You are using 802.1X in your access network consisting of EX Series switches. You recently had a failure with your RADIUS server which resulted in authenticating client devices being denied access…

The correct answer is B. move. ex-series-cli.html#id-configuring-radius-server-fail-fallback-cli-procedure Permit authentication, allowing traffic to flow from the end device through the interface as if the end device were successfully authenticated by the RADIUS server. Deny authentication, preventing…

Ethernet Switching Features

Question

You are using 802.1X in your access network consisting of EX Series switches. You recently had a failure with your RADIUS server which resulted in authenticating client devices being denied access to the network. You want to change this behavior so that authenticating clients are directed to a remediation VLAN. Which RADIUS server failback setting satisfies this requirement?

Options

Apermit
Bmove
Csustain
Ddeny

How the community answered

(38 responses)

A
11% (4)
B
82% (31)
C
5% (2)
D
3% (1)

Explanation

ex-series-cli.html#id-configuring-radius-server-fail-fallback-cli-procedure Permit authentication, allowing traffic to flow from the end device through the interface as if the end device were successfully authenticated by the RADIUS server. Deny authentication, preventing traffic from flowing from the end device through the interface. This is the default. Move the end device to a specified VLAN if the switch receives a RADIUS access-reject message. The configured VLAN name overrides any attributes sent by the server. (The VLAN must already exist on the switch.) Sustain authenticated end devices that already have LAN access and deny unauthenticated end devices. If the RADIUS servers time out during reauthentication, previously authenticated end devices are reauthenticated and new users are denied LAN access.

Topics

#802.1X#server fail fallback#remediation VLAN#move

Community Discussion

No community discussion yet for this question.

Full JN0-649 Practice