A company wants to implement RADIUS authentication of all managers who log in to AOS-Switches via SSH. The RADIUS server also sends VSAs that indicate which commands users can enter, and switches must honor these.
What must the administrator do to meet the company's requirements?
To meet the company's requirements, the administrator must set command authorization to RADIUS, which enables the switch to accept RADIUS Vendor-Specific Attributes (VSAs) that dictate which commands users can execute. Additionally, the administrator should configure RADIUS for aaa authentication ssh login and aaa authentication ssh enable, ensuring that authentication for SSH logins and enabling privilege modes are handled through RADIUS.
Correct answer is C.
A. Set the command access level to manager mode; also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable. B. Set RADIUS for aaa authentication ssh login, also enable authentication privilege-login mode, which allows the switch to accept all RADIUS VSAs. C. Set command authorization to RADIUS, also set RADIUS for aaa authentication ssh login and aaa authentication ssh enable. D. Set RADIUS for aaa authentication ssh enable, which allows the switch to accept all RADIUS VSAs.