Live demo · no account

Try a graded Cisco IOS lab, free in your browser

Every lab on Goldfish Networks is a problem to solve, not a walkthrough to copy: you build it, then get a pass/fail on your config against the answer key. Here's that grader, running in your browser on a real Cisco IOS config — no download, no sign-up.

CCNA · Security~5 min

Secure R1 for remote management (SSH)

R1 is reachable on the console but still permits nothing but a half-finished SSH setup — Telnet-style access is not locked down and SSH isn't fully enabled. Finish hardening it, then grade your work against the answer key. This is a real graded lab, shrunk to fit in your browser: no download, no account.

What the grader checks

  1. Set a domain name — R1 needs one before it can generate an SSH key.
  2. Create a local username that stores an encrypted secret (not a plaintext password).
  3. Restrict the VTY lines to SSH only, so Telnet can't be used.
  4. Have the VTY lines authenticate against the local user database.
  5. Force SSH to version 2.

Press Grade my config to check your work against the answer key.

  • Set a domain name — R1 needs one before it can generate an SSH key.
  • Create a local username that stores an encrypted secret (not a plaintext password).
  • Restrict the VTY lines to SSH only, so Telnet can't be used.
  • Have the VTY lines authenticate against the local user database.
  • Force SSH to version 2.

This is one small lab. The real thing is a fresh one every day.

A new graded Cisco Modeling Labs scenario daily — build it on real IOS, grade your own config, own the ones you buy forever. Start with the full free sample.

Free — no account needed

More free tools

Try a Graded Cisco Lab Free — No Signup · Goldfish Networks