300-425 Question 315
Single answerA network administrator is configuring access point (AP) authentication on a Cisco wireless network using 802.1X. The APs must authenticate with a RADIUS server before gaining network access. During testing, the APs fail to authenticate and are unable to join the network. Which configuration step is most likely missing?
- A
The RADIUS server's shared secret is not configured on the AP.
- B
The AP is not configured with a valid 802.1X client certificate.
- C
The RADIUS server is not added to the AP's access control list (ACL).
- D
The switchport connected to the AP is not configured for 802.1X authentication.
Show answer and explanation
Correct answer: A
Explanation
For access point authentication using 802.1X, a shared secret must be configured on both the AP and the RADIUS server. This shared secret is used to establish trust during the authentication process. If the shared secret is missing or mismatched, the AP will fail to authenticate and join the network. The other options describe unrelated or less common requirements for AP authentication in this context.
- A. Correct.
Correct. For 802.1X authentication, the AP and the RADIUS server must share the same shared secret to establish a secure connection. If this is missing, authentication will fail.
- B. Incorrect.
Incorrect. While 802.1X can use client certificates, APs typically rely on shared secrets for authentication with the RADIUS server rather than certificates.
- C. Incorrect.
Incorrect. Adding the RADIUS server to an ACL is not a standard requirement for AP authentication. The issue is more likely related to 802.1X configuration.
- D. Incorrect.
Incorrect. While 802.1X can be enabled on a switchport, this configuration is unrelated to the AP's ability to authenticate with a RADIUS server.