A company is deploying new Cisco switches on a local network. The network engineer must configure TACACS+ between the switches and Cisco ISE. What configuration value is mandatory on the switch and…

Question

Options

• AAuthentication Profile
• BCoA Port
• CShared Secret
• DKey Encryption Key

• A
  5% (2)
• B
  3% (1)
• C
  89% (33)
• D
  3% (1)

Explanation

The shared secret (also called a 'key') is the single mandatory configuration value that must be identically configured on both the TACACS+ client (the Cisco switch) and the TACACS+ server (Cisco ISE). It serves as a pre-shared password used to authenticate the connection and encrypt sensitive fields in TACACS+ packets between the two devices. If the shared secret does not match on both sides, the TACACS+ session will fail entirely. On the switch, this is typically set with the command 'tacacs server <name>' followed by 'key <secret>'. On ISE, it is entered when adding the network device. The other options are not mandatory: Authentication Profile and Key Encryption Key are not required TACACS+ parameters, and CoA (Change of Authorization) Port is a RADIUS-specific feature used for dynamic policy changes, not a TACACS+ requirement.

No community discussion yet for this question.