QuestionQ14

Security

An engineer must configure AAA on a Cisco MDS 9000 Series Switch. The solution must meet these requirements:

  • It must use a challenge-response authentication protocol that uses MD5 hashing with an incrementally changing identifier.
  • The RADIUS configuration must be automatically shared with other MDS switches in the environment.

The RADIUS server has already been defined. Which command set completes the configuration?

  • A aaa authentication login chap enable radius distribute radius commit
  • B aaa authentication login pap enable distribute radius radius-server host 10.8.8.0 auth-port 1821
  • C aaa authentication login mschapv2 enable radius propagate radius authentication port 1821
  • D aaa authentication login mschap enable radius commit radius-server host 10.8.8.0
Explanation

CHAP is a challenge-response authentication protocol that uses MD5 hashing, and aaa authentication login chap enable enables it on Cisco MDS. radius distribute enables RADIUS configuration distribution through Cisco Fabric Services, while radius commit commits the distributed configuration to the running configuration on the participating switches.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!