Deny Telnet access to the switche

Apr 12, 2005 3 Replies

Hi all,



I use Catalyst 2950/3550 with 48 ports and 2 Gbic interfaces. I need to permit telnet switche for administration only from network



192.168.2.0

I apply this configuration but its not work :



access-list 102 permit tcp 192.168.2.0 0.0.0.255 192.168.100.0 0.0.0.255 eq telnet access-list 102 deny tcp any any eq telnet access-list 102 permit tcp any any



How can i secure access to switche from telnet ?



Thank You very muich for help



Best Regards NS


Did you apply the access list to anything? Actually, the best way to handle this is to add to the vty lines, which would cover all interfaces. Here's what you could do:

access-list 25 permit 192.168.2.0 0.0.0.255

line vty 0 4 access-class 25 in

Apply the access list to each group of vty lines or put the whole range in one line.

Hope that helps,

Jim

Yes, i apply it ont Interface Giga.

Thanks a lot Jim. I will try it to apply your code.

Best Regards NS

ThankYou very much Jim. It's work fine!!

Best Regards NS

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required