Local Login Security Global security


In this tutorial, I would like to introduce you to global security configuration. This is the configuration that can be used to all over security access like vty, console, and auxiliary. First, let’s set the securtiy than we implement to the line accesses.

Router#configuration terminal
Router(config)#username cisco password cisco
Router(config)#username cisco privilege 2

That’s all. Now, You can use this security configuration as global configuration for vty (telnet or ssh), auxiliary, and console. Enter the line configuration and use login local as login security.

router#configuration terminal
router(config)#line vty 0 5
router(config-line)#login local

the procedure is same for auxiliary and console, you just enter to the line than set login to login local

router#configuration terminal
router(config)#line console 0
router(config-line)#login local

router#configuration terminal
router(config)#line aux 0
router(config-line)login local

Now, test one by one, the system will ask you username and password which is same.

Thanks to source:
danscourses youtube channel

Comments

Post a Comment

Popular posts from this blog

Virtual Teletype for Telnet and SSH

Talk about devices configuration (router, switch, hub, server), for the first time, all of them have to be configured directly via console before it can be reconfigured or managed remotely via Telnet or SSH. In order to manage device remotely, first, we have to create gate at the device. In this case, we have something named vty or virtual teletype. Actually, This gate has axis in the router or switch but if we don’t set the password of them we will be rejected automatically by the device when we try to access to them via Telnet or SSH. “ Virtual teletype ( VTY ) is a command line interface (CLI) created in a router and used to facilitate a connection to the daemon via Telnet, a network protocol used in local area networks.” (techopedia.com) Let’s get started to configure the vty. It is very simple actually, just enter to global configuration and then execute line vty than set the password. router>enable router#configure terminal router(config)#line vty 0 5 rou...
Read more