Examkin

Soru

Zorluk: KolayDevice Access Control and Local Password Authentication

A network technician is tasked with securing direct physical access to a Cisco switch console. Which two configuration steps are required to ensure that users connecting through the console port are authenticated against user accounts stored in the local device database? (Select two.)

  1. Configure the 'login local' command under line console 0 configuration mode.Cevap
  2. Define a user account using the 'username <name> secret <password>' command in global configuration mode.Cevap
  3. C
    Apply the 'transport input ssh' command under line console 0 configuration mode.
  4. D
    Set an explicit inbound access list using the 'ip access-group' command on line console 0.

Cevap

To enforce local database authentication on the console line, a user account must be created in global configuration mode using 'username <name> secret <password>', and the console line must be configured with 'login local'.
Local authentication requires both a local database entry (created via global configuration 'username secret') and telling the specific line interface to check that database (using 'login local' under line console 0).

Adım Adım Çözüm

1
Define local user credentials
User accounts are created in the local device database using global configuration commands.
The router or switch requires predefined accounts in its running configuration to perform local authentication.
2
Enable local authentication on the console line
Entering 'line console 0' and configuring 'login local' directs authentication attempts to the local user database.
Without 'login local', the line will either use a simple line password or allow unauthenticated access depending on default settings.

Anahtar Kavram

Local User Database Authentication on Cisco IOS Lines
Bu soruyu puanla

Konular

Device Access Control and Local Password Authentication

Bu konudan daha fazla soru