1. Home
  2. Cisco Systems
  3. Deny Telnet access to the switche

Deny Telnet access to the switche

Hi all,

I use Catalyst 2950/3550 with 48 ports and 2 Gbic interfaces. I need to permit telnet switche for administration only from network

192.168.2.0

I apply this configuration but its not work :

access-list 102 permit tcp 192.168.2.0 0.0.0.255 192.168.100.0 0.0.0.255 eq telnet access-list 102 deny tcp any any eq telnet access-list 102 permit tcp any any

How can i secure access to switche from telnet ?

Thank You very muich for help

Best Regards NS

Reply to
ns
Loading thread data ...

Did you apply the access list to anything? Actually, the best way to handle this is to add to the vty lines, which would cover all interfaces. Here's what you could do:

access-list 25 permit 192.168.2.0 0.0.0.255

line vty 0 4 access-class 25 in

Apply the access list to each group of vty lines or put the whole range in one line.

Hope that helps,

Jim

Reply to
Scooby

Yes, i apply it ont Interface Giga.

Thanks a lot Jim. I will try it to apply your code.

Best Regards NS

Reply to
ns

ThankYou very much Jim. It's work fine!!

Best Regards NS

Reply to
ns

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.