300-730 · Question #177
What are the two AAA methods for user authentication when configuring the IKEv2 profile? (Choose two.)
The correct answer is B. eap E. pre-share. EAP and pre-share are the two AAA-based user authentication methods available when configuring an IKEv2 profile on Cisco IOS.
Question
Options
- Auser
- Beap
- Crsa-sig
- Dcert
- Epre-share
How the community answered
(60 responses)- A7% (4)
- B88% (53)
- C2% (1)
- D3% (2)
Why each option
EAP and pre-share are the two AAA-based user authentication methods available when configuring an IKEv2 profile on Cisco IOS.
user is not a valid keyword in the IKEv2 profile authentication command syntax and is not a recognized AAA authentication method in Cisco IOS.
EAP is used in IKEv2 profiles to delegate user authentication to an AAA server, supporting methods such as EAP-MSCHAPv2 for username and password verification, making it a primary AAA user authentication method in IKEv2 profile configuration.
rsa-sig uses RSA digital signatures for certificate-based peer or device authentication and is not classified as an AAA user authentication method in the IKEv2 profile context.
cert is not a standard keyword in Cisco IOS IKEv2 profile authentication configuration - certificate-based authentication is specified using rsa-sig or ecdsa-sig, not cert.
Pre-share configures a pre-shared key as the authentication credential within the IKEv2 profile, and it is recognized as a valid AAA authentication method in the authentication command syntax of an IKEv2 profile.
Concept tested: IKEv2 profile AAA user authentication methods
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/xe-16/sec-conn-ikevpn-xe-16-book/sec-conn-ikev2-flex.html
Topics
Community Discussion
No community discussion yet for this question.