300-620 · Question #334
300-620 Question #334: Real Exam Question with Answer & Explanation
The correct answer is A: Add IP 10.43.145.1 under Tacacs_ProvGro.. To allow users to log in to the Cisco APIC using TACACS+ credentials without needing to specify the domain (Domain_1) for each login, the following configuration steps are required: 1. Add the TACACS+ server IP address (10.43.145.1) under the provider group Tacacs_ProvGro: This s
Question
Options
- AAdd IP 10.43.145.1 under Tacacs_ProvGro.
- BAdd IP 10.43.145.1 under default AAA authentication.
- CAdd IP 10.43.145.1 under Tacacs_ProvGro.
- DAdd IP 10.43.145.1 under Domain_1.
Explanation
To allow users to log in to the Cisco APIC using TACACS+ credentials without needing to specify the domain (Domain_1) for each login, the following configuration steps are required: 1. Add the TACACS+ server IP address (10.43.145.1) under the provider group Tacacs_ProvGro: This step ensures the APIC communicates with the correct TACACS+ server for authentication. 2. Associate Tacacs_ProvGro with Domain_1: Associating the TACACS+ provider group with the login domain enables authentication of users associated with that domain. 3. Set the default AAA authentication realm to TACACS+: By setting the default realm to TACACS+, the APIC will prioritize TACACS+ as the default authentication method. This eliminates the need for users to explicitly specify the login domain (Domain_1) during the login
Community Discussion
No community discussion yet for this question.