Examkin

Soru

Zorluk: OrtaSSH Secure Remote Access Configuration and Verification

A network administrator is hardening remote management access on a factory-reset Cisco IOS router currently running default factory settings. In what sequential order must the administrator execute the CLI commands to properly configure SSHv2 access using local user authentication?

  1. 1Configure a non-default hostname (`hostname RTR-CORE-02`).
  2. 2Define the IP domain name (`ip domain-name enterprise.net`).
  3. 3Generate the RSA key pair with a minimum 768-bit modulus (`crypto key generate rsa modulus 2048`).
  4. 4Create a local user account in the database (`username secadmin secret P@ssw0rd123`).
  5. 5Configure VTY lines to use local authentication and restrict transport to SSH (`line vty 0 4`, `login local`, `transport input ssh`).

Cevap

The correct sequence starts with setting a non-default hostname, followed by defining the IP domain name, generating the RSA key pair (modulus >= 768 bits), creating a local user account, and finally configuring the VTY lines with local authentication and SSH transport binding.
Configuring SSHv2 on Cisco IOS requires satisfying dependencies in order: first, set a non-default hostname; second, assign an IP domain name (forming the FQDN); third, generate the RSA key pair with at least 768 bits; fourth, create local user credentials; and fifth, configure VTY lines with `login local` and `transport input ssh`.

Adım Adım Çözüm

1
Set a non-default hostname using `hostname RTR-CORE-02`.
The router host prompt updates from `Router` to `RTR-CORE-02`.
RSA key generation requires a host name other than the default 'Router'.
2
Configure the IP domain name using `ip domain-name enterprise.net`.
The FQDN `RTR-CORE-02.enterprise.net` is established.
Cisco IOS constructs the key pair name using the format `<hostname>.<domain_name>`.
3
Generate the RSA key pair using `crypto key generate rsa modulus 2048`.
The RSA keys are generated and SSH is enabled on the device.
A modulus size of 768 bits or higher enables SSHv2.
4
Create a user entry using `username secadmin secret P@ssw0rd123`.
A user credential entry is placed into the local running configuration.
SSH requires an authentication database for remote login verification.
5
Enter VTY configuration (`line vty 0 4`) and execute `login local` and `transport input ssh`.
VTY lines require local credentials and accept only SSH traffic.
This completes the binding between remote access lines, cryptographic transport, and authentication.

Anahtar Kavram

SSHv2 Configuration Prerequisites and Execution Order
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

SSH Secure Remote Access Configuration and Verification

Bu konudan daha fazla soru