Question: how to secure vty lines cisco?
Answer: Enable SSH and use a stronger key modulus greater than the default of 512. Configure the SSH version, SSH time out and retry settings. User accounts can either be local or the most secure is using RADIUS/TACACS, see previous blog post for configuring Cisco devices to authenticate to a Windows NPS RADIUS server HERE.