Step 1 – Configure the local username and password in a Cisco IOS Device

ITKEAS01#configure t              

ITKEAS01(config)#username itkeadmin password secret $p@ssw0rd$

Step 2 – Enable local authentication on a Console port

ITKEAS01(config)#line console 0

ITKEAS01(config)#login local

Step 3 – Enable local authentication for telnet session

ITKEAS01(config)#line vty  0 4

ITKEAS01(config)#login local

Once you configure these local authentication you will see the following prompt when evr you try to telnet the Cisco IOS Device.

Since privile level configuration differs from this configuration I will try to post those details in upcoming posts.

Whenever you try to access any Cisco Router or a Cisco Switch for management propose by using a console, telnet or SSH, by default you will be asked to enter the password. And if you want to enter in the privilege mode you are simply asked to enter the enable password. This is the normal method of accessing the Cisco Router or a Cisco Switch. But you are exposing your Cisco routers and Switches for an easy unauthorized access. Anybody can access your Cisco devices using a console cable or a by telnet if he knows the enable password.

You can make your Cisco Routers and Switches more secure by using a local username and password for each individuals who will be access your Cisco devices. By employing this methodology you can make your Cisco Routers and Switches more resistant to unauthorized access.

More over by configuring local usernames on the Cisco Routers and Cisco Switches you have the flexibility to add granularity regarding the levels of management privileges for different users. For example you can configure a local username with full privileges (privilege level 15), who can configure anything on a Cisco Router or a Switch where as if you configure a local user with unprivileged access (privilege level 1) he can just see few things on a Cisco Router or Switch. I will show how to configure the local usernames and password with different privilege levels in Cisco Devices in my upcoming post.