SSH Flashcards
T/F: By default, no password is needed to access the CLI of a Cisco device via console port
T
T/F: By default, the password needed to access the Cisco CLI is ‘password’
F
By default, there is no password needed to access the CLI via console port
T/F: You can configure a password on the console line, which means that a user will have to enter a password to access the CLI via console port
T
How many console lines are there on a Cisco IOS device
1
What is the series of commands to enable a password for the CLI via console port
line console 0
password {password}
login
What is the series of commands to require users to login using a configured username on the console port
username {username} secret {password}
line console 0
login local
What is the command to log a user out after a certain amount of inactivity on a console line
exec-timeout {mins} {seconds}
T/F: You can assign an IP address to an SVI to allow remote connections to the switch CLI
T
T/F: You can only assign an IP address for remote switch management on L3 switches
F
You can assign an IP address to an SVI on L2 only switches to facilitate remote SSH management
T/F: You don’t need to configure a default gateway on a switch for remote SSH management
F
You should always configure a default gateway for this
What is the command to assign a default gateway for an L2 Cisco Switch
ip default-gateway [ip-addr]
What is the series of commands to assign an IP address to an SVI
interface [svi]
ip address [ip-addr] [subnet-mask]
no shutdown
T/F: Telnet is more secure than SSH and should be used instead
F
Telnet is unencrypted and should never be used as it is a security risk
T/F: Telnet is unencrypted and should never be used for remote management
T
T/F: Telnet is insecure and should be disabled for network management
T
What is the protocol and port which a telnet server listens for telnet traffic on
TCP 23
List the series of commands for configuring Telnet access on a switch
- enable secret password
- username username secret password
- access-list 1 permit host host-ip
- line vty 0 15
- login local
- exec-timeout minutes seconds
- transport input telnet
- access-class 1 in
What does VTY stand for
Virtual TeleType
What is the command to specify which protocols are allowed to connect to a VTY line
transport input { telnet | ssh | telnet ssh | all | none }
What is the difference between the access-class and ip access-group commands
access-class applies an ACL to VTY lines
ip access-group applies an ACL to an interface
T/F: SSH is unencrypted and should never be used for remote switch management
F
What protocol and port does SSH use
TCP 22
T/F: Not all IOS versions support SSH, you should ensure that your version does before configuring SSH
T
IOS images that support SSH will have ‘K9’ in the version name.
What is the command to view an overview of SSH information on a device
sh ip ssh
