350-401 Question 240
Single answerAn administrator is configuring a Cisco router to allow local user authentication for remote management using Telnet. The following configuration has been applied:
line vty 0 4 login username admin privilege 15 password admin123
However, the administrator is unable to log in using the 'admin' credentials. What is the issue with the configuration?
- A
The 'login' command under the VTY line is not required for local authentication.
- B
The local user database is not being referenced for authentication.
- C
The password configured on the VTY lines does not match the local user password.
- D
The privilege level 15 assigned to the user conflicts with the VTY access.
Show answer and explanation
Correct answer: B
Explanation
The issue lies in the missing 'login local' command under the VTY configuration. Without this command, the router does not reference the local user database for authentication and instead expects a password-only login configured directly on the VTY lines. Adding 'login local' ensures that the local user database is used for authentication, allowing the 'admin' user to log in with the configured credentials.
- A. Incorrect.
This is incorrect. The 'login' command is required for authentication on VTY lines, but it does not define the source of authentication (e.g., local user database).
- B. Correct.
This is correct. The configuration is missing the 'login local' command under the VTY lines, which specifies that the local user database should be used for authentication.
- C. Incorrect.
This is incorrect. The password configured on the local user account is independent of any password set on the VTY lines. The issue is related to the lack of 'login local' command.
- D. Incorrect.
This is incorrect. Privilege level 15 does not conflict with VTY access and is used to grant full administrative privileges to the user.