300-420 · Question #59
Which two options are requirements for EIGRP authentication? (Choose two)
The correct answer is B. The Authentication key must be configured under the interface running EIGRP. D. The authentication key IDs must match between two neighbors.. EIGRP authentication requires the key chain to be referenced on the interface and that the active key IDs match between neighbors for successful adjacency formation.
Question
Which two options are requirements for EIGRP authentication? (Choose two)
Options
- AA crypto map must be configured.
- BThe Authentication key must be configured under the interface running EIGRP.
- CThe authentication key must be configured within the EIGRP routing configuration.
- DThe authentication key IDs must match between two neighbors.
- EA separate key chain must be configured.
- FAN IPsec profile must be configured.
How the community answered
(48 responses)- A2% (1)
- B88% (42)
- C6% (3)
- F4% (2)
Why each option
EIGRP authentication requires the key chain to be referenced on the interface and that the active key IDs match between neighbors for successful adjacency formation.
Crypto maps are primarily used for configuring IPsec VPNs, which is a different security mechanism and not a requirement for EIGRP's native routing protocol authentication.
EIGRP authentication is configured and applied on a per-interface basis, specifically using commands like ip authentication key-chain eigrp and ip authentication mode eigrp under the interface configuration to specify the authentication parameters.
EIGRP authentication keys (or keychains) are applied to specific interfaces where EIGRP runs, not configured directly within the global EIGRP routing process configuration.
For successful EIGRP neighbor authentication and adjacency establishment, the active key ID, the key string, and the authentication algorithm must all match precisely between the two neighboring routers.
While a key chain is typically configured to define and manage authentication keys, the question asks for two specific requirements for authentication to work, and B and D are more direct operational conditions.
An IPsec profile is used for IPsec VPNs, which provides a different layer of security (Layer 3 encryption and authentication) and is not a requirement for EIGRP routing protocol authentication.
Concept tested: EIGRP authentication configuration requirements
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/15-mt/ire-15-mt-book/ire-md5-authen.html
Topics
Community Discussion
No community discussion yet for this question.