Securing administrative access to a router in Cisco packet tracer

[jk865]

Hi 

I am learning to secure administrative access to a router in packet tracer and would be grateful if anyone could feedback on my configuration. Many Thanks 

ip domain name cisco.com
service password-encryption
security passwords min-length 10
username admin privilege 15 secret mypassword
enable secret cisco12345

crypto key generate rsa modulus 1024

#line vty 0 15
login local
transport input ssh
ip ssh version 2
ip ssh authentication-retries 2
ip ssh time-out 90
login block-for 120 attempts 5 within 60
login delay 3

#line console 0
no password
login local
exec-timeout 3 30

#line aux 0
no password
login local
exec-timeout 3 30

[MichaelMcCoy]

Looks good to me, a little nitpicky, but you could lower the number of available vty lines.  For my devices, I do not use 16 vty lines, I only use 0-4 so the commands would be 

line vty 0 4
login local
transport input ssh
ip ssh version 2
ip ssh authentication-retries 2
ip ssh time-out 90
login block-for 120 attempts 5 within 60
login delay 3

line vty 5 15

no login