A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?
To accommodate both employees, who are authenticated using 802.1X, and guests, who are authenticated using a captive portal, the correct configuration requires both 802.1X and MAC Authentication (MAC-Auth). Employees will authenticate via 802.1X directly, while guests will initially go through a MAC Authentication process which then triggers the captive portal for further authentication. Therefore, it is necessary to configure both 802.1X and MAC-Auth on the switch ports.
C is correct. Employees use 802.1x The Aruba guest solution uses MAC-auth. The Portal is not configured on the switch port.
I think the answer should be C
B is correct. You configure captive-portal authentication globally on the switch, but ON THE PORTS, you only need 802.1X
C is the correct answer - MAC-auth (for captive portal) and 802.1x on port config
You don't need MAC-auth for GUESTS users through a captive portal.
AAA needed for captive, not MAC address
C is correct - also see page 334 on official student guide vol 2
C is correct. Employees use 802.1x The Aruba guest solution uses MAC-auth. The Portal is not configured on the switch port.
I think C is correct. See page 977 Study Guide. Unregistered device. Authentication on Port : Required: RADIUS MAC-Auth Optional add on: 802.1X (for employee onboarding solutions)
Page 929 Study Guide: The captive portal solution provides user access based on http/https redirection. First the client does MAC or 802.1X authentication. [Aruba Networks]
If they guest need to be authenticated with captive portal, why D is not the correct answere?
Because "Captive Portal" is not a configurable option with cx switches.
The correct Answer is C
Captive Portal should manage MAc-address itself, no need mac-auth configured on the switch port I belive. only 802.1x needed
After successful authentication on captive portal server, the client will go through MAC authentication on the switch and upon successful authentication, the client will get the access to the internet.
B is correct.
C is correct Not configurable captive portal on switch only MAC-auth and 802.1x
https://www.arubanetworks.com/techdocs/Instant_85_WebHelp/Content/instant-ug/authentication/mac-cpportal-au.htm
C is correct On Chap 15 "Captive Portal Authentication" of learning book "Aruba Certified Switching Professionnal": "Since captive portal is implemented with MAC Authentication and RADIUS COA on the AOS-CX switches, only MAC authentication needs to be enabled on the port. Optionnally, you can enable both 802.1x and MAC-auth if you are not sure what type of authentication will be necessary on a switch"