200-301 Question 392
Select 4You are tasked with configuring SSH on a Cisco router for secure remote management. The device hostname is set to 'Router1', and the domain name is 'example.com'. You have already created a local user account with a username 'admin' and password 'Admin123'. Which of the following steps are required to complete the SSH configuration?
- A
Generate RSA key pairs using the 'crypto key generate rsa' command.
- B
Enable Telnet as the primary access protocol for remote connections.
- C
Assign the VTY lines to use the local user database for authentication.
- D
Set the transport input protocol on the VTY lines to 'ssh'.
- E
Configure the domain name using the 'ip domain-name' command.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
To configure SSH on a Cisco router, you must generate RSA key pairs, set a domain name, and configure the VTY lines for SSH access by specifying the transport protocol as 'ssh' and using the local user database for authentication. Telnet should not be used as it is not secure.
- A. Correct.
Correct. Generating RSA key pairs is a mandatory step to enable SSH on a Cisco router.
- B. Incorrect.
Incorrect. Telnet is not secure and should not be used when SSH is available.
- C. Correct.
Correct. Assigning VTY lines to use the local user database ensures proper user authentication for SSH access.
- D. Correct.
Correct. Setting the transport input protocol to 'ssh' ensures that only SSH connections are accepted on the VTY lines.
- E. Correct.
Correct. Configuring the domain name is required as it is used in the process of generating RSA key pairs for SSH.