In AOS10 Tunneled mode, which component provides RADIUS proxy functionality?

In AOS10 Tunneled mode, which component provides RADIUS proxy functionality?

• A. Access Point
• B. Access Point and Gateway
• C. Device Designated Gateway
• D. Overlay Tunnel Orchestrator

Answer: (D)

In this mode, the control and coordination of the tunnel are handled centrally by the Overlay Tunnel Orchestrator, which also acts as the RADIUS proxy. This component receives authentication requests from the tunneled APs and forwards them to the AAA/RADIUS server, returning responses back through the tunnel. That central proxying is essential because, with APs operating as tunnel endpoints, the authentication traffic isn’t directly handled by the APs or by the gateway in the same way as in traditional architectures. The Overlay Tunnel Orchestrator is designed to manage the overlay tunnels and the associated authentication flows, making it the correct source of RADIUS proxy functionality. The device designated gateway terminates tunnels and enforces policies, but it isn’t the component that provides the RADIUS proxy role by itself, and an AP alone doesn’t perform that proxy function in tunneled mode.

In this mode, the control and coordination of the tunnel are handled centrally by the Overlay Tunnel Orchestrator, which also acts as the RADIUS proxy. This component receives authentication requests from the tunneled APs and forwards them to the AAA/RADIUS server, returning responses back through the tunnel. That central proxying is essential because, with APs operating as tunnel endpoints, the authentication traffic isn’t directly handled by the APs or by the gateway in the same way as in traditional architectures. The Overlay Tunnel Orchestrator is designed to manage the overlay tunnels and the associated authentication flows, making it the correct source of RADIUS proxy functionality. The device designated gateway terminates tunnels and enforces policies, but it isn’t the component that provides the RADIUS proxy role by itself, and an AP alone doesn’t perform that proxy function in tunneled mode.