2 hands-on AAA scenarios you build in your own Cisco Modeling Labs instance and grade against the answer key. AAA configuration and troubleshooting practice for CCNA and CCNP.
Included with a subscription
Harden a single Cisco IOS router’s management plane using AAA named method lists applied per-line. Create VTY-AUTH (local then enable) to protect remote SSH access without lockout risk, and CONSOLE-AUTH (local only) to secure the console independently. Verify using show/run sections and test SSH from the ADMIN workstation.
Harden R1’s management plane by moving SSH login authentication and exec authorization under the IOS AAA framework using the local user database. You will start from a secure SSH-only baseline that still uses login local, enable aaa new-model, define default AAA methods that point at local, and bind VTY lines to AAA. Success is proven by authenticating from the ADMIN host over SSH and landing at the user’s privilege level.
Looking for something else? Browse the full lab archive, narrow it to self-standing labs, or see today's daily lab.