200-301: Cisco Certified Network AssociateDemo

The exhibit shows the SSH prerequisites are already in place: a hostname and an IP domain name are configured, show crypto key mypubkey rsa confirms an RSA key pair has already been generated, and a local account (username CCNA privilege 1 password 0 cisco123) exists with login local applied to the VTY lines. Creating another username or generating RSA keys is therefore unnecessary. Two gaps remain. First, both VTY ranges still permit only Telnet (transport input telnet), so the lines must be changed with transport input ssh to allow encrypted management access. Second, the only local user has privilege level 1 and no enable secret is set, so a remote user who authenticates over SSH lands in user EXEC mode and gets % No password set. when entering enable, making configuration impossible. Adding enable secret ccnaTest123 supplies the privileged-EXEC password needed to actually configure the switch remotely. The trunk-port command is unrelated to management access.