350-401 Question 585
Select 4A network engineer is attempting to manage a Cisco router via SSH, but they are unable to establish a connection. After verifying that the network path is operational, they suspect the issue lies in the router's configuration. Which of the following steps should the engineer take to troubleshoot and resolve the issue?
- A
Verify that the 'ip domain-name' command is configured on the router.
- B
Ensure that the SSH version is set to version 2 using the 'ip ssh version 2' command.
- C
Check that the VTY lines are configured with the 'transport input ssh' command.
- D
Verify that the router has a valid local username and password configured.
- E
Ensure that the 'ip http secure-server' command is enabled for SSH functionality.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To successfully troubleshoot and resolve SSH connectivity issues, the network engineer must ensure that all required configurations for SSH are in place. These include setting the domain name, enabling SSH version 2, configuring the VTY lines to allow SSH, and ensuring a username and password are available for authentication. The 'ip http secure-server' command is unrelated to SSH and does not impact SSH connectivity.
- A. Correct.
The 'ip domain-name' command is required to generate the RSA keys used for SSH encryption. Without this configuration, SSH cannot function.
- B. Correct.
The 'ip ssh version 2' command ensures the router is using the more secure and modern version of SSH. If not configured, SSH may default to version 1, which could cause compatibility issues.
- C. Correct.
The 'transport input ssh' command on the VTY lines ensures that the router only accepts SSH connections and not Telnet. Without this, SSH connections may fail.
- D. Correct.
A valid local username and password must be configured on the router for SSH authentication. Without these credentials, SSH login will not succeed.
- E. Incorrect.
The 'ip http secure-server' command is related to enabling HTTPS for web management and is not required for SSH functionality.