Examkin

Soru

Zorluk: OrtaAAA Framework and Authentication Methods

An enterprise security team is deploying 802.1X port-based network access control across corporate network switches. In this architecture, the edge switch serves as the authenticator and relays Extensible Authentication Protocol (EAP) messages between the client host and a centralized authentication server. Which protocol is primarily utilized between the switch and the authentication server to transport these encapsulated EAP packets?

  1. RADIUSCevap
  2. B
    TACACS+
  3. C
    Kerberos
  4. D
    LDAP

Cevap

RADIUS is the standard protocol used by the network switch to encapsulate and relay 802.1X EAP authentication traffic to the central AAA server.
In an 802.1X framework, the supplicant (client) communicates with the authenticator (switch) using EAPoL (EAP over LAN). The authenticator then re-encapsulates these EAP messages into RADIUS packets (over UDP ports 1812/1813) to communicate with the backend AAA server.

Adım Adım Çözüm

1
Identify the role of the network switch in the 802.1X architecture.
The switch acts as the Authenticator, bridging client EAP over LAN (EAPoL) traffic to the backend server.
The switch does not make the final authentication decision; it relays credentials securely to the AAA server.
2
Determine the backend protocol capable of encapsulating EAP messages.
RADIUS natively supports EAP encapsulation (RADIUS attributes carry EAP packets over UDP).
802.1X explicitly defines RADIUS as the primary protocol for carrying EAP payloads from authenticators to authentication servers.

Anahtar Kavram

802.1X EAP Protocol Encapsulation via RADIUS
Bu soruyu puanla

Konular

AAA Framework and Authentication Methods

Bu konudan daha fazla soru