Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing and Operating Cisco Security Core Technologies (SCOR) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A) ISE uses the NAS IP to match policies and shared secrets.
The RADIUS NAS-IP-Address Attribute Configurability feature allows you to configure an arbitrary IP address to be used as RADIUS attribute 4, NAS-IP-Address, without changing the source IP address in the IP header of the RADIUS packets. This feature may be used for situations in which service providers are using a cluster of small network access servers (NASs) to simulate a large NAS to improve scalability. This feature allows the NASs to behave as a single RADIUS client from the perspective of the RADIUS server. https://www.cisco.com/c/en/us/td/docs/ios/12_2sb/12_2sba/feature/guide/sbsiara.html
I would go with A When configuring AAA for network access control, the ip radius source-interface command is needed to specify the interface that the switch uses to send RADIUS requests to the server. The source interface is important because it determines the IP address that is used as the NAS-IP-Address attribute in the RADIUS packet. If the RADIUS server is configured to only accept requests that originate from a specific NAS IP address, then the switch must use that address as the source for its requests, or the authentication will fail. This is often the case in enterprise networks where strict access controls are in place. Therefore, the ip radius source-interface command is needed to ensure that the switch sends RADIUS requests from the correct IP address and that the RADIUS server will accept them. Without this command, the authentication may fail or be rejected by the RADIUS server.