Examkin

Question

Difficulty: EasySSH Secure Remote Access Configuration and Verification

A network administrator is configuring SSH version 2 on a freshly unpacked Cisco IOS router. Which TWO configuration steps are required before the router will allow the generation of RSA host keys using the 'crypto key generate rsa' command? (Choose two.)

  1. Configure a non-default device hostname using the 'hostname' commandAnswer
  2. Configure an IP domain name using the 'ip domain name' commandAnswer
  3. C
    Enable local authentication on the VTY lines using the 'login local' command
  4. D
    Restrict line protocol access using the 'transport input ssh' command under line vty

Answer

The correct prerequisites are configuring a non-default hostname and setting an IP domain name.
Generating RSA keys on Cisco IOS depends directly on having a fully qualified domain name (FQDN). The FQDN is formed by combining the device hostname and the configured IP domain name. Therefore, both setting a unique hostname and defining an IP domain name are mandatory prerequisites prior to issuing the RSA key generation command.

Step-by-Step Solution

1
Identify the requirement for RSA key generation in Cisco IOS
The router uses the combination of the hostname and IP domain name to construct the Fully Qualified Domain Name (FQDN) key pair label.
Without a custom hostname (other than the default 'Router') and an IP domain name, the key generation command will fail.
2
Differentiate prerequisite host key configuration steps from VTY line binding steps
Hostname and domain name must be configured before executing 'crypto key generate rsa'. Line VTY commands like 'login local' and 'transport input ssh' are applied afterward to manage connection access.
RSA key creation is a system-level cryptographic prerequisite for initializing the SSH daemon.

Key Concept

Prerequisites for generating RSA key pairs for SSH remote access on Cisco IOS devices
Rate this question

Topics

SSH Secure Remote Access Configuration and Verification

More questions from this topic