An administrator is configuring TACACS+ on a Cisco switch but cannot authenticate users with Cisco ISE. The configuration contains the correct key of Cisc039712287. But the switch is not receiving a…

Question

Options

• ACheck for server reachability using the test aaa group tacacs+ admin <key> legacy command.
• BTest the user account on the server using the test aaa group radius server CUCS user admin
• CValidate that the key value is correct using the test aaa authentication admin <key> legacy
• DConfirm the authorization policies are correct using the test aaa authorization admin drop

• A
  79% (31)
• B
  8% (3)
• C
  10% (4)
• D
  3% (1)

Explanation

The correct IOS command to test TACACS+ server group reachability and authentication is: 'test aaa group tacacs+ <username> <key> legacy'. This command sends a test authentication request to the configured TACACS+ server group, allowing the administrator to verify both network reachability to ISE and that the shared secret key is correct. The 'legacy' keyword ensures compatibility with older IOS authentication mechanisms. Option B is incorrect because it references RADIUS (not TACACS+) and uses a non-standard syntax. Option C is incorrect because the command syntax shown does not include the required group specification and uses a non-standard format. Option D is incorrect because authorization testing is a separate concern and would not identify the reachability issue described.

No community discussion yet for this question.