Question 780
At a manufacturing complex in Detroit, engineers report that the authentication server returns a VLAN assignment that the edge switch has not provisioned. The work affects production and maintenance endpoints. What evidence should the engineer request after the repair?
Explanation
Correct Answer
This observation tests the RADIUS returned roles and downloadable policy requirement at a manufacturing complex in Detroit. The expected result is that authenticated clients inherit the intended role and its actual VLAN or service ACL rather than merely reporting RADIUS success. The necessary correction is to map authorized RADIUS attributes or ClearPass downloadable roles to the switch policy and VLAN assignment; a saved configuration alone would not prove it is working. In this case, the observed fault is that the authentication server returns a VLAN assignment that the edge switch has not provisioned.
Incorrect Answers
At a manufacturing complex in Detroit, the observation may be useful for a separate Wired 802.1X supplicant and RADIUS flow test, but it does not establish that the authentication server returns a VLAN assignment that the edge switch has not provisioned has been resolved. The relevant check is the RADIUS returned roles and downloadable policy outcome.
At a manufacturing complex in Detroit, this measures a different network requirement, MAC authentication fallback and headless devices. The case describes that the authentication server returns a VLAN assignment that the edge switch has not provisioned, so accepting this result would leave the primary fault without direct verification.
At a manufacturing complex in Detroit, this would verify Multi-domain port access, CoA and failure behavior, not the failure reported in this scenario. The requested closure criterion instead concerns RADIUS returned roles and downloadable policy: authenticated clients inherit the intended role and its actual VLAN or service ACL rather than merely reporting RADIUS success.