Examkin

Question

Difficulty: EasyDevice Access Control and Local Password Authentication

A network technician is tasked with securing direct physical access to a Cisco switch console. Which two configuration steps are required to ensure that users connecting through the console port are authenticated against user accounts stored in the local device database? (Select two.)

  1. Configure the 'login local' command under line console 0 configuration mode.Answer
  2. Define a user account using the 'username <name> secret <password>' command in global configuration mode.Answer
  3. C
    Apply the 'transport input ssh' command under line console 0 configuration mode.
  4. D
    Set an explicit inbound access list using the 'ip access-group' command on line console 0.

Answer

To enforce local database authentication on the console line, a user account must be created in global configuration mode using 'username <name> secret <password>', and the console line must be configured with 'login local'.
Local authentication requires both a local database entry (created via global configuration 'username secret') and telling the specific line interface to check that database (using 'login local' under line console 0).

Step-by-Step Solution

1
Define local user credentials
User accounts are created in the local device database using global configuration commands.
The router or switch requires predefined accounts in its running configuration to perform local authentication.
2
Enable local authentication on the console line
Entering 'line console 0' and configuring 'login local' directs authentication attempts to the local user database.
Without 'login local', the line will either use a simple line password or allow unauthenticated access depending on default settings.

Key Concept

Local User Database Authentication on Cisco IOS Lines
Rate this question

Topics

Device Access Control and Local Password Authentication

More questions from this topic