350-401 Question 243
Single answerA network administrator is configuring a Cisco router for local user authentication on the console line. They create a local user account with the username 'admin' and password 'Cisco123'. Next, they apply the following configuration:
line console 0 login
However, the administrator is unable to log in with the 'admin' account on the console line. What is the correct step to fix the issue?
- A
Add the command 'login local' under the console line configuration.
- B
Add the command 'password Cisco123' under the console line configuration.
- C
Remove the 'login' command from the console line configuration.
- D
Enable AAA authentication on the device.
Show answer and explanation
Correct answer: A
Explanation
The 'login local' command must be applied under the console line configuration to use the local user database for authentication. Without this command, the router defaults to expecting a line password, which is not configured in this case. Adding the 'login local' command resolves the issue by correctly instructing the router to use the local user account for authentication.
- A. Correct.
This is the correct step. The 'login local' command under the console line instructs the router to use the local user database for authentication. Without this command, the router does not use the local user account for login.
- B. Incorrect.
This is incorrect because the 'password' command under the console line is used for basic line password authentication, not local user authentication. The 'login local' command is required to use the local user database.
- C. Incorrect.
This is incorrect because removing the 'login' command would prevent any authentication method from being applied, making the console line unsecured.
- D. Incorrect.
This is incorrect because enabling AAA authentication is not necessary for local user authentication. Local user authentication can function without AAA.