Which interface-level command is needed to turn on 802.1X authentication?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/dot1x.htmlThe correct answer is B. dot1x pae authenticator.
The dot1x protocol provides port-based access control by authenticating devices using 802.1X authentication. This protocol helps prevent unauthorized access to a network and ensures that only authorized devices are allowed to connect to the network.
To turn on 802.1X authentication on a switch port, the "dot1x pae authenticator" command needs to be configured on the interface. This command configures the port as an 802.1X authenticator, which will initiate the authentication process with the connected device.
Option A, "dot1x system-auth-control," is a global configuration command that enables the switch to use the 802.1X authentication process for system-level authentication. This command is not specific to interface-level authentication.
Option C, "aaa server radius dynamic-author," is a command used to configure a RADIUS server for dynamic authorization, which is not related to interface-level authentication.
Option D, "authentication host-mode single-host," is a command used to configure the interface to allow only one host to be connected per port, which is not related to 802.1X authentication.
Therefore, the correct command to turn on 802.1X authentication at the interface level is "dot1x pae authenticator."