Blocking Brute-Force Logins and Adding a Banner on R1

Bundle lab · $29.99

Harden the management plane of a single IOS router by throttling brute-force login attempts and presenting a legal-warning banner. You will enable SSH-based management, configure login block-for and delay to resist password-guessing, and verify behavior from an ADMIN Linux workstation.

Track

CCNA

Est. time

35 minutes

Difficulty

Intermediate

Topics

CCNP, IOS Security, Management Plane, SSH, Login block-for, Login delay, Banners

Learning objectives

Enable SSH-only management with a local user on a single IOS router
Throttle brute-force attempts using global login controls
Display a legal-warning banner before authentication
Verify quiet-mode behavior and failed-attempt tracking with show commands
Validate end-to-end access from an ADMIN Linux workstation

Troubleshooting focus

SSH key generation prerequisites missing (hostname/domain-name)
VTY lines not using local login or still allow Telnet
Incorrect login block-for or delay syntax not taking effect
Banner delimiter errors preventing banner from being saved
Quiet-mode blocks all logins longer than expected due to fresh failures

Topology

Own this lab's topology — and every lab — in Device Hardening: SSH, AAA & Secure Access.

Unlock with Device Hardening: SSH, AAA & Secure Access

What's included in the package

Work / baseline CML import — lab-work.yaml
Topology diagram — topology.svg
Print-ready topology diagram (PDF) — topology.pdf
Step-by-step learner guide (Markdown — for Obsidian/VS Code) — lab-guide.md
Branded PDF lab guide — open in any viewer (Adobe/Preview) — lab-guide.pdf
Getting-started README — README.md
Verification checklist — verification-checklist.md

Download access

New here? See how the download → build in CML → grade loop works.

This lab is part of the Device Hardening: SSH, AAA & Secure Access bundle — own every lab in it permanently for a one-time $29.99.

Own the Device Hardening: SSH, AAA & Secure Access bundle — $29.99 Sign in Back to archive Today's lab

Create a free account, then own the Device Hardening: SSH, AAA & Secure Access bundle for a one-time $29.99 — buy once, keep every lab forever.

Found a problem with this lab?

Please sign in to report a problem — tying it to your attempts lets us reproduce and fix it faster.

Grade your work

Create a free account to submit your completed lab for grading.

Create a free account

Blocking Brute-Force Logins and Adding a Banner on R1

Learning objectives

Troubleshooting focus

Topology

Related labs

Study this topic

Grade your work