Home » Cisco » 300-208 » Which command is the user missing in the switch’s configuration ?
A user reports that a switch’s RADIUS accounting packets are not being seen on the Cisco ISE Server. Which command is the user missing in the switch’s configuration ?
A. radius-server vsa send accounting
B. aaa accounting network default start-stop group radius
C. aaa accounting resource default start-stop group radius
D. aaa accounting exec default start-stop group radius
Correct Answer: A
Explanation/Reference:
radius-server vsa send accounting
–> Configure the switch to use the Cisco vendor-specific attributes answer D, question-speak about 802.1x closed mode device need to send Eapol_start message into the network
Closed Mode is similar to the default behavior of 802.1X. the port does not allow any traffic before the authentication
(except for EAP, CDP, and LLDP), and then the port will be assigned to specific authorization results after the authentication.
Correct answer is A
Reference: https://i.imgur.com/i3h2kvg.png
Answers C, D, E is not used in 8021.x AAA peering
Reference : https://i.imgur.com/3UjcnNs.png
Correct answer is A
B, C, D are not used in 8021.x global AAA configuration.
https://i.imgur.com/ywIBVJe.png
Reference: Configure default AAA accounting method used with 802.1X by issuing the aaa accounting dot1x default start-stop group radius command in global configuration mode. This command will cause the switch to send RADIUS accounting messages when sessions start and when sessions terminate.
Configuration for RADIUS peering
https://i.imgur.com/i3h2kvg.png