banner login # [message] #
Configures a message that displays before the username/password login prompt on a Cisco device, used for legal warnings or informational banners.
banner login # [message] #When to Use This Command
- Displaying an authorized access warning to comply with legal requirements
- Informing users of maintenance windows or system status before login
- Providing contact information for help desk or network administrators
- Displaying a company policy reminder for acceptable use
Command Examples
Basic legal warning banner
banner login #
Unauthorized access prohibited.
All activity is monitored.
#The delimiter '#' marks the start and end of the banner message. The message appears before the login prompt. No output is shown after entering the command; it is verified by exiting and re-entering privileged EXEC or via 'show running-config'.
Multi-line maintenance banner
banner login #
*** SYSTEM MAINTENANCE ***
Scheduled downtime: Sunday 2:00 AM - 4:00 AM
Contact noc@company.com
#Multi-line banners are entered by pressing Enter after each line. The delimiter '#' must be on its own line at the end. The banner will display exactly as typed.
Understanding the Output
The 'banner login' command does not produce immediate output. To verify the configured banner, use 'show running-config | include banner login' or exit the session and reconnect via SSH/telnet to see the banner displayed before the login prompt. The banner text appears exactly as entered, with line breaks preserved. Ensure the delimiter character does not appear in the message to avoid premature termination.
CCNA Exam Tips
The delimiter can be any character not appearing in the message; common choices are #, %, or $.
The 'banner login' appears before the login prompt; 'banner motd' appears after login but before the EXEC prompt.
On the exam, you may be asked to configure a banner that warns against unauthorized access.
Remember that the banner must be enclosed by the same delimiter at start and end, each on its own line.
Common Mistakes
Using a delimiter character that appears within the message, causing the banner to be truncated.
Forgetting to include the closing delimiter, which causes the CLI to wait for more input.
Confusing 'banner login' with 'banner motd' — the login banner appears before authentication, motd after.
Related Commands
banner motd # [message] #
The 'banner motd' command configures a Message of the Day (MOTD) banner that displays upon login to the router, used to display legal warnings, system information, or welcome messages.
show running-config
Displays the current active configuration in DRAM, showing all non-default settings.
Practice for the CCNA 200-301
Test your knowledge with hundreds of CCNA practice questions covering all exam domains.
Practice CCNA Questions