Increasing Access security

Security passwords min-length 10

service password-encryption
line vty 0 4
exec-timeout 3 30
line console 0
exec-timeout 3 30

secret password algorithms

enable algorithm-type (md5|scrypt|sha256) secret "password"
username algorithm
username "name" algorithm-type (md5|scrypt|sha256) secret "password"

securing line access

username bob algorithm-type scrypt secret cisco54321

line con 0
no password
login local
exit

line aux 0
no password
login local
exit

line vty 0 4
login local
transport input ssh

Configuring login enhansment features

login block-for "seconds" attempts "tries" within "seconds"

login quiet-mode access-class "access class name/access class number"

login delay "seconds"

login on-success log [every "login"]

login on-failure log [every "login"]

enable login enhansment

login block-for "seconds" attempts "tries" within "seconds"