Refer to the exhibit. An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+.
Which action produces the desired configuration?
Refer to the exhibit. An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+.
Which action produces the desired configuration?
In order to configure the console line to use local authentication instead of TACACS+, you need to bind the specific authentication method to the console line configuration. The provided default authentication group is set to use TACACS+, but by adding the 'login authentication Console' command to the line configuration, you explicitly instruct the device to use the 'aaa authentication login Console local' method for the console line. This way, local authentication will be used for the console, achieving the desired configuration.
D sounds right: Example 2: Console Access Using Line Password Let's expand the configuration from Example 1 so that console login is only authenticated by the password set on line con 0. The list CONSOLE is defined and then applied to line con 0. We configure: Router(config)# aaa authentication login CONSOLE line In the command above: the named list is CONSOLE. there is only one authentication method (line). Once a named list (in this example, CONSOLE) is created, it must be applied to a line or interface for it to come into effect. This is done using the login authentication list_name command: Router(config)# line con 0 Router(config-line)# exec-timeout 0 0 Router(config-line)# password cisco Router(config-line)# login authentication CONSOLE https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/10384-security.html
D is right, the default authentication group is in use and you want it to use the Console group
D is right. There are 2 authentication profiles here: (1) default and (2) Console. (1) will first authenticate with TACACS+ (that is mentioned by the question) and (2) has not been applied to the console. D is binding (2) to con 0 configuration.
D is correct
The given answer is correct D
The given answer is correct