nerdexam
Cisco

300-410 · Question #79

Refer to the exhibit. A user server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server. GLOBAL RADIUS shared secret…

The correct answer is A. Match the authentication port. The switch fails to communicate with the RADIUS server 10.1.1.1 because the authentication port configured on the switch (1814) does not match the server's default authentication port (1812).

Infrastructure Security

Question

Refer to the exhibit. A user server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server. GLOBAL RADIUS shared secret: ******* retransmission count:5 timeout value:10 following RADIUS servers are configured: myradius.cisco.users.com: available for authentication on port:1814 available for accounting on port:1813 10.1.1.1: available for authentication on port:1814 available for accounting on port:1813 RADIUS shared secret: ******* 10.2.2.3: available for authentication on port:1814 available for accounting on port:1813 RADIUS shared secret: ******* Which action resolves this issue?

Options

  • AMatch the authentication port
  • BMatch the accounting port
  • CCorrect the timeout value
  • DCorrect the shared secret.

How the community answered

(41 responses)
  • A
    80% (33)
  • B
    10% (4)
  • C
    7% (3)
  • D
    2% (1)

Why each option

The switch fails to communicate with the RADIUS server 10.1.1.1 because the authentication port configured on the switch (1814) does not match the server's default authentication port (1812).

AMatch the authentication portCorrect

The RADIUS server 10.1.1.1 is configured with default settings, meaning it expects authentication requests on UDP port 1812. However, the switch is configured to send authentication requests to port 1814 for this server. This mismatch prevents successful communication between the switch and the RADIUS server for authentication.

BMatch the accounting port

The accounting port for server 10.1.1.1 is configured as 1813 on the switch, which matches the standard/default RADIUS accounting port, so this is not the issue.

CCorrect the timeout value

The timeout value is 10 seconds, which is a common and acceptable value; an incorrect timeout would lead to delays or retransmissions, not a complete communication failure as implied by 'cannot communicate'.

DCorrect the shared secret.

While an incorrect shared secret would cause authentication failure, the problem states the switch 'cannot communicate' with the server, suggesting an issue at a lower layer (like port mismatch) rather than a credentials issue where communication might still occur but be rejected.

Concept tested: RADIUS server port configuration

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_rad/configuration/xe-16-9/sec-usr-rad-xe-16-9-book/sec-cfg-radius.html

Topics

#RADIUS#AAA#Authentication#Network Troubleshooting

Community Discussion

No community discussion yet for this question.

Full 300-410 Practice