liveBook · Manning

Line password authentication

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

A line password is a password configured on a Cisco IOS management line for line-level access control.

Line password authentication protects a Cisco IOS management line by requiring a password before a user reaches the CLI. For console access, configure the single console line with line con 0. section 5.1 section 5.1.1

Configure the console line in line configuration mode:

  • Enter line con 0 to select the only console line. section 5.1
  • Enter password cisco to configure the line password. section 5.1.1
  • Enter login to require the password; without login, the configured password does not take effect. section 5.1.1

Console login sequence

After connection, IOS displays Password:. A correct password enters user EXEC mode, shown by the SW1> prompt. Use enable to reach privileged EXEC mode; protect that mode separately with enable secret. section 5.1.1

SW1(config)# line con 0              #1
SW1(config-line)# password cisco     #2
SW1(config-line)# login              #3
#1 Configures console line 0
#2 Configures the line password
#3 Requires the line password to access the console line

Review the annotated Cisco IOS configuration sequence for selecting the console line, setting its password, and enforcing login. section 5.1.1

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes
Explains configuration, password enforcement, login flow, EXEC modes, and inactivity timeout, but does not develop remote-line authentication.
Examples
Uses line con 0, password cisco, login, the Password: prompt, and the SW1> user EXEC prompt.
What it assumes
Assumes access to Cisco IOS global configuration mode and teaches the console line, line configuration mode, and login requirement.
What you can do after
Apply it via Cisco IOS CLI to configure and verify password-protected console access.
How it connects
Connects console lines with line configuration mode, user EXEC mode, privileged EXEC mode, enable secret, and exec-timeout.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.