6.1.

a Console and VTY

Console configuration:

Router(config)# line con 0

Router(config-line)# login
Router(config-line)# password PASSWORD

VTY line configuration:

Router(config)# line vty 0 4

Router(config-line)# login local
Router(config-line)# access-class 1 in
Router(config-line)# transport input ssh telnet
Router(config)# username cisco password cisco

6.1.b Telnet, HTTP, HTTPS, SSH,

SCP
TELNET

Sends clear text over TCP port 23.

Router(config)# username cisco password 0 cisco

Router(config)# line vty 0 4
Router(config-line)# transport input telnet

SSH

Encrypts data over TCP port 22.  You must configure a hostname & domain name in
order to configure.
Router(config)# hostname Router
Router(config)# ip domain-name cisco.com
Router(config)# username cisco password 0 cisco
Router(config)# crypto key generate rsa
Router(config)# line vty 0 4
Router(config-line)# transport input ssh

HTTP

Sends data clear text over TCP port 80.  You can use HTTP for GUI access on Cisco
devices.

Router(config)# ip http server

Router(config)# ip http authentication aaa

HTTPS

Similar to HTTP, but is encrypted over TCP port 443.

Router(config)# ip http secure-server

Router(config)# crypto ca trustpoint CA-trust-local
Router(config-ca)# enrollment url http://Server1:80
Router(config)# crypto ca authenticate CA-trust-local
Router(config)# crypto ca enrollment CA-trust-local
Router(config)# ip http secure-trustpoint CA-trust-local

SCP

SCP is used for secure file transfer and uses the same system as SSH (also over port
22).  You must configure AAA & SSH for SCP.

Router(config)# aaa new-model

Router(config)# aaa authentication login default local
Router(config)# aaa authorization exec default local
Router(config)# username cisco privilege 15 password 0 cisco
Router(config)# ip scp server enable
6.1.c (T)FTP
FTP and TFTP are protocols that allow you copy/transfer files across the network. 
This is common for backing up configurations or for firmware upgrades.

TFTP uses UDP port 69, where FTP uses TCP port 21 for authentication and TCP 20
for data transfer.

TFTP configuration is as follows:

Router1(config)# tftp-server flash:filename

Router2# copy tftp flash

FTP configuration:

Router(config)# ip ftp username cisco

Router(config)# ip ftp password cisco
Router# copy running-config ftp:
Advertisements
REPORT THIS AD

REPORT THIS AD

Share this:

 Twitter

 Facebook

 Google


CCNP CISCO ROUTE SSH TELNET TFTP

Published by journey2theccie
View all posts by journey2theccie
Post navigation
PREVIOUS Previous post:CCNP ROUTE: 5.4 Configure and verify router
security features
NEXT Next post:CCNP ROUTE: 6.2 Configure and verify SNMP
 LEAVE A REPLY

Search for:Search
CATEGORIES

 CCNP ROUTE 300-101 (58)

o 1.0 Network Principles (6)
o 2.0 Layer 2 Technologies (2)
o 3.0 Layer 3 Technologies (32)
o 4.0 VPN Technologies (3)
o 5.0 Infrastructure Security (4)
o 6.0 Infrastructure Services (11)
 CCNP TSHOOT 300-135 (1)
Advertisements
REPORT THIS AD

© 2019 MY CCIE JOURNEY

POWERED BY WORDPRESS.COM .
Close and accept
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use. 
To find out more, including how to control cookies, see here: Cookie Policy
 Follow
