Refer to the exhibit. A client requests a new SSID that will use web-based authentication and external RADIUS servers. Which Layer 2 security mode must be selected?
Refer to the exhibit. A client requests a new SSID that will use web-based authentication and external RADIUS servers. Which Layer 2 security mode must be selected?
When setting up an SSID for web-based authentication and using external RADIUS servers, the appropriate Layer 2 security mode is 'None.' This is because web-based authentication typically does not require Layer 2 encryption or authentication mechanisms. Instead, it relies on Layer 3 processes for authenticating users, such as a web page login managed by a RADIUS server. By selecting 'None,' you allow clients to connect to the SSID without any initial encryption or Layer 2 security, making the web-based authentication process possible.
maybe "B" is right because || from OCG p.572 (Open Authentication will be used because the None method has been selected) based on all description that mention AAA , does not require encryption or special security at Layer 2. Instead, it relies on a web page to authenticate users and typically uses RADIUS servers for the actual authentication process. So, for this setup, no Layer 2 security is necessary.
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html#toc-hId-2024006454 ^^^ WLAN Configuration Step 3 ^^^
None: When using web-based authentication and external RADIUS servers, the Layer 2 security mode should be set to "None" or "Open." This allows clients to associate with the SSID without any Layer 2 encryption or authentication, as authentication and encryption are handled at Layer 3 (web-based authentication) and by the RADIUS server, respectively.
Answer is D: The splash page redirect feature is available only for WLANs that are configured for 802.1x or WPA+WPA2 Layer 2 security.
WPA2 (Wi-Fi Protected Access 2) provides strong security for wireless networks. WPAS (Wi-Fi Protected Access with Pre-Shared Key) is a variation of WPA that uses pre-shared keys for authentication
WPAS - Captive Portal - authenticate through Captive Portal using PSK (Web Based)
To be fare - the Lack of "WPA2 + WPAS" not showing up in the image exhibit - really makes me doubt this as a choice....... "WPA2 + WPA3" shows in the image instead and not listed"
A is the Answear.
the answer is "B. NONE" ref: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html
B is correct the SSID will be open and have no password, when you try to connect to the SSID you will be directed to a WEB interface where you do the authentication on it based on many options
webauth and Raduis are L3 security while L2 is for encryption so since the question is asking for web AND Raduis then WPA2 should be enabled