So let's configure
a login banner. So banner login specify the delimiting character, which in this case is going to be
a hash or pound and I'll say login banner.
Specify the delimiting character to end the message, so hash or pound, so previously when we telnet
it to router 2 we saw the message of the day banner and then we were prompted for our password.
Now, when we turn it back, we see firstly message of the day and then a log in banner and then our
authentication information.
Now on the console,
notice the banner message of the day is displayed, but no, login banner is displayed, so it's
different to what we saw on the VTY line, and that's because we didn't configure any kind of authentication
on the console.
So if I now specify a password on the console and then login, we see both the message of the day banner
as well as the login banner and then we're prompted for our password.
So this is shown when I log in is configured, in other words, when you're prompted to enter your password.
So we see a message of the day first, then login
banner, banner exec.
So let's say exec banner,
delimiting character be back to global config mode,
telnet back to the router, we see message of the day, login password prompt, and
when we now login, we see the exec banner.
So the banner is only displayed after log in on the console of RAW to receive the message of the day
log in banner.
We put a password in.
After entering our password, we see the banner.
So exact banner is only displayed after successful authentication.
Now, generally, you're not going to create lots of banners, you may, as an example, just use one
of them, such as the Log-in banner or the banner or message of the day banner.
It is important, however, that you specify some kind of banner on your routers, so as an example,
if we telnet from about a two to one in this example, we need to set up a password.
So a line VTI zero to four login password, Sasko and Telnet back again.
We are not shown any warning messages about not accessing this router.
So we should have some kind of banner, which may be something such as a login banner stating that if
you access this router, I will find you.
And we can imagine what we would say then I wouldn't put that on this video, but I will find you and
do something nasty to you.
So now when we tell it to the radar notice, it says if you access this router, I will find you and
destroy you or something.
I should obviously talk to your lawyer, solicitor, attorney, whichever, Temmuz, you should talk
to someone in the legal department to get the proper phrase to add to this message.
So that's banners, to sum up
we have an exec banner, message of the day banner, and login banner, message of the day is typically used
typically used to display some kind of message of that day, such as the router is going to be taken offline.
Login is used before a login prompt and exec is shown after logging when the exec process starts.
Don't forget, your delimiting character shouldn't be a character used in your message.
So as an example, if I specify O, and then say my Cisco router.
It immediately ends the message at this point.
So if I telnet to the router notice, my message of the day banner has been changed to this.
Now I didn't specify message of the day
but do show run pipe begin banner,
Shows us that that's what's been configured in the output on the show run notice the hash or pound was
changed to ^C to indicate the start and end of the message.
That's useful when you want to do a copy and paste.
So as an example, we could copy this
and on router 1, we could paste that message.
So now let me telnet to router, notice the login banner displays and the exec banner displays.