Examkin

Question

Difficulty: MediumDevice Access Control and Local Password Authentication

A network technician needs to harden local console line access on a Cisco IOS XE switch using the local user database. Arrange the following Cisco IOS CLI commands in the correct sequential order required to perform this configuration, starting from Privileged EXEC mode (`Switch#`).

  1. 1configure terminal
  2. 2username admin algorithm-type scrypt secret C1scoPass123!
  3. 3line console 0
  4. 4login local
  5. 5exit

Answer

The correct command sequence begins with entering global configuration mode (`configure terminal`), creating the local user account (`username admin algorithm-type scrypt secret C1scoPass123!`), accessing the line console context (`line console 0`), enforcing local authentication (`login local`), and exiting line configuration mode (`exit`).
Configuring local user access requires navigating hierarchy levels in Cisco IOS. Starting from `Switch#`, the administrator enters global configuration mode using `configure terminal`. Next, creating the local account with `username ... secret ...` populates the local user database. The technician then transitions into line configuration mode with `line console 0` and binds authentication to the local database using `login local`. Finally, issuing `exit` leaves line configuration mode.

Step-by-Step Solution

1
Transition from Privileged EXEC mode to Global Configuration mode.
Prompt changes to `Switch(config)#`.
Global configuration commands cannot be executed directly from Privileged EXEC mode.
2
Create the local administrator user account using `username admin algorithm-type scrypt secret C1scoPass123!`.
Local database account is created with a strong Type 9 encrypted secret.
The local account must exist in the device configuration so local authentication succeeds.
3
Navigate into line console configuration mode using `line console 0`.
Prompt changes to `Switch(config-line)#`.
Line-specific authentication settings must be applied within the line configuration sub-mode.
4
Apply the `login local` command under line console configuration.
Console prompt prompts for a username and password defined in the local database.
By default, console lines may require only a line password or no authentication; `login local` forces local database verification.
5
Execute `exit` from line configuration mode.
Prompt returns to `Switch(config)#`.
Completes line configuration and returns to global configuration mode.

Key Concept

Local Database Authentication and Line Console Security Configuration
Estimated Time:1m 30s
Rate this question

Topics

Device Access Control and Local Password Authentication

More questions from this topic