03-02-2024, 06:46 PM
1. you cant really configgure SSH service on a cisco device. You can configure SSH, you can allow it on the VTY Lines. You can force it to user v1 or v2 but there is no command to configure it as a service. If SSH was misconfigured you would not get a prompt for a password.
2. If Transport input SSH/ALL is not configured on the line, you will get connection refused. Not a prompt for a password.
user@user-pc:~$ ssh admin@198.51.100.64
ssh: connect to host 198.51.100.64 port 22: Connection refused
3. If telnet was requiring local database with username/password for authenticaiton, it would prompt for a user name.
user@user-pc:~$ telnet 198.51.100.64
Trying 198.51.100.64
Connected to 198.51.100.64.
Escape character is '^]'.
User Access Verification
Username: admin
Password:
R1>
4. If the vty lines are not configured for local authentication, telnet will work because of the following config
line vty 0 4
login
password admin
SSH attempts will experience an authentication failure without login local configured on the vty lines.
2. If Transport input SSH/ALL is not configured on the line, you will get connection refused. Not a prompt for a password.
user@user-pc:~$ ssh admin@198.51.100.64
ssh: connect to host 198.51.100.64 port 22: Connection refused
3. If telnet was requiring local database with username/password for authenticaiton, it would prompt for a user name.
user@user-pc:~$ telnet 198.51.100.64
Trying 198.51.100.64
Connected to 198.51.100.64.
Escape character is '^]'.
User Access Verification
Username: admin
Password:
R1>
4. If the vty lines are not configured for local authentication, telnet will work because of the following config
line vty 0 4
login
password admin
SSH attempts will experience an authentication failure without login local configured on the vty lines.