ccna 200-301 new exam

ccna 200-301 new exam.When access is made through all access ports on a Cisco router (including console ports, secondary ports, and virtual terminal connections), it is necessary to2.1 Protecting Access to the Device 29a security password configured by the network administrator. All routers must be configured using the user and privileged EXEC passwords. Using passwords and assigning privilege levels is a simple way to provide endpoint access control in a network.When managing multiple network devices, you should use a central TACACS+ or RADIUS authentication server (for example, Cisco Secure AccessControl Server, ACS) to store all administrative user names and passwords. It is recommended to use the local username database as a backup in case theAAA server from becoming unavailable.Protecting Local AccessBy default, the console port does not require a password for console administrative access; however, to protect local access, you should configure a line password for the console port. Use the line console 0 command and the subsequent login and password subcommands to request login authentication and establish a login password on the console line.Protecting Remote Access Protecting remote access involves protecting both the VTY line and the secondary port. By default, Cisco routers support five simultaneous vty (Telnet and SSH) sessions. On many Cisco routers, the vty port number is 0.4. Use the linevty04 command and the subsequent login and password subcommands to request login authentication and establish a login password in an incoming Telnet session. Note: Some Cisco devices have more than 5 vty lines. You need to check the number of vty lines in the running configuration file before you can configure a password. For example. the Cisco switch supports 16 vty contigs at the same time. numbered 0.15. auxiliary ports (auxport) and dial-up Modems can also be used to provide remote access. By default, the Cisco router's auxiliary port does not require a password for remote administrative access. To protect the secondary line, use the line aux 0 command to enter line configuration mode. Then use the login and password subcommands to request login authentication and establish a login password on an incoming connection. Protecting Privileged EXEC Mode AccessThe enablesecret password global configuration command restricts access to privileged EXEC mode. The enablesecretpassword command uses always uses a hash algorithm for hashing in the router configuration. IOS 15.0(1) and subsequent releases use the SHA256 hash algorithm by default, instead of the weaker MD5 algorithm used in previous releases. If the enablesecret password is lost or forgotten, it can only be recovered using the Cisco router password recovery program.