Question

A network engineer is hardening a Catalyst 9300 switch for remote management. Corporate policy requires that only SSH (never Telnet) be permitted to the VTY lines, that only management subnet 10.10.50.0/24 be allowed to connect, and that the strongest supported SSH protocol be enforced. Which configuration set correctly meets all three requirements?

Accepted Answer

ip ssh version 2 / line vty 0 15 / transport input ssh / access-class 10 in — with 'access-list 10 permit 10.10.50.0 0.0.0.255'

Answer

ip ssh version 1 / line vty 0 15 / transport input all / access-class 10 out — with 'access-list 10 permit 10.10.50.0 0.0.0.255'

Answer

ip ssh version 2 / line vty 0 15 / transport input telnet ssh / ip access-group 10 in — with 'access-list 10 permit 10.10.50.0 0.0.0.255'

Answer

ip ssh version 2 / line vty 0 15 / transport output ssh / access-class 10 in — with 'access-list 10 permit host 10.10.50.0'