350-701 · Question #917
Refer to the exhibit. An engineer is implementing a network access control solution. Users can authenticate against the RADIUS server, and now the engineer must configure a downloadable access…
The correct answer is D. radius-server vsa send authentication. Downloadable ACLs require the switch to accept vendor-specific attributes from the RADIUS server. Enabling the device to receive these attributes is done by allowing VSA transmission during authentication, which permits the DACL to be downloaded and applied to the authenticated…
Question
Refer to the exhibit. An engineer is implementing a network access control solution. Users can authenticate against the RADIUS server, and now the engineer must configure a downloadable access control list on switch port. Which command must be used next to complete the configuration? aaa new-model aaa authorization network default local group radius
Options
- Aswitchport mode access
- Bip access-group ACL-NAME out
- Cauthentication order mab dot1x
- Dradius-server vsa send authentication
How the community answered
(45 responses)- A20% (9)
- B9% (4)
- C4% (2)
- D67% (30)
Explanation
Downloadable ACLs require the switch to accept vendor-specific attributes from the RADIUS server. Enabling the device to receive these attributes is done by allowing VSA transmission during authentication, which permits the DACL to be downloaded and applied to the authenticated session.
Topics
Community Discussion
No community discussion yet for this question.