nerdexam
Cisco

300-620 · Question #272

A Cisco APIC is configured to authenticate users by using RADIUS by default. The network administrator must ensure that the users can access the APIC GUI with a local account if the RADIUS server is…

The correct answer is B. Configure the fallback login domain to reference Local Realm. When RADIUS is used as the primary authentication on Cisco APIC, setting the fallback login domain to "Local Realm" ensures that if external authentication (like RADIUS) fails or is unreachable, APIC will consult the local user database for authentication. This mechanism…

ACI Management

Question

A Cisco APIC is configured to authenticate users by using RADIUS by default. The network administrator must ensure that the users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action achieves this goal?

Options

  • AEnable Fallback Check for Default Authentication.
  • BConfigure the fallback login domain to reference Local Realm.
  • CSet RADIUS Realm to connect with Console Authentication.
  • DCreate an additional login domain to associate with local accounts.

How the community answered

(24 responses)
  • B
    96% (23)
  • D
    4% (1)

Explanation

When RADIUS is used as the primary authentication on Cisco APIC, setting the fallback login domain to "Local Realm" ensures that if external authentication (like RADIUS) fails or is unreachable, APIC will consult the local user database for authentication. This mechanism guarantees administrative access in case of remote authentication outages without requiring special login strings or additional configuration changes.

Topics

#APIC authentication#RADIUS#local accounts#fallback login

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice