Exam 350-401 Topic 4 Question 539 Discussion
Actual exam question for Cisco's 350-401 exam
Question #: 539
Topic #: 4
Question #: 539
Topic #: 4
An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The Cisco ISE servers are hosted at 10.9.11.144 and 10.1.11.141. Which access list meets the requirements?
Suggested Answer: D Vote an answer
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless- controllers/213920-central-web-authentication-cwa-on-cata.html#toc-hId-881505252
by anonymous at Oct 11, 2024, 02:50 AM
0
0
0
10
Comments
anonymous
2024-10-11 02:50:00https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html#toc-hId-881505252
"You need to deny traffic to your ISE PSNs nodes as well as deny DNS and permit all the rest. This redirect ACL is not a security ACL but a punt ACL that defines what traffic goes to the CPU (on permits) for further treatment (like redirection) and what traffic stays on the data plane (on deny) and avoids redirection."
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).