A network administrator is configuring initial administrative access security on a Cisco IOS XE router for remote management via SSH. Which TWO commands or configuration actions are required to enforce local database user authentication on the VTY lines and ensure local account passwords are saved using the scrypt (Type 9) hashing algorithm? (Select two.)
- Execute the username <name> algorithm-type scrypt secret <password> command in global configuration mode.Cevap
- Execute the login local command under line vty configuration mode.Cevap
- CEnable service password-encryption in global configuration mode to upgrade secret passwords to Type 9 scrypt hashes.
- DConfigure enable password algorithm-type scrypt under line vty configuration mode.
Cevap
The correct configuration requires executing 'username <name> algorithm-type scrypt secret <password>' in global configuration mode and executing 'login local' under line vty configuration mode.
To secure device access using local accounts with strong password storage, administrators must define local accounts using 'username <name> algorithm-type scrypt secret <password>' in global configuration mode. Furthermore, to instruct VTY lines to authenticate inbound SSH connections against these local accounts, the 'login local' command must be configured under line vty mode.
Adım Adım Çözüm
Anahtar Kavram
Device Access Control and Local Password Hashing (Type 9 scrypt and VTY login local configuration)