200-301 Question 390
Select 3You are tasked with configuring a Cisco router to enable secure remote management using SSH. After setting the hostname and domain name, which additional steps are required to complete the configuration?
- A
Generate a crypto key using the 'crypto key generate rsa' command.
- B
Assign a local username and password using the 'username' command.
- C
Enable HTTP server using the 'ip http server' command.
- D
Configure the VTY lines to use SSH and local authentication.
- E
Set the router's IP address using the 'ip address' command on an interface.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure SSH on a Cisco router, you need to generate an RSA key for encryption, define a local username and password for authentication, and configure the VTY lines to use SSH. These steps ensure that remote access to the router is secure and properly authenticated. Configuring an HTTP server or setting an IP address, while important for other purposes, are not directly related to enabling SSH.
- A. Correct.
Correct: Generating an RSA key is required to enable SSH on the router because SSH relies on encryption, and the RSA key provides the necessary cryptographic support.
- B. Correct.
Correct: A local username and password are necessary to authenticate users who attempt to connect to the router via SSH.
- C. Incorrect.
Incorrect: HTTP server configuration is unrelated to SSH and is used for web-based management, not secure remote access.
- D. Correct.
Correct: VTY lines must be configured to allow SSH and use local authentication for secure remote login.
- E. Incorrect.
Incorrect: While setting the IP address is important for network connectivity, it is not a specific step for enabling SSH.