300-715 · Question #339
A technician must configure MAB on an access switch. Due to a protocol error, the engineer discovers that MAB cannot authenticate. For MAB to function, which protocol must be enabled in the…
The correct answer is C. Process Host Lookup. For MAB (MAC Authentication Bypass) to function correctly on a Cisco switch, the "Process Host Lookup" protocol must be enabled in the authorized protocol lists on the RADIUS server (Cisco ISE). This allows ISE to accept MAC addresses as credentials.
Question
A technician must configure MAB on an access switch. Due to a protocol error, the engineer discovers that MAB cannot authenticate. For MAB to function, which protocol must be enabled in the authorized protocol lists?
Options
- AEAP-TLS
- BMS-CHAPv2
- CProcess Host Lookup
- DCHAP
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C88% (30)
- D3% (1)
Why each option
For MAB (MAC Authentication Bypass) to function correctly on a Cisco switch, the "Process Host Lookup" protocol must be enabled in the authorized protocol lists on the RADIUS server (Cisco ISE). This allows ISE to accept MAC addresses as credentials.
EAP-TLS is an 802.1X authentication method that uses client and server certificates for strong user or machine authentication, not for MAC-based authentication (MAB).
MS-CHAPv2 is an authentication protocol typically used for username/password authentication in contexts like VPNs or older wireless security, not for MAB.
When configuring MAB (MAC Authentication Bypass) with Cisco ISE, the policy set on ISE must permit "Process Host Lookup" as an allowed protocol. This option within an authentication policy allows ISE to treat a MAC address as an identity, perform a lookup against internal or external identity stores, and then authorize the device.
CHAP is an older authentication protocol for verifying user identity with a username and password, and it is not used for MAB.
Concept tested: Cisco ISE MAB authentication protocols
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_guide_31/m_policy_sets.html
Topics
Community Discussion
No community discussion yet for this question.