Examkin

Question

Difficulty: MediumDevice Access Control and Local Password Authentication

A network engineer is hardening access to a Cisco IOS router. The local user account is created using `username admin1 secret P@ssw0rd123`. However, when administrators attempt to log in remotely via SSH, the router requests only a password rather than asking for a username first. Which command must be configured under `line vty 0 4` to force the router to authenticate users against the local user database?

  1. login localAnswer
  2. B
    service password-encryption
  3. C
    aaa new-model
  4. D
    access-class 10 in

Answer

The login local command must be configured under line vty configuration mode to enforce local username and password authentication.
The command 'login local' applied under line configuration mode instructs Cisco IOS to prompt remote users for both a username and a password, validating them against credentials stored in the router's local database.

Step-by-Step Solution

1
Analyze the observed behavior
The router prompts only for a password during remote access, indicating the default line password authentication (login command) is active rather than local user database authentication.
By default, VTY lines configured with the login keyword require a password set on the line itself and do not prompt for a username.
2
Identify the required command for local database authentication
Configuring login local under line vty 0 4 tells the router to prompt for both username and password.
The login local command directs Cisco IOS to verify incoming connection credentials against user accounts configured in the global local database.

Key Concept

Line VTY Local Authentication Configuration
Rate this question

Topics

Device Access Control and Local Password Authentication

More questions from this topic