Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) — Question 241

A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?

Answer options

• A. Configure ip tacacs-server source-interface GigabitEthernet 1/1.
• B. Configure ip tacacs source-ip 192.168.100.55.
• C. Configure ip tacacs source-interface GigabitEthernet 1/1.
• D. Configure ip tacacs-server source-ip 192.168.100.55.

Correct answer: C

Explanation

The correct answer is C because configuring the source interface for TACACS+ ensures that the switch uses the specified interface to send authentication requests, which is essential for proper communication with the TACACS+ server. The other options either contain incorrect command syntax or mix up the source interface and source IP configuration, which would not resolve the authentication issue.