Examkin

Question

Difficulty: MediumDevice Access Control and Local Password Authentication

A network engineer observes the following partial running configuration on a Cisco IOS XE switch:

text
username netops privilege 15 secret Cisc0#2026!
!
line vty 0 4
password 7 094F471A1A0A
login
!

When administrators attempt to establish a remote SSH session to the switch, the prompt requests only a line password rather than asking for user credentials. Which command must be configured under line configuration mode to enforce authentication against the local user database?

  1. login localAnswer
  2. B
    login authentication local
  3. C
    service password-encryption
  4. D
    aaa new-model

Answer

The command 'login local' must be configured under line configuration mode to require local database authentication.
Configuring 'login local' under line configuration mode instructs Cisco IOS to authenticate incoming VTY session users using usernames and passwords stored in the router's local user database.

Step-by-Step Solution

1
Analyze current line configuration
The current line configuration contains the keyword 'login', which only checks the line password specified by 'password 7 094F471A1A0A'.
The standard 'login' keyword directs Cisco IOS to validate against line-specific passwords rather than individual user accounts.
2
Determine the required authentication behavior
Local user account 'netops' exists in global configuration, requiring VTY lines to perform local database lookups.
Security best practices demand individual accountability using local database credentials instead of shared line passwords.
3
Select the correct CLI command for line configuration mode
Configuring 'login local' under 'line vty 0 4' replaces line password authentication with local database authentication.
The 'local' parameter appended to 'login' explicitly directs the line interface to consult the device local account database for login verification.

Key Concept

Local Database Authentication on Cisco IOS Lines
Estimated Time:1m 0s
Rate this question

Topics

Device Access Control and Local Password Authentication

More questions from this topic