What network requirement should be met to ensure successful communication between the F5 BIG-IP APM and a RADIUS server?

Question

Options

• ARADIUS server should have a static IP address.
• BThe RADIUS server and BIG-IP APM should be in the same subnet.
• CRADIUS server should have port 1812 open for authentication requests.
• DThe BIG-IP APM should have a trusted certificate signed by the RADIUS server.

• A
  2% (1)
• B
  95% (39)
• C
  2% (1)

Explanation

Placing the BIG-IP APM and RADIUS server in the same subnet guarantees direct Layer 2 network reachability, eliminating potential routing failures, firewall blocks, or path asymmetry issues that could silently drop UDP-based RADIUS packets. Since RADIUS uses connectionless UDP, dropped packets don't trigger retransmissions the way TCP would, making a reliable, low-latency network path critical - same-subnet placement satisfies this as a foundational network requirement.

Why the distractors are wrong:

• A - A static IP is a best practice for consistent AAA server configuration, not a network requirement; a RADIUS server with a dynamic IP can still communicate if the address is updated accordingly.
• C - Port 1812 being open is a firewall/service requirement, not a network topology requirement, and the question specifically asks about the network layer.
• D - RADIUS authenticates using a shared secret (a pre-configured passphrase), not certificates; BIG-IP APM has no such certificate relationship with a RADIUS server.

Memory tip: Think of it as the "neighbor rule" - RADIUS uses UDP, which has no built-in error recovery, so you want your APM and RADIUS server to be neighbors on the same subnet to ensure packets always arrive without routing complications.

No community discussion yet for this question.