Question 144 of 530 from exam 400-251: CCIE Security written exam

Question 144 of 530 from exam 400-251: CCIE Security written exam

Prev Question Next Question

Question

Which configuration option will correctly process network authentication and authorization using both 802.1X and MAB on a single port?

interface FastEthernet1/0/9 switchport access vlan 200 switchport mode access switchport voice vlan 40 ip access-group ACL-DEFAULT in authentication event fail action next-method authentication event server dead action authorize vlan 200 authentication event server alive action reinitialize authentication host-mode multi-domain authentication open authentication order mab dotix authentication priority dotix mab authentication port-control auto authentication violation restrict mab dotix pae authenticator dotix timeout tx-period 10 spanning-tree portfast ip dhep snooping information option allow-untrusted end

A.

interface FastEthernet1/0/9 switchport access vlan 200 switchport mode access switchport voice vian 40 ‘ip access-group ACL-DEFAULT in authentication event fail action next-method authentication event server dead action authorize vlan 200 authentication event server alive action reinitialize authentication host-mode multi-domain authentication open authentication order mab dotix authentication priority dotix mab authentication violation restrict mab dotix pae authenticator dotix timeout tx-period 10 spanning-tree portfast ‘ip dhcp snooping information option allon-untrusted end

B.

‘interface FastEthernet1/0/9 switchport access vlan 200 switchport mode access switchport voice vlan 40 ip access-group ACL-DEFAULT in authentication event fail action next-method authentication event server dead action authorize vlan 200 authentication event server alive action reinitialize authentication host-mode multi-domain authentication open authentication order mab dotix authentication priority dotix mab authentication violation restrict mab dotix pae authenticator dotix timeout tx-period 10 spanning-tree portfast ip dhep snooping information option allow-untrusted end

C.

interface FastEthernet1/0/9 switchport access vlan 200 switchport mode access switchport voice vian 40 ‘ip access-group ACL-DEFAULT in authentication event fail action next-method authentication event server dead action authorize vlan 200 authentication event server alive action reinitialize authentication host-mode multi-domain authentication open authentication order mab dotix authentication priority dotix mab authentication port-control force-unauthorized authentication violation restrict mab dotix pae authenticator dotix timeout tx-period 10 spanning-tree portfast ‘ip dhcp snooping information option allon-untrusted end

D.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C.

A.

Prev Question Next Question