An engineer is deploying a new Cisco ISE environment for a company. The company wants the deployment to use TACACS+. The engineer verifies that Cisco ISE has a Device Administration license. What…

The correct answer is C. Device Admin service. Having a Device Administration license is necessary but not sufficient to use TACACS+ in Cisco ISE. The Device Admin service must also be explicitly enabled on the ISE deployment node(s) that will handle TACACS+ requests (Administration > System > Deployment > select node >…

Network Access Device Administration

Question

An engineer is deploying a new Cisco ISE environment for a company. The company wants the deployment to use TACACS+. The engineer verifies that Cisco ISE has a Device Administration license. What must be configured to enable TACACS+ operations?

Options

ADevice Administration Work Center
BDevice Administration Deployment settings
CDevice Admin service
DDevice Admin Policy Sets settings

How the community answered

(32 responses)

A
3% (1)
B
6% (2)
C
88% (28)
D
3% (1)

Explanation

Having a Device Administration license is necessary but not sufficient to use TACACS+ in Cisco ISE. The Device Admin service must also be explicitly enabled on the ISE deployment node(s) that will handle TACACS+ requests (Administration > System > Deployment > select node > Enable Device Admin Service). Without this service enabled, ISE will not listen on TCP port 49 for TACACS+ traffic regardless of licensing. The Device Administration Work Center (option A) is a UI navigation area, not a service that must be turned on. Policy Sets (option D) and Deployment settings (option B) are subsequent configuration steps, not the prerequisite service activation.

Topics

#TACACS+#Cisco ISE#Device Administration#Service Enablement

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice