A Cisco ACI fabric is configured with these objects: - login domain named Domain_1 - TACACS+ provider group named Tacacs_ProvGro - TACACS+ server IP 10.43.145.1 Which action set allows users to log…

Question

Options

• AAdd IP 10.43.145.1 under Tacacs_ProvGro.
• BAdd IP 10.43.145.1 under default AAA authentication.
• CAdd IP 10.43.145.1 under Tacacs_ProvGro.
• DAdd IP 10.43.145.1 under Domain_1.

• A
  74% (20)
• B
  7% (2)
• C
  4% (1)
• D
  15% (4)

Explanation

To allow users to log in to the Cisco APIC using TACACS+ credentials without needing to specify the domain (Domain_1) for each login, the following configuration steps are required: 1. Add the TACACS+ server IP address (10.43.145.1) under the provider group Tacacs_ProvGro: This step ensures the APIC communicates with the correct TACACS+ server for authentication. 2. Associate Tacacs_ProvGro with Domain_1: Associating the TACACS+ provider group with the login domain enables authentication of users associated with that domain. 3. Set the default AAA authentication realm to TACACS+: By setting the default realm to TACACS+, the APIC will prioritize TACACS+ as the default authentication method. This eliminates the need for users to explicitly specify the login domain (Domain_1) during the login

No community discussion yet for this question.