Exam 300-208 topic 1 question 53 discussion

Create a named authenttication list, lets call it CONSOLE; Switch(config)#aaa authentication login CONSOLE group tacacs+ local Create a named authorization list, again called CONSOLE Switch(config)#aaa authorization exec CONSOLE group tacacs+ local if-authenticated Then apply the following under line con 0; Switch(config-line)#login authentication CONSOLE Switch(config-line)#authorization exec CONSOLE Since local is defined as the secondary method of authentication/authorization be sure to have a local privilege 15 user defined in the event your tacacs server isn't available. Switch(config)#username MYUSERNAME privilege 15 secret 0 MYPASSWORD