You are testing the use of the automated port-access role configuration process using RadSec authentication over VXLAN. During your testing, you observed that the RadSec connection will fail during…

Question

Options

• ATracking mode was set to dead-only, and the RadSec server was marked as unreachable.
• BThe certificate chain has increased the digital certificate packet sizes over the configured MTU.
• CThe switch is configured to establish a TLS connection with a proxy server, not the RADIUS
• DThe RadSec server was defined on the switch using an IPV6 address that was unreachable.

• A
  8% (2)
• B
  72% (18)
• C
  4% (1)
• D
  16% (4)

Explanation

During RadSec (RADIUS over TLS) connection setup, the certificate exchange process can produce packets larger than the configured MTU if the certificate chain is long. If packet fragmentation occurs and the fragments are dropped due to MTU restrictions, the TLS handshake will fail, preventing RadSec connection establishment. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.

No community discussion yet for this question.