A network administrator is configuring a new Network Access Device (NAD) in ClearPass. They select RadSec for the network device and notice that the PSK field automatically changes to 'radsec' regardless of what is typed. What is the most likely reason for this behavior?
As discussed in Q5, RadSec utilizes TLS for security, which renders the traditional RADIUS MD5 shared secret obsolete. In the ClearPass interface, when RadSec is selected as the protocol, the system automatically defaults the PSK to 'radsec' because the underlying communication is now secured by certificates, not a password. This is a standard behavior of the protocol implementation in HPE Aruba products to indicate that certificate-based trust is now the priority.
Currently there are no comments in this discussion, be the first to comment!