A network engineer must enable SSH and SCP on a Cisco IOS router.

SCP relies on SSH to provide authenticated and encrypted file transfer. After the required RSA keys exist and the SCP server has been enabled, the router should explicitly use SSH version 2 with the ip ssh version 2 command. Cisco documents that SCP is an application provided through SSH and that SSHv2 supplies the supported secure-shell transport and stronger protocol operation; see Cisco’s Secure Shell Version 2 configuration guide. Restricting individual SSH commands is an authorization refinement, not the next protocol-enablement step. Strict host-key checking is primarily a client-side trust behavior and does not activate the IOS SSH service. An ACL can restrict management sources, but denying LAN access does not establish SSH or SCP functionality. Consequently, enabling SSHv2 is the required action.

================