View source for Line Configuration

[[Category:Networking]]

== Cisco ==
These configurations are best practice for security reasons.

==== Local User and Enable Password ====
<pre>
username <username> secret <password>
enable secret <password>
</pre>
The enable secret is the best practice way of configuring the enable password.

==== VTY Lines ====
* Make sure [[SSH for Network Devices#Cisco|Secure Shell]] has been configured.
* Make sure [[TACACS_and_AAA#Cisco|AAA]] has been configured.
<pre>
line vty 0 4
 exec-timeout 30 0
 logging synchronous 
 login authentication vtymethod
 transport input ssh
line vty 5 15
 exec-timeout 30 0
 logging synchronous 
 login authentication vtymethod
 transport input ssh
</pre>

* The VTY number is essentially the number of connections that can occur, 0 4 is 5 connections.
* logging synchronous will keep log messages from interrupting your typing.
* login authentication vtymethod tells the router to use the vtymethod in the AAA settings for authentication.
* transport input ssh will set the router to only accept secure shell connections.

==== Console and Auxiliary Lines ====
===== Disabling the AUX Port =====
Unless you are using the AUX line for an AUX2CON connection, then it is highly recommended that the AUX port be disabled.
<pre>
line aux 0
 transport input none
 transport output none
 no exec
 exec-timeout 0 1
 no password
</pre>

===== Configuring the CON port =====
<pre>
line con 0
 exec-timeout 30 0
 login authentication vtymethod
</pre>