| Exam 400-101 | Question id=1291 | Infrastructure Services |
You want to configure SSH for incoming VTY connections. The router has not been configured with a host name, a domain name, or an RSA key pair. Additionally,
the VTY lines are not yet configured to accept incoming SSH connections.
You issue the ip ssh timeout 60 command from global configuration mode to configure the router with a 60 second timeout. Which of the following messages will you most likely receive?
| A. |
Invalid input detected at '^' marker. | |
| B. |
Please define a hostname other than Router. | |
| C. |
Please define a domainname first. | |
| D. |
Please create RSA keys to enable SSH. | |
| E. |
Please enable SSH as a transport mode. |
You will most likely receive the Please create RSA keys to enable SSH message when you issue the ip ssh timeout 60 command from global configuration mode.
To enable Secure Shell (SSH) for virtual terminal (VTY) lines on a Cisco router, you should complete the following steps:
1. Configure the router with a host name other than Router by issuing the hostname command.
2. Configure the router with a domain name by issuing the ip domain name command.
3. Generate an RSA key pair for the router by issuing the crypto key generate rsa command.
4. Configure the VTY lines to use SSH by issuing the transport input ssh command from line configuration mode.
You will not receive the Invalid input detected at '^' marker message when you issue the ip ssh timeout 60 command in this scenario. You would receive the Invalid input detected at '^' marker message if you were to mistype the timeout keyword or if you were to try to configure the SSH timeout with a value greater than 120 seconds. Although SSH is not yet enabled in this scenario, the router will accept the ip ssh timeout 60 command as a valid configuration. The ip ssh timeout 60 command would appear in the configuration if you were to issue the show running-config command.
You will not receive the Please define a hostname other than Router message when you issue the ip ssh timeout 60 command in this scenario. However, because you have not configured the router with a host name other than the default name of Router, you would receive the Please define a hostname other than Router message if you were to issue the crypto key generate rsa command. To configure a router with a host name other than the default, you should issue the hostname hostname command from global configuration mode.
You will not receive the Please define a domainname first message when you issue the ip ssh timeout 60 command in this scenario. However, if you had configured the router with a valid host name but had not configured the router with a domain name, you would receive the Please define a domainname first message if you were to issue the crypto key generate rsa command. In this scenario, you have configured neither the domain name nor the host name. To configure a router with a domain name, you should issue the ip domain-name domainname command from global configuration mode.
You will not receive the Please enable SSH as a transport mode message when you issue the ip ssh timeout 60 command in this scenario. The Please enable SSH as a transport mode message is not a warning message that is displayed on Cisco routers. You can issue the transport input ssh command to configure SSH as the transport mode for VTY lines.