Which command would allow you to verify receipt of a CoA message on an AOS-10 GW?

Question

Options

• Apacket-capture interprocess udp 3799
• Bpacket-capture controlpath udp 3799
• Cdiag utilities tcpdump host-port 3576
• Dtcpdump host-port 3576

• A
  17% (6)
• B
  69% (25)
• C
  8% (3)
• D
  6% (2)

Explanation

Option B is correct because on AOS-10 Gateways, CoA (Change of Authorization) messages arrive from external RADIUS servers via the control plane interface, and packet-capture controlpath udp 3799 specifically captures traffic on that control path using the standard CoA port (UDP 3799, per RFC 5176).

Option A is wrong because interprocess captures communication between internal software processes on the device itself - not inbound traffic from external sources like a RADIUS server sending CoA.

Options C and D are wrong for two reasons: they use UDP port 3576, which is not the CoA port (3799 is), and neither diag utilities tcpdump host-port nor tcpdump host-port is the correct AOS-10 syntax for this type of packet capture.

Memory tip: Think "CoA comes in from outside → it hits the control path." Port 3799 is easy to remember as "37-99" - RFC 5176 defines CoA, and 99 > 76, so the correct port is the bigger number. If you see 3576 on the exam, it's a decoy.

No community discussion yet for this question.