HPE7-A07 · Question #4
You are testing the use of the automated port-access role configuration process using RadSec authentication over VXLAN. During your testing, you observed that the RadSec connection will fail during…
The correct answer is D. The RADIUS TCP packets are Being dropped and the TLS tunnel is not established. During the testing of RadSec authentication over VXLAN, if the RadSec connection fails during the digital certificate exchange, it typically indicates an issue with the establishment of the TLS tunnel, which is required for RadSec's secure communication. The failure of TLS…
Question
You are testing the use of the automated port-access role configuration process using RadSec authentication over VXLAN. During your testing, you observed that the RadSec connection will fail during the digital certificate exchange. What would be the cause of this issue?
Options
- AThe RadSec server was defined on the switch using an IPv6 address that was unreachable
- BTracking mode was set to "dead-only", and the RadSec server was marked as unreachable.
- CThe switch is configured to establish a TLS connection with a proxy server, not the radius server.
- DThe RADIUS TCP packets are Being dropped and the TLS tunnel is not established.
How the community answered
(66 responses)- A2% (1)
- B5% (3)
- C11% (7)
- D83% (55)
Explanation
During the testing of RadSec authentication over VXLAN, if the RadSec connection fails during the digital certificate exchange, it typically indicates an issue with the establishment of the TLS tunnel, which is required for RadSec's secure communication. The failure of TLS tunnel establishment can occur due to RADIUS TCP packets being dropped, preventing the secure exchange of digital certificates necessary for RadSec authentication.
Topics
Community Discussion
No community discussion yet for this question.