nerdexam
Exams300-430Questions#124
Cisco

300-430 · Question #124

300-430 Question #124: Real Exam Question with Answer & Explanation

The correct answer is B: Change the CoA Port. The configuration that must be applied in the RADIUS Authentication Settings section from the ISE Network Device page when clients are able to authenticate successfully but the ISE policies designed to place them on different interfaces are not working is to change the CoA Port.

Question

Refer to the exhibit. The security team has implemented ISE as an AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?

Exhibit

300-430 question #124 exhibit

Options

  • ADisable KeyWrap
  • BChange the CoA Port
  • CCorrect the shared secret.
  • DUse ASCII for the key input format

Explanation

The configuration that must be applied in the RADIUS Authentication Settings section from the ISE Network Device page when clients are able to authenticate successfully but the ISE policies designed to place them on different interfaces are not working is to change the CoA Port. The CoA (Change of Authorization) port is used by ISE to send messages to the network device to apply different policies post-authentication. If the CoA port is not correctly configured, the network device will not receive or act upon these messages, resulting in clients not being placed on the correct interfaces as per ISE policies.

Community Discussion

No community discussion yet for this question.

Full 300-430 Practice