Question

Difficulty: MediumCommon Ports and Protocols

A network administrator is configuring perimeter security rules to allow an internal Remote Authentication Dial-In User Service (RADIUS) server to authenticate wireless users against an external partner system. Which transport protocol and destination port pair must be permitted through the firewall for standard RADIUS authentication traffic?

  1. UDP port 1812Answer
  2. B
    TCP port 1812
  3. C
    UDP port 1813
  4. D
    TCP port 49

Answer

Standard RADIUS authentication traffic operates over UDP port 1812.
UDP port 1812 is the standard IANA-assigned port for RADIUS authentication and authorization traffic. RADIUS uses UDP for lightweight connectionless transmission.

Step-by-Step Solution

1
Identify the protocol and required function in the scenario
The scenario requires RADIUS performing authentication.
RADIUS separates authentication/authorization (port 1812) from accounting functions (port 1813).
2
Determine the transport protocol used by RADIUS
RADIUS uses UDP rather than TCP at the Transport Layer.
RADIUS relies on connectionless UDP transport and handles retransmissions at the application layer.
3
Select the correct port and transport protocol pairing
UDP port 1812 is the official standard IANA port for RADIUS authentication.
UDP 1812 ensures RADIUS authentication requests reach the RADIUS daemon properly.

Key Concept

RADIUS Port Numbers and Protocols
Estimated Time:1m 0s
Rate this question