Knowing that interface Gi0/2 on the switch may receive authentication requests from other devices and looking at the provided switch configuration, what could be the possible cause of this failure?

Refer to the exhibit.

aaa new-model

aaa authentication login default group radius

aaa authentication login NO_AUTH none

aaa authentication login vty local

aaa authentication dotiu default group radius

aaa authorization network default group radius

aaa accounting dotix default start-stop zo_us radius

!

username cisco privilege 15 passworl 0 cisco

dot1x system-auth-control

!

interface GigabitEthernet0/2

switchport mode access

ip access-group Pre-Auth in

authentication host-mode multi-auth

authentication open

authentication port-control auto

dotix pae authenticator

vlan 50

interface Vlan50

ip address 50.1 1.1 255 255.255.0

!

ip dhcp excluded•address 50.1.1 1

ip dhcp pool pc-pool

network 50.1.1.0 255 255.255.0

default-router 50.1.1 1

!

ip access-list extended Pre-Auth

deny udp any eq bootpc any eq bootpc

deny any any

!

radius server ccie

address ipv4 161.1.7.14 auth-port 1645 acct-port 1646

key cisco

!

line con 0

login authentication NO_AUTH

line vty 0 4

login authentication vty

One of the Windows machines in your network is experiencing a Dot1x authentication failure. Windows machines are setup to acquire an IP address from the DHCP server configured on the switch, which is supposed to hand over IP address from the 50.1.1.0/24 network, and forward AAA requests to the radius server at 161.1.7.14.

Knowing that interface Gi0/2 on the switch may receive authentication requests from other devices and looking at the provided switch configuration, what could be the possible cause of this failure?
A . an incorrect dhcp pool is configured
B . authentication is not enable on interface gi0/2
C . aaa dot1x authentication is not configured
D . authentication port-control is not set on interface gi0/2
E . an incorrect pre-authentication acl is configured

View Answer

Answer: E