350-401 Question 581
Select 4You are managing a Cisco ISR router in a branch office that has recently been configured for remote access using SSH. However, administrators are reporting that they cannot connect to the device via SSH. Which of the following actions should you take to troubleshoot and resolve the issue?
- A
Verify that the SSH service is enabled using the 'ip ssh version' command.
- B
Check the access control lists (ACLs) to ensure they are not blocking SSH traffic.
- C
Ensure that the router is configured with a valid hostname and domain name.
- D
Verify that login credentials are configured under the VTY lines.
- E
Check that the Telnet service is properly configured as a fallback.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To troubleshoot SSH connectivity issues on a Cisco device, you must ensure that SSH is enabled and properly configured. This includes enabling the SSH service, checking ACLs for potential traffic blocks, validating hostname and domain name configuration for RSA key generation, and ensuring login credentials are set on the VTY lines. Telnet configuration is unrelated to SSH and does not resolve the connectivity issue. Addressing these critical areas will help resolve the reported SSH connectivity problem.
- A. Correct.
The SSH service must be enabled on the router. Using the 'ip ssh version' command can confirm if SSH is operational and which version is in use.
- B. Correct.
Access control lists (ACLs) might inadvertently block SSH traffic. Reviewing the ACL configuration ensures that SSH traffic is permitted.
- C. Correct.
A valid hostname and domain name are prerequisites for generating the RSA key required for SSH. Without this configuration, SSH will not work.
- D. Correct.
Login credentials, including local or remote authentication, must be specified under the VTY lines to allow SSH access.
- E. Incorrect.
Telnet is not relevant in this context since the issue is specifically related to SSH, and configuring Telnet does not address SSH connectivity problems.