MENU
An engineer is unable to use SSH to connect to a switch after adding the required CLI commands to the device to enable TACACS+. The device administration license has been added to Cisco ISE, and the required policies have been created. Which action is needed to enable access to the switch?
Suggested Answer: D
Get Premium 300-715 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
JO
Johana
11 months ago
Wait, does TACACS+ really affect SSH like that?
JO
Johnna
11 months ago
Adding the switch in Cisco ISE is a must!
JO
Johnson
11 months ago
Definitely need to check the RSA keypair after TACACS+ setup.
EL
Eladia
11 months ago
I think 802.1X is not the issue here.
SH
Shenika
12 months ago
The ip ssh source-interface command is crucial for SSH access.
KA
Kayleigh
12 months ago
Adding the switch as a network device in Cisco ISE sounds familiar, but I’m not confident if that’s the right step to take in this scenario.
TE
Terrilyn
1 year ago
I feel like regenerating the RSA keypair could be a possibility, but I don't know if that’s necessary just because TACACS+ was enabled.
ED
Edward
1 year ago
I think we might have covered a similar question where we had to configure 802.1X, but I can't recall if it applies here since TACACS+ is already set up.
AM
Amber
1 year ago
I remember something about needing to set the SSH source interface, but I'm not entirely sure if that's the only thing we need to check.
JA
Janet
1 year ago
Ah, I see. The question is really about making sure the integration between the switch and Cisco ISE is set up correctly. Option D sounds like the right approach to me.
JE
Jeannine
1 year ago
Based on my understanding, the issue is likely with the SSH configuration on the switch. I'd start by checking the ip ssh source-interface command to ensure it's set properly.
SH
Sharee
1 year ago
Wait, I'm a bit confused. Didn't we just enable TACACS+ on the switch? Why would we need to add it to Cisco ISE as well?
CH
Chaya
1 year ago
Okay, I think I know the answer here. The key is making sure the switch is properly configured in Cisco ISE to use TACACS+ for authentication.
WH
Whitney
1 year ago
Hmm, this seems tricky. I'll need to carefully consider the different options and think through the logical steps.
DA
Darrin
2 years ago
Wow, I'm impressed they're testing our Cisco ISE knowledge. Gotta love those enterprise-level authentication protocols.
AR
Arlene
2 years ago
D) The switch needs to be added as a network device in Cisco ISE and set to use TACACS+.
MO
Monroe
2 years ago
C) The RSA keypair used for SSH must be regenerated after enabling TACACS+.
MO
Mollie
2 years ago
A) The ip ssh source-interface command needs to be set on the switch
VE
Velda
2 years ago
Haha, 802.1X? On a switch? What is this, a wireless network? I'm going with the Cisco ISE option.
NA
Nancey
2 years ago
Regenerating the RSA keypair? That's a bit overkill, don't you think? Let's just add the switch to Cisco ISE and be done with it.
TO
Tonette
2 years ago
Ah, I see! The switch needs to be registered with Cisco ISE as a network device and set to use TACACS+ authentication. Makes sense.
AL
Aliza
2 years ago
User 3: Did you also regenerate the RSA keypair for SSH after enabling TACACS+?
PA
Page
2 years ago
User 2: Yes, I did that and set it to use TACACS+ authentication.
FL
Fletcher
2 years ago
User 1: Have you tried adding the switch as a network device in Cisco ISE?
AN
An
2 years ago
I don't think regenerating the RSA keypair is necessary if TACACS+ has already been enabled. Adding the switch to Cisco ISE should do the trick.
DE
Devorah
2 years ago
But what about regenerating the RSA keypair used for SSH? Could that also be a solution?
CU
Curtis
2 years ago
Wait, so we need to add the switch to Cisco ISE and configure it to use TACACS+? Seems like a lot of work just to get SSH access.
GR
Gregoria
2 years ago
It may seem like a lot of work, but it's important for security and access control.
LA
Latrice
2 years ago
Yes, that's correct. Adding the switch to Cisco ISE and configuring TACACS+ is necessary for SSH access.
GL
Glendora
2 years ago
I agree with An, that seems like the most logical step to enable access to the switch.
AN
An
2 years ago
I think the switch needs to be added as a network device in Cisco ISE and set to use TACACS+.