300-715 · Question #216
Refer to the exhibit. Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802.1X authentications? (Choose two)
The correct answer is A. radius server ISE1 C. radius server ISE1. To add a Catalyst switch as a Network Access Device for 802.1X authentications with Cisco ISE, the switch must be configured with the RADIUS server's definition, including its address and a shared secret.
Question
Refer to the exhibit. Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802.1X authentications? (Choose two)
Options
- Aradius server ISE1
- Btacacs server ISE1
- Cradius server ISE1
- Dtacacs server ISE1
- Eradius server ISE1
How the community answered
(45 responses)- A89% (40)
- B2% (1)
- D7% (3)
- E2% (1)
Why each option
To add a Catalyst switch as a Network Access Device for 802.1X authentications with Cisco ISE, the switch must be configured with the RADIUS server's definition, including its address and a shared secret.
Configuring 'radius server ISE1' initiates the definition of the RADIUS server named ISE1, under which its IP address and shared secret will be specified. This is a foundational step for the switch to communicate with Cisco ISE.
TACACS+ is used for device administration, not for 802.1X network access control. Thus, configuring a TACACS+ server is irrelevant for 802.1X authentications.
This choice, alongside A, implicitly refers to the necessary configuration within the `radius server ISE1` block on the switch, such as specifying the ISE server's IP address (`address ipv4 <ISE_IP>`) and the shared secret key (`key <shared_secret>`), which are both crucial for establishing secure RADIUS communication for 802.1X authentications.
Similar to B, TACACS+ server configuration is not relevant for 802.1X network access control.
Concept tested: Cisco switch RADIUS server configuration for 802.1X
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_0101.html
Topics
Community Discussion
No community discussion yet for this question.