A network engineer recently identified that a wired device connected to a CX Switch is misbehaving on the network To address this issue, a new ClearPass policy has been put in place to prevent this…

Question

Options

• AConfirm that NTP is configured on the switch and ClearPass
• BConfigure dynamic authorization on the switch.
• CBounce the switchport
• DUse Dynamic Segmentation.
• EConfigure dynamic authorization on the switchport

• A
  79% (23)
• C
  3% (1)
• D
  10% (3)
• E
  7% (2)

Explanation

To allow ClearPass to perform a CoA and change the access for a wired device, the following steps need to be implemented: * Confirm that NTP is configured on the switch and ClearPass. NTP is required to synchronize the time between the switch and ClearPass, which is essential for CoA messages to be processed * Configure dynamic authorization on the switch. Dynamic authorization is a feature that enables the switch to accept CoA messages from a RADIUS server and apply them to existing sessions. Dynamic authorization can be enabled globally or per port on the switch. * Optionally, configure dynamic authorization on the switchport. This step is not required, but it can provide more granular control over which ports can accept CoA messages from a RADIUS server. Bouncing the switchport or using Dynamic Segmentation are not necessary steps for allowing ClearPass to perform a CoA and change the access for a wired device.

No community discussion yet for this question.