300-715 · Question #158
An administrator is configuring cisco ISE lo authenticate users logging into network devices using. Which action ensures the users are able to log into the network devices?
The correct answer is D. Enable the device administration service in the PSN persona. The Device Administration service (TACACS+) must be enabled on the Policy Service Node (PSN) persona. The PSN is the node that actually handles authentication and authorization sessions. The Administration persona (PAN) is used for configuration and management of the ISE…
Question
An administrator is configuring cisco ISE lo authenticate users logging into network devices using. Which action ensures the users are able to log into the network devices?
Options
- AEnable the device administration service in the Administration persona
- BEnable the session services in the administration persona
- CEnable the service sessions in the PSN persona.
- DEnable the device administration service in the PSN persona.
How the community answered
(44 responses)- A2% (1)
- B2% (1)
- C7% (3)
- D89% (39)
Explanation
The Device Administration service (TACACS+) must be enabled on the Policy Service Node (PSN) persona. The PSN is the node that actually handles authentication and authorization sessions. The Administration persona (PAN) is used for configuration and management of the ISE deployment but does not process TACACS+ authentication requests. Without enabling Device Administration on the PSN, the switch or router will not be able to reach an active TACACS+ listener to authenticate login attempts.
Topics
Community Discussion
No community discussion yet for this question.