ccna uk cost

ccna uk cost.There are other ways to restrict access, such as using a local username database or an external authentication server (configuring an authentication server is beyond the scope of this book; for an in-depth discussion of this, see Cisco Router Firewall Security (published by Cisco Press). The local username database is a database located on the router that allows you to specify a username and password to restrict access to the IOS device line. It is recommended that you use both a username and password on the line, not just a password. The advantage of this is that each user has a password rather than sharing one, so it is easier to trace responsibility. The following commands demonstrate how to configure the local username database and how to use it for VTYoIOS(config)# username name (secret | password} password IOS(config)# linevty 0 15 IOS(config-line)# login localThe command username specifies the username and password. The main difference between the secret and password parameters is that the secret parameter tells IOS to encrypt the password using the MD5 hashing algorithm, while the password parameter does not require this (the password will be stored in plaintext). The same is true for passwords configured by the line sub-configuration mode command password: such passwords are also stored in plaintext.Note: User authentication can be enabled on any line of the IOS device using the command loginlocal: console line, secondary line, VTY, and TTY. the username and password will be prompted for when authentication is enabled.2. Privileged EXEC Password ProtectionIn addition to restricting access to IOS device lines, passwords can be used to restrict access to privileged EXEC mode. The following are two ways to configure this.Switch(config)# enable password Privi1ege_EXEC_passwordSwitch(config)# enable secret Privi1ege_EXEC_passwordBoth commands configure the privileged EXEC password, with the same main difference as the username command: the parameter secret encrypts the privileged EXEC password, while the parameter password does not.The main difference is the same as for username: the parameter secret encrypts the privileged EXEC password, while the parameter password does not. If both commands are configured, the password configured with the command enablesecret always takes precedence over the password configured with the command enablepassword. Cisco still supports the command enablepassword for backward compatibility.