300-410 · Question #79
Refer to the exhibit. A user server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server. GLOBAL RADIUS shared secret…
The correct answer is A. Match the authentication port. The switch fails to communicate with the RADIUS server 10.1.1.1 because the authentication port configured on the switch (1814) does not match the server's default authentication port (1812).
Question
Options
- AMatch the authentication port
- BMatch the accounting port
- CCorrect the timeout value
- DCorrect the shared secret.
How the community answered
(41 responses)- A80% (33)
- B10% (4)
- C7% (3)
- D2% (1)
Why each option
The switch fails to communicate with the RADIUS server 10.1.1.1 because the authentication port configured on the switch (1814) does not match the server's default authentication port (1812).
The RADIUS server 10.1.1.1 is configured with default settings, meaning it expects authentication requests on UDP port 1812. However, the switch is configured to send authentication requests to port 1814 for this server. This mismatch prevents successful communication between the switch and the RADIUS server for authentication.
The accounting port for server 10.1.1.1 is configured as 1813 on the switch, which matches the standard/default RADIUS accounting port, so this is not the issue.
The timeout value is 10 seconds, which is a common and acceptable value; an incorrect timeout would lead to delays or retransmissions, not a complete communication failure as implied by 'cannot communicate'.
While an incorrect shared secret would cause authentication failure, the problem states the switch 'cannot communicate' with the server, suggesting an issue at a lower layer (like port mismatch) rather than a credentials issue where communication might still occur but be rejected.
Concept tested: RADIUS server port configuration
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_rad/configuration/xe-16-9/sec-usr-rad-xe-16-9-book/sec-cfg-radius.html
Topics
Community Discussion
No community discussion yet for this question.