An engineer is configuring secure remote management on a central router named Edge-Rtr1. The device has a valid hostname, an IP domain name configured, a 1024-bit RSA key pair generated, and a local administrator user defined in global configuration mode. The virtual terminal lines are configured with transport input ssh. However, when connecting via SSH from a remote client, the router prompts only for a password instead of requesting a username, causing all login attempts to fail. Which configuration change on Edge-Rtr1 resolves this issue?
- Apply the login local command under line vty configuration mode.Cevap
- BRegenerate the RSA key pair using a minimum modulus length of 2048 bits.
- CAdd an explicit permit statement to the implicit deny clause on the VTY lines.
- DConfigure ip ssh version 1 in global configuration mode to enable single-factor password prompts.
Cevap
Apply the login local command under line vty configuration mode to instruct the switch/router to authenticate against the local user database.
The correct answer specifies applying the 'login local' command under line vty configuration mode. When SSH is enabled, Cisco IOS requires an authentication source capable of verifying usernames and passwords. Standard 'login' only checks for a single line-level password. Applying 'login local' directs the VTY lines to validate incoming credentials against usernames created in the local database.
Adım Adım Çözüm
Anahtar Kavram
VTY Line Local Authentication Binding for SSH