Examkin

Soru

Zorluk: KolayDevice Access Control and Local Password Authentication

A network administrator needs to secure remote administrative access to a Cisco IOS switch by requiring users to authenticate against the local user database. Which two steps are required to implement local user database authentication for remote VTY line access? (Select two.)

  1. Configure a local user account using the global configuration command 'username <name> secret <password>'.Cevap
  2. Apply the line configuration command 'login local' under the VTY lines.Cevap
  3. C
    Configure 'line vty 0 4' with an external TACACS+ server key using the line command 'enable password'.
  4. D
    Apply an access list to the VTY line using 'ip access-group 10 in' to grant database credentials.

Cevap

To configure local user database authentication for remote VTY line access, you must define a local user account in global configuration mode using 'username <name> secret <password>' and configure 'login local' under the line configuration mode for VTY lines.
Local authentication requires both the creation of user credentials in the local security database using the global 'username' command and configuring the terminal lines (VTY) with 'login local' so Cisco IOS checks incoming connections against that database.

Adım Adım Çözüm

1
Define local user account
Local database contains valid credentials.
The system requires a defined user account stored in the local running-config database to check credentials against upon user connection.
2
Enable local authentication on line VTY mode
VTY lines prompt for username and password checked against local database.
By default, line configuration might look for simple line passwords or no password; 'login local' directs the line to check the username and password against the local device database.

Anahtar Kavram

Local User Database Authentication on Cisco IOS VTY Lines
Bu soruyu puanla

Konular

Device Access Control and Local Password Authentication

Bu konudan daha fazla soru