Configuring IEEE 802.1X Flexible Authentication for Layer 3
Short answer
D Configure WebAuth so the hosts are redirected to a web page for authentication.
Question
Key Takeaways
The core concept tested is identifying which authentication method within the 802.1X framework operates at Layer 3 versus Layer 2.
This question explores the configuration of IEEE 802.1X Flexible Authentication methods, specifically distinguishing between Layer 2 and Layer 3 mechanisms to identify the correct action for Layer 3 support.
Common mistake: Many learners select MAC Authentication Bypass (MAB) because it acts as a fallback mechanism, but MAB itself is fundamentally a Layer 2 authentication method based on hardware addresses.
Expert Analysis
Why the Answer Is Correct
IEEE 802.1X Flexible Authentication supports three distinct methods: dot1x, mab, and webauth. WebAuth is explicitly defined as a Layer 3 authentication method because it relies on IP connectivity to redirect users to a web portal for credentials. Configuring WebAuth allows the switch to authenticate hosts that cannot perform standard 802.1X exchanges by using HTTP/HTTPS redirection.
Why the Other Options Are Wrong
Option A refers to VPN server configurations which are not part of the local switch's 802.1X flexible authentication feature set. Option B describes policy creation rather than the specific authentication mechanism configuration. Option C suggests adding MAC Authentication Bypass (MAB), which is incorrect because MAB authenticates devices based on their MAC address at Layer 2, not Layer 3.
Community Comment Notes
Community consensus strongly favors WebAuth. As noted by user klu16, "A & C are Layer 2... webauth--Web authentication is a Layer 3 authentication method." User KnightHeart also reinforced this by stating simply, "Only D is layer 3," highlighting the fundamental distinction between the protocols.
Exam Strategy
When studying 802.1X, memorize the three supported methods: dot1x (Layer 2), mab (Layer 2), and webauth (Layer 3). Exam questions often ask you to differentiate these based on the OSI layer or the type of credential used.
Frequently Asked Questions
Is MAB a Layer 2 or Layer 3 authentication?
Why is WebAuth considered Layer 3 in 802.1X?
Community Votes
75% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
klu16 👍 2A & C are Layer 2. IEEE 802.1X Flexible Authentication Methods The IEEE 802.1X Flexible Authentication feature supports three authentication methods: dot1X--IEEE 802.1X authentication is a Layer 2 authentication method. mab--MAC-Authentication Bypass is a Layer 2 authentication method. webauth--Web authentication is a Layer 3 authentication method. So, it's D imo.
-
madboy2 👍 1 Answered CThe IEEE 802.1X Flexible Authentication feature allows for Layer 3 authentication mechanisms (such as web-based or other IP-based mechanisms) in addition to the standard Layer 2 authentication. By configuring MAC Authentication Bypass (MAB), devices that cannot support 802.1X can be redirected to Layer 3 authentication methods such as web authentication or other external methods. 🔹 MAB is used to redirect devices to a Layer 3 device (like a web server or a different authentication service) for authentication when 802.1X authentication fails (or when the device cannot perform Layer 2 authentication). This action is especially useful when integrating non-802.1X-capable devices into a secure network environment where they must be authenticated using Layer 3 mechanisms.
-
KnightHeart 👍 3 Answered DOnly D is layer 3
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.