You are configuring a network access control system for your company's wired network. You want to ensure that devices are authenticated before they are allowed to communicate on the network.

You also want to implement a system where the authentication credentials do not need to be stored on the network switches but can be validated by a server positioned in a secure zone within the private network.

Which of the following setups should you implement?

answer

VPN with pre$-$shared keys

SSH key pairs for device authentication

Direct authentication using LDAP

IEEE $802\mathrm{.}1$X using RADIUS server for authentication