Question

A network engineer is building a guest access solution on Cisco ISE. When an unauthenticated endpoint connects to the guest SSID, the switch/WLC must redirect the user's browser to the ISE guest portal for self-registration. The engineer is configuring the authorization profile that will be returned for these initial guest connections. Which combination of settings must the authorization profile contain to force the browser redirection to the ISE guest portal?

Accepted Answer

A redirect ACL name (defined locally on the NAD) referenced in the Web Redirection setting pointing to the guest portal

Answer

A downloadable ACL (dACL) that permits all traffic plus a VLAN assignment matching the guest VLAN

Answer

A RADIUS Change of Authorization (CoA) type of 'Reauth' with a Security Group Tag assigned

Answer

An Airespace ACL and a Filter-ID attribute referencing the ISE self-registration policy set