Host(config)#service password-encryption <- Turn on password encyption Host(config)#enable secret xxxxxxxxxx <- Enable Password Host(config)#line console 0 <- Console login password Host(config-line)#password xxxxxxxxxx Host(config-line)#login Host(config)#line vty 0 4 <- Telnet login password Host(config-line)#password xxxxxxxxxx Host(config-line)#login
Host(config)#line console 0 Host(config-line)#exec-timeout 60 0 <- 60minites
Host(config-line)#line vty 0 4 Host(config-line)#exec-timeout 60 0 <- 60minites
Host(config-line)#exec-timeout 0 0 or Host(config-line)#no exec-timeout
Host# conf t Host(config)# username <USER> password <PASS> Host(config)# show user-account Host(config)# aaa new-model Host(config)# ip domain-name example.com Host(config)# hostname test1 test1(config)# ip ssh version 2 test1(config)# crypto key generate rsa How many bits in the modulus [512]:2048
Host(config)# username <USER> password <PASS> Host(config)# username <USER> password <PASS> role <ROLE>
test1(config)# line vty 0 4 test1(config-line)# transport input ssh
Fallback to local authentication when RADIUS server goes down.
aaa new-model aaa authentication login AUTHENTICATION-LINE line aaa authentication login AUTHENTICATION-RADIUS group radius local aaa authentication exec AUTHENTICATION-RADIUS group radius local !! L3 ip radius source-interface VlanXXXX radius server RADIUS1 address ipv4 192.168.1.100 auth-port 1654 acct-port 1646 key XXXXX line con 0 login authentication AUTHENTICATION-LINE line vty 0 15 authentication exec AUTHENTICATION-RADIUS login authentication AUTHENTICATION-RADIUS
aaa new-model aaa group server radius management server-private 192.168.1.100 key XXXXX ip vrf forwarding XXXXXXX ip radius source-interface VlanXXX aaa authentication login AUTHENTICATION-LINE line aaa authentication login AUTHENTICATION-RADIUS group management local aaa authentication exec AUTHENTICATION-RADIUS group management local line con 0 login authentication AUTHENTICATION-LINE line vty 0 15 authentication exec AUTHENTICATION-RADIUS login authentication AUTHENTICATION-RADIUS