CCNA: Secure Device Access

A new branch router has just been unboxed. Before it goes live, give it a name and lock down every way of logging in to it.

Tasks

  1. On R1, set the hostname to BR-R1.
  2. Protect privileged mode with the enable secret Cisco@123.
  3. Console line: password conpass and require login.
  4. Create the local user admin with secret Admin@123, and make the VTY lines 0–4 use local login and SSH only.
  5. Enable SSH: domain name webasha.lab and a 2048-bit RSA key.
  6. Encrypt plain-text passwords, add a MOTD banner, and save the configuration.