DOT1X Authentication

Question 1

DOT1X must use what kind of server?

Answer 1

Radius server, not TACACS.

Question 2

DOT1X must be enabled on the __ and the __ to work.

Answer 2

Switch and host.

Question 3

How does a host communicate with the radius server before it’s authenticated?

Answer 3

With the uncontrolled port.

Question 4

After a host is authenticated, its ___ is unlocked.

Answer 4

Controlled port.

Question 5

What are the three interface options for DOT1X?

Answer 5

Force-authorize (default) which authenticates a host no matter what, force-unauthorize which never authenticates a host, and auto which authenticates based on the hosts’ radius exchange.

Question 6

Can port security and DOT1X run on the same port?

Answer 6

Yes.

Question 7

How is 802.1x configured for port security?

Answer 7

RADIUS

Question 8

What are the 6 steps to configure 802.1x for port security?

Answer 8

1-enable AAA on switch, 2-define RADIUS servers, 3-define authentication method, 4-enable 802.1x on switch, 5-conf. 802.1x ports, 6-allow hosts

Question 9

What is 802.1x force-authorized?

Answer 9

the port is forced to always authorize any connected client with no authentication necessary (default)

Question 10

What is 802.1x force-unauthorized?

Answer 10

port is forced to never authorize any connected client

Question 11

What is 802.1x auto?

Answer 11

The port uses 802.1x exchange to move from unauthorized to authorized. Requires app on client

Question 12

What scope is 802.1x enabled?

Answer 12

globally

Question 13

What is 802.1X?

Answer 13

802.1x is the mechanism that will block or unblock an interface and provides security at Layer 2. It is also known as port-based control.