Examkin

Soru

Zorluk: OrtaDevice Access Control and Local Password Authentication

A network engineer creates a local user account on a Cisco IOS XE router using the command `username admin privilege 15 secret C1sc0#Pass`. However, when attempting to establish a session through the console port, the router displays only a `Password:` prompt rather than asking for a username.

Which command must be executed under `line con 0` configuration mode to require local database user authentication?

  1. login localCevap
  2. B
    login
  3. C
    aaa new-model
  4. D
    password local

Cevap

The correct action is to execute the `login local` command under `line con 0` configuration mode.
Executing `login local` under line configuration mode explicitly binds line authentication to the local IOS user database created with global `username` commands. This forces the device to prompt for both a username and password during connection establishment.

Adım Adım Çözüm

1
Analyze line authentication behavior
By default or when configured with the simple `login` command, a Cisco line interface expects a line password defined by the `password` line subcommand.
Without instructing the line to check the local database, the router ignores defined `username` accounts for line access.
2
Identify the command that references the local user database
The `login local` command tells Cisco IOS to check credentials against accounts created via `username` global configuration commands.
This causes the line to present a `Username:` prompt followed by a `Password:` prompt.

Anahtar Kavram

Cisco IOS Line Local Database Authentication
Bu soruyu puanla

Konular

Device Access Control and Local Password Authentication

Bu konudan daha fazla soru