Refer to the exhibit. An engineer configured TACACS+ to authenticate remote users, but the configuration is not working as expected. Which configuration must be applied to enable access?
A.
R1 (config)# ip tacacs source-interface Gig 0/0
B.
R1 (config)# tacacs server prod - R1(config-server-tacacs)# port 1020
C.
R1 (config)# aaa authorization exec default group tacacs+ local
D.
R1 (config)# tacacs server prod - R1(config-server-tacacs)# key cisco123
The log message "TPLUS: Invalid AUTHEN packet (check keys)" from the exhibit indicates a problem with the shared secret between the client and server. TACACS+ utilizes symmetric-key cryptography. The authenticated client in our example used a different encryption key from the server's. Option 'C' ensures that both the client, and the server encrypt their messages using the same key (shared secret, or a.k.a. a pre-configured key.)
D.
bash
Copy code
R1(config)# tacacs server prod
R1(config-server-tacacs)# key cisco123
This configuration sets up the TACACS+ server named "prod" with the key "cisco123". Ensure that the key configured on the router matches the key configured on the TACACS+ server. Also, make sure that the TACACS+ server is reachable and correctly configured to handle authentication requests from the router.
This is a sample debug output from the Router, when the TACACS server is configured with a wrong pre shared key:
...
*Apr 6 13:35:07.886: TPLUS: received bad AUTHEN packet: length = 6, expected 43974
*Apr 6 13:35:07.886: TPLUS: Invalid AUTHEN packet (check keys).
https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200467-Troubleshoot-TACACS-Authentication-Issue.html
This section is not available anymore. Please use the main Exam Page.350-401 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
AbdullahMohammad251
6 months, 4 weeks ago[Removed]
11 months agoteems5uk
1 year, 3 months agoHorsefeathers
1 year, 4 months agoraajj354
1 year, 4 months agoShri_Fcb10
7 months, 2 weeks agoIgorLVG
1 year, 1 month agokaupz
1 year, 5 months ago