How to Enable Telnet Access Using Router Local Username/Password Database?
An administrator must enable Telnet access to Router X using the router username and password database for authentication. Which configuration should be applied?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests your understanding of management plane access methods, specifically that VTY lines are the virtual terminal lines used for Telnet and SSH. The common trap is to mistake global AAA configuration or auxiliary port setup for VTY-level local authentication.
The correct configuration for enabling Telnet access with a router's local username/password database centers on the VTY lines. The Cisco community agrees that answer D is the intended choice, with follow-up commands like 'login local' and 'transport input telnet' being essential for a complete implementation.
The most common wrong answer is A ('line aux 0') or B ('aaa new-model'). A targets the auxiliary port, which is not used for Telnet; B only enables the AAA framework and does not configure local login on VTY lines. Both lack the necessary VTY context and the 'login local' command.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
VTY lines are the virtual terminal lines that handle Telnet, SSH, and other remote management protocols. To authenticate users against the local username/password database, you must enter VTY line configuration mode and issue 'login local'. Option D specifically points to 'line vty 0 4', which is the correct line for Telnet access. Community comments emphasize that 'login local' is the critical command under the VTY lines to use the local database.Why the Other Options Are Wrong
Option A targets the auxiliary line ('line aux 0'), which is used for modem console management, not Telnet. Option B ('aaa new-model') is a global command that enables AAA services, but by itself it does not configure authentication for VTY lines. Options C and D are presented with identical text, but the intended correct answer is D because it correctly identifies the need to configure VTY lines; the other options do not provide any method for local authentication.Community Comment Notes
Comment [1] plainly states 'D | login → password login local → username + password', indicating the standard VTY configuration needed. Comment [2] clarifies that on newer IOS versions (e.g., 17.1) you may also need to explicitly enable Telnet with 'transport input telnet' or 'all', while older devices had it enabled by default. Comment [3] confirms that many search results show Telnet on by default, but in CML with IOS 15.9 the default is 'transport input none', so candidates must consider the IOS version — but for the exam, selecting the VTY line is the core action.Official Reference
- https://www.cisco.com/c/en/us/support/docs/telepresence/telepresence-video-communication-server-expressway/200293-Configure-Telnet-and-SSH-on-a-Cisco-D.html
- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-config-978.html
- https://www.cisco.com/c/en/us/support/docs/routers/2001-router/9284-vty.html
Exam Strategy
When asked about enabling Telnet or SSH with local authentication, immediately eliminate any answer that doesn't reference VTY lines. Then ensure the answer includes or implies 'login local' under the VTY configuration; if the options are incomplete, choose the one that correctly identifies the VTY context as the necessary starting point.
Related Analysis
Practice All 350-401 Questions
Access 218 questions with complete answers and detailed explanations.
View Full 350-401 Practice Test →