How to Enable RESTCONF Access on Cisco Routers?

Core Concept: RESTCONF Prerequisites

RESTCONF is a web-based protocol that provides a programmatic interface for accessing configuration data, operational state data, and executing remote procedure calls on network devices. On Cisco IOS XE, enabling RESTCONF is not automatic; it requires specific global configuration commands and authentication methods.

Why Options A and B Are Correct

• restconf: This global configuration command explicitly enables the RESTCONF service. Without it, the router will not listen for RESTCONF requests on port 443, even if HTTPS is enabled.
• aaa authentication login default local: RESTCONF mandates AAA authentication. By configuring this command, the router is instructed to validate incoming RESTCONF credentials against the local user database. While enterprise environments might use TACACS+ or RADIUS, the local method is the standard baseline for certification labs and direct router access.

Why Other Options Are Incorrect

• line vty 0 15: Configures virtual terminal lines for CLI access (SSH/Telnet). RESTCONF operates over HTTPS at the application layer and does not rely on VTY sessions.
• netconf-yang: Enables NETCONF over SSH (port 830). Although both RESTCONF and NETCONF leverage YANG data models, they are distinct protocols with different transport mechanisms and authentication workflows. Selecting this indicates a fundamental confusion between the two standards.
• username restconf privilege 0: There is no requirement to create a dedicated system user named "restconf". Any locally defined user with appropriate privileges can authenticate via RESTCONF once AAA is properly configured.

Community Consensus & Verification

The 88% vote distribution strongly supports AB. As noted by community contributor babanaber, Cisco’s official programmability configuration guides confirm that the restconf command and an AAA authentication method list are the foundational requirements. The dissenting AD vote likely stems from mistaking netconf-yang for a generic YANG dependency, which is incorrect for RESTCONF-specific deployment.