Question

A network engineer is configuring single-SSID BYOD onboarding on a Cisco WLC (AireOS) using ISE as the RADIUS server with the internal CA. During the provisioning phase, the WLC must redirect the corporate employee's device to the ISE BYOD portal so the Native Supplicant Provisioning wizard can be installed. Which WLC configuration element is REQUIRED on the WLC to enable ISE to enforce this redirection during authorization?

Accepted Answer

A named redirect ACL on the WLC whose name exactly matches the ACL referenced in the ISE authorization profile's web redirection setting

Answer

A local EAP profile on the WLC configured to trust the ISE internal CA certificate chain

Answer

A DNS ACL that permits only the ISE PSN FQDN and blocks all other name resolution

Answer

A pre-shared key configured on the WLAN that matches the ISE sponsor portal secret