A console line is the logical Cisco device pathway used to manage the CLI through the console port. Physical access control remains essential, but console-line authentication prevents unauthorized CLI access even when someone can reach the device. section 5.1
Switch(config)# line con 0 #1 Switch(config-line)# #2 #1 Configures the first (and only) console line #2 The prompt changes to (config-line)#.
Enter line configuration mode with line con 0; the 0 identifies the device’s first and only console line. section 5.1
Configure and verify the console line with these facts:
- Use password password followed by login; password alone does not require authentication. section 5.1.1
- A successful login reaches user EXEC mode; use enable to reach privileged EXEC mode. section 5.1.1
- Only one console line exists, so only one user can connect through the console port at a time. section 5.1
- The default inactivity timeout is 10 minutes; change it with exec-timeout minutes, or use exec-timeout 0 to disable it. section 5.4
Line-password configuration
SW1(config)# line con 0 SW1(config-line)# password cisco SW1(config-line)# login These commands select console line 0, set its line password, and require that password during console access. section 5.1.1
