300-440 Question 246
Select 4A network administrator is unable to access a Cisco router via SSH and suspects an issue with the configuration. While troubleshooting, they discover that the ip ssh version 2 command is already configured on the device. They also verify that the VTY lines are configured for SSH access. Which additional steps should the administrator take to resolve the issue?
- A
Verify that the router's hostname and domain name are configured.
- B
Ensure that a local user account with a password is configured on the router.
- C
Check if an access control list (ACL) is blocking SSH traffic.
- D
Enable the HTTP server on the router to allow SSH access.
- E
Confirm that the RSA key pair is generated for SSH.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To troubleshoot SSH access issues, the administrator must ensure that the necessary prerequisites for SSH are configured. This includes setting the hostname and domain name, creating a local user account for authentication, verifying ACLs for potential restrictions, and generating the RSA key pair. Without these configurations, SSH access will fail, even if the ip ssh version 2 command and VTY lines are correctly set up.
- A. Correct.
SSH requires the router to have both a hostname and a domain name configured to generate the RSA key pair. Without these, SSH will not function properly.
- B. Correct.
A local user account with a password is required for SSH authentication. If no user account is configured, SSH access will fail.
- C. Correct.
An ACL might inadvertently block SSH traffic. It is important to verify that no ACL is restricting SSH access to the router.
- D. Incorrect.
Enabling the HTTP server is not required for SSH access, as SSH is a separate protocol. This option is irrelevant to the problem.
- E. Correct.
RSA key pair generation is mandatory for SSH to function. If the RSA key pair is missing, SSH will not work.