You have configured an authenticator switch in access mode on a network configured
with NEAT. What RADIUS attribute must the ISE server return to change the switch’s
port mode to trunk?
A.
EAP-Message=switch
B.
Acct-Authentic=RADIUS
C.
device-traffic-class=trunk
D.
Authenticate=Administrative
E.
Framed-Protocol=1
F.
device-traffic-class=switch
Explanation:
http://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116681-config-neatcise-00.html
Supplicant Switch Authentication to Authenticator Switch
In this example, the supplicant authenticates to the authenticator. The steps in the process are:
The supplicant is configured and plugged into port fastethernet0/6. The dot1x exchange
causes the supplicant to use EAP in order to send a pre-configured username and password to the authenticator.
The authenticator performs a RADIUS exchange and provides credentials for ISE validation.
If the credentials are correct, the ISE returns attributes required by NEAT (device-trafficclass=switch), and the authenticator changes its switchport mode from access to trunk.