350-401 Question 268
Select 4A network administrator is configuring 802.1X authentication on a Cisco switch to secure access to the corporate network. The administrator wants to ensure that users are authenticated via a RADIUS server before gaining network access. Which of the following configurations must be implemented on the switch to support this setup?
- A
Enable AAA and specify the RADIUS server
- B
Configure the switch port for 802.1X as an access port
- C
Enable port security on the switch port
- D
Define a RADIUS server group and associate it with 802.1X
- E
Enable 802.1X globally on the switch
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To enable 802.1X authentication on a Cisco switch, several steps are required. First, Authentication, Authorization, and Accounting (AAA) must be enabled, and a RADIUS server must be configured to handle authentication requests. Second, 802.1X must be enabled globally and configured on individual access ports. Additionally, the switch must be set to use the RADIUS server for 802.1X authentication by defining a RADIUS server group and associating it with the authentication process. Port security, although a valuable feature, is not part of the 802.1X configuration process.
- A. Correct.
Correct: Enabling AAA (Authentication, Authorization, and Accounting) is mandatory when using 802.1X since it relies on external authentication, typically via a RADIUS server.
- B. Correct.
Correct: 802.1X authentication is designed to work on access ports where end devices connect to the network.
- C. Incorrect.
Incorrect: Port security is a separate feature used to limit the number of MAC addresses on a port and is unrelated to 802.1X authentication.
- D. Correct.
Correct: A RADIUS server group must be defined and associated with 802.1X to handle authentication requests.
- E. Correct.
Correct: 802.1X must be enabled globally on the switch for the feature to function on individual interfaces.