Live demo · no account

Try the Cisco configuration grader in your browser

Edit a sample IOS running configuration and see how each requirement is graded — no CML install, no account. A problem to solve, not a walkthrough to copy.

CCNA · Security~5 min

Secure R1 for remote management (SSH)

R1 is reachable on the console but still permits nothing but a half-finished SSH setup — Telnet-style access is not locked down and SSH isn't fully enabled. Finish hardening it, then grade your work against the answer key. This is a real graded lab, shrunk to fit in your browser: no download, no account.

Press Grade my config to check your work against the answer key.

  • Not yet checked: Set a domain name — R1 needs one before it can generate an SSH key.
  • Not yet checked: Create a local username that stores an encrypted secret (not a plaintext password).
  • Not yet checked: Restrict the VTY lines to SSH only, so Telnet can't be used.
  • Not yet checked: Have the VTY lines authenticate against the local user database.
  • Not yet checked: Force SSH to version 2.

This is one small lab. The real thing is a fresh one every day.

A new graded Cisco Modeling Labs scenario daily — build it on real IOS and grade your own config. Start with any of the 20 free CML labs — one opens every bundle, plus a full sample.

Free — no account needed

More free tools