- [Instructor] Devices on a network
should be secured both physically and logically.
Physical security can be achieved by locating devices
in either a secure room with a locking door
and or in a locking cabinet.
Logical security
can be achieved by setting device passwords.
Applying a password to the console port
will add an additional layer of security
in case someone gains access to the switch
and or attempts to log in via the console port.
Setting a console port password
will force the user to enter the correct password
prior to being granted access to the user mode.
I'm going to demonstrate how to do that now.
First, I'm going to click on the west switch,
click on the CLI tab, expand the window,
hit Enter, type ena
and then of course, config tab terminal, Enter.
I'm now going to go into the line,
I'm just going to show you the question mark here.
So I have console line vty line console 0,
I'm going to go ahead and set the password of console zero.
And then login, which will force the use of that password
when attempting to log in to the switch
via the console port.
I can go ahead and do a Ctrl + Z to get all the way out.
I can issue a show run and you can see in the running config
that the console port now has been secured
with a password of console zero.
Additionally, you can see
that I have some vty lines on the Switch.
In fact, I have 16 of them.
It's a best practice to also secure the vty lines
because they provide an inbound method
for accessing the device across the active network
where the terminal program.
The following sequence of commands
is used to secure those lines config terminal line vty 0.
And I'm going to show you how to do a single password
on a single line.
And then I'll show you
how to secure a group of lines all at one time,
line vty 0 password vty 0
and sometimes you might want to configure a single line
with a different password
so that you can have different users log in
and not have to share those passwords,
login, I'm going to go ahead and exit, exit out again,
and I'm going to give you a show run
so you can see that configuration
see the password of vty on the first vty line.
I still have lines one through 15 that are not yet secure
config from the terminal session line vty 1 15 password.
Oh, let's make it a vty 1 15, Enter,
again, login Ctrl + Z, get all the way out.
Do a show run space bar space bar.
You can see now that all of my lines
console and vty are secure, the log-in command that I issued
forces the password checkin
when logging into the switch either via the console port
or the vty lines.