A network administrator is hardening remote management access on a gateway router named WAN-Edge01. The router already has a non-default hostname, a domain name configured (enterprise.net), and a 2048-bit RSA key generated. Security standards mandate that SSH Version 1 connections must be explicitly disabled and incoming VTY sessions must authenticate using the local router user database.
Which combination of commands satisfies these operational requirements?
- Execute 'ip ssh version 2' in global configuration mode and 'login local' in line vty configuration mode.Cevap
- BExecute 'ip ssh version 1' in global configuration mode and 'login' in line vty configuration mode.
- CExecute 'crypto key generate rsa' in global configuration mode and 'transport input all' in line vty configuration mode.
- DExecute 'ip ssh authentication-retries 2' in global configuration mode and 'transport output ssh' in line vty configuration mode.
Cevap
Executing 'ip ssh version 2' in global configuration mode and 'login local' in line vty configuration mode satisfies both requirements by enforcing SSH version 2 and requiring local database authentication for incoming sessions.
The requirement asks to explicitly disable SSH v1 (enforce SSH v2) and require authentication via the local router database. Using 'ip ssh version 2' globally restricts remote SSH connections to version 2 only. Entering 'login local' under line vty configuration mode binds incoming terminal connections to the router's local user account database.
Adım Adım Çözüm
Anahtar Kavram
SSH Version 2 Enforcement and VTY Local Authentication