.0.0.0 0.0.0.0 10.1.2.3 ip http server ! Must enable HTTP/HTTPS for URL-redirection on port 80/443 ip http secure-server https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_sw_cnfg.pdf

The other two commands, ip http secure-server and ip http secure-authentication, are not necessary for this task. The ip http secure-server command is used to configure the switch to use HTTPS instead of HTTP for authentication. This is not necessary in this case because the switch is not being used to store any sensitive data. The ip http secure-authentication command is used to configure the switch to use a secure authentication method, such as TLS, for authentication. This is also not necessary in this case because the switch is not being used to store any sensitive data.

The two commands that must be entered to meet this requirement are ip http authentication and ip http redirection. The ip http authentication command is used to enable HTTP authentication on the switch. This will allow users to authenticate to the switch using their credentials before they are allowed to access the network. The ip http redirection command is used to configure the switch to redirect users to a specific URL after they have authenticated. This can be used to direct users to a web portal where they can be prompted to download software updates or to complete other security-related tasks.

CCNP Security SISE 300-715 OFC, Chapter 12, page 314. Enable the Switch HTTP/HTTPS Server Step 1. Enable the HTTP server by entering the following command in global configuration mode: C3850(config)# ip http server Step 2. Enable the HTTP secure server by entering the following command: C3850(config)# ip http secure-server