Hola,
Necesita las líneas marcadas en negrita, esto cifrará sus contraseñas VTY, habilitará el registro en el host y deshabilitará el registro de la consola.
R1#sh run
Building configuration...
Current configuration : 2699 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
--> service password-encryption
!
hostname R1
!
--> no logging console
login block-for 70 attempts 2 within 70
!
enable secret 5 $1$mERr$C20JyJJbizpK4zTVvyoW60
!
aaa new-model
!
aaa authentication login default local
aaa authentication enable default enable
!
aaa authorization exec default local
!
no ip cef
no ipv6 cef
!
username admin password 7 08204843001704131F0202443A392D3E3A39271402565254
username cisco password 7 0822455D0A165747405F4C14382232213F302516474756
username soportebasico password 7 0822455D0A165747405F
!
license udi pid CISCO2911/K9 sn FTX1524R67K-
!
ip ssh version 2
ip domain-name R1
!
spanning-tree mode pvst
!
interface Loopback0
ip address 1.1.1.1 255.255.255.0
!
interface GigabitEthernet0/0
ip address 10.1.13.1 255.255.255.240
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 10.1.12.1 255.255.255.240
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/3/0
ip address 100.1.15.1 255.255.255.240
clock rate 2000000
!
interface Serial0/3/1
ip address 10.1.14.1 255.255.255.240
ip access-group 100 in
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
router-id 1.1.1.1
log-adjacency-changes
network 10.1.12.0 0.0.0.15 area 0
network 10.1.13.0 0.0.0.15 area 0
network 10.1.14.0 0.0.0.15 area 0
network 100.1.15.0 0.0.0.15 area 0
network 1.1.1.1 0.0.0.0 area 0
!
router rip
!
ip classless
!
ip flow-export version 9
!
ip access-list extended sl_def_acl
deny tcp any any eq telnet
deny tcp any any eq www
deny tcp any any eq 22
permit tcp any any eq 22
ip access-list standard PERMIT-admin
permit host 10.1.12.2
permit host 10.1.13.1
ip access-list standard Permit-admin
ip access-list standard Permit-cisco
permit host 10.1.12.2
permit host 10.1.13.1
!
--> logging trap debugging
--> logging 10.5.1.201
line con 0
exec-timeout 2 30
!
line aux 0
!
line vty 0 4
password 7 0822455D0A165747405F
login authentication default
transport input telnet
privilege level 15
!
parser view vista1
secret 5 $1$mERr$Zfob4i2yfOhUl1ACAqgll1
commands exec include configure
commands exec include configure terminal
commands exec include debug
commands exec include logout
commands exec include show
commands exec include show version
!
parser view vista2
secret 5 $1$mERr$m9Lzu0IrkoP.979ehAI70/
commands exec include ping
commands exec include show
commands exec include show ip
commands exec include show running-config
commands exec include show version
commands exec include traceroute
!
end
