Question

A network architect is documenting the BYOD onboarding options for a new wireless deployment before implementation. Management wants to minimize the number of SSIDs broadcast in the environment while still allowing employees to onboard personal devices and receive certificates from the ISE internal CA. Which BYOD onboarding approach should the architect recommend to satisfy this requirement?

Accepted Answer

Single-SSID onboarding, where the same 802.1X SSID is used for both provisioning and secured access, with a CoA moving the device to full access after certificate enrollment

Answer

Dual-SSID onboarding, using an open SSID for provisioning and a separate 802.1X SSID for secured access after enrollment

Answer

Local Web Authentication on a dedicated guest SSID that redirects to the BYOD portal for certificate download

Answer

MAB-based onboarding on an open SSID that statically assigns the endpoint to a registered identity group