At a certain customer's site, a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on their MAC addresses. In which access mode has this NAS been…

The correct answer is A. Layer 2 mode. This describes the Cisco NAC Appliance Server operating in Layer 2 in-band mode. In Layer 2 mode the NAS sits inline (physically and logically) between the client and the rest of the network, so all traffic must pass through it. Because it operates at Layer 2, it can only see…

Security Services

Question

At a certain customer's site, a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on their MAC addresses. In which access mode has this NAS been configured to operate?

Options

ALayer 2 mode
BLayer 3 Edge mode
CLayer 3 Central mode
DLayer 3 In-Band mode

How the community answered

(24 responses)

A
96% (23)
B
4% (1)

Explanation

This describes the Cisco NAC Appliance Server operating in Layer 2 in-band mode. In Layer 2 mode the NAS sits inline (physically and logically) between the client and the rest of the network, so all traffic must pass through it. Because it operates at Layer 2, it can only see MAC addresses - it has no IP routing context to track clients by IP subnet. Layer 3 Edge and Layer 3 Central modes place the NAS at the Layer 3 boundary or use out-of-band placement where clients are identified by IP address, not MAC address.

Topics

#NAC deployment#Layer 2 mode#MAC-based authentication#access control

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice