Cisco Router SSH Configuration

Simple Local authentication:

(config) #username admin password Cisco    // Establish user admin password for Cisco Local User (default permission level is 1)(config) #line vty 0 4 (config-line) #login local        / /call on- premises authentication / / above method configuration, the default entry is User mode ">" After Telnet, An en password is required to enter the "#" password Cisco        // to establish a user with a permission level of 15 admin//  After this method is set, you can enter the privileged mode "#" after Telnet, no need to provide en password

AAA Local Certification:

(config) #username admin privilege thePassword Cisco//Create a user admin with a permission level of 15(config) #aaaNew-model//turn on AAA local authentication(config) #aaa authentication logindefaultLocal//call local username and password authentication, including console port can also call local to authenticate(config) #aaa authorization execdefaultLocal//options available(config) #aaa authorization networkdefaultLocal//options available(config) #aaa Session-id common//options available"When local authentication is enabled, all login lines [ssh/telnet/Console] Access can invoke the local user name password, ignoring the password set separately on the line "(config)#lineVty 0 4(config-line) #login Authenticationdefault    //Calling local authentication

Cisco Router SSH Configuration