Ch34-Device Security Features Flashcards
Command reference:
Changes the context to console configuration mode
line console 0
Command reference:
Changes the context to vty configuration mode for the range of vty lines listed in the command
line vty <i>first-vty - last-vty</i>
Command reference:
Console and line configuration mode. Tells IOS to prompt for a password
login
Command reference:
Console and line configuration mode. Lists the password required if the <b>login</b> command is configured
password <i>pass-value</i>
Command reference:
Console and line configuration mode. Tells IOS to prompt for a username and password, to be checked against locally-configured <b>username</b> global configuration commands
login local
Command reference:
Global command. Defines one of possibly multiple usernames and associated passwords (stored as a hashed value)
username <i>user</i> secret <i>password</i>
Command reference:
Global command. Defines one of possibly multiple usernames and associated passwords (stored in clear text in the configuration)
username <i>user</i> password <i>password</i>
Command reference:
Global command. Creates and stores the keys required by SSH
crypto key generate rsa
Command reference:
VTY configuration mode. Defines whether Telnet and/or SSH access is allowed into the device
transport input [telnet | ssh | none | all]
Command reference:
Global command. Encrypts all clear-text passwords in the running config. The <b>no</b> version of this commands disables the encryption of passwords the next time said password is set
[no] service password-encryption
Command reference:
Global command to create the enable password, stored as a hashed value instead of clear text
enable secret <i>password</i>
Command reference:
Global command to create the enable password, as clear text
enable password <i>password</i>
Global command to create the enable password, stored as a hashed value, defined by the hashing algorithm type
enable [algorithm-type md5 | sha256 | scrypt] secret <i>password</i>
Which passwords are encrypted via <b>service password-encryption</b>?
enable password
username user password pass-value
console/vty line passwords
When a password is encrypted via <b>service password-encryption</b>, what is its encryption type noted as?
Type 7
Both <b>enable secret</b> and <b>enable password</b> have been configured on a device. Which will be used?
enable secret
Neither <b>enable secret</b> or <b>enable password</b> were configured on a device. Describe what happens when a user attempts to access enable mode
- Console users will go directly to enable mode
2. Line (Telnet/SSH) users will be rejected from trying to access enable mode
List the banner display order for console and Telnet users
MOTD
login
—user login—
exec
List the banner display order for SSH users
login
—user login—
MOTD
exec
A router is configured with SSH version 1. A user attempts to sign in via SSH. What banners will be displayed?
MOTD & exec (login not displayed if SSH v1)
