Question

A network engineer must deploy AAA for a new corporate wireless network so that Cisco ISE authenticates users and dynamically assigns each authenticated user a VLAN and a downloadable ACL based on group membership. The solution must integrate with the 802.1X capability on the wireless LAN controller. Which AAA protocol should the engineer configure between the WLC and ISE, and why?

Accepted Answer

RADIUS, because it supports 802.1X network access and can return authorization attributes such as VLAN assignment and downloadable ACLs in the Access-Accept

Answer

TACACS+, because it separates authentication, authorization, and accounting and is the standard protocol for 802.1X network access

Answer

TACACS+, because it encrypts the entire packet payload and is required for returning dynamic VLAN attributes to the WLC

Answer

RADIUS, because it performs per-command authorization needed to restrict which network resources each wireless user can reach