locking down router for auditors

Apr 12, 2005 1 Replies

I have recomendations from auditors for the following tasks, but I wanted clarification as to the potential problems this may cause.



The first one is to lock down the AUX 0 port. I was told I should run the following commands:



router(config)# line aux 0 router(config-line)# no exec router(config-line)# transport input none router(config-line)# exit


My concern is that when I bring my laptop up to the router and plug into the console port, I won't be able to connect.



The next one is: Specify VTY Protocol



router(config)# line INSTANCE router(config-line)# transport input telnet (or ssh) router(config-line)# exit



If I implement this, do I need to connect to my routers a different way? Currently, I open up a telnet window and telnet from my desktop. This sounds like I would need to access this through different means.



Any help you provide is appreciated.



Regards, Chuck



These are both very good recommendations.

The aux port is different than the console port, the console is con 0.

On the vty, you are specifying that only telnet and ssh are valid for login. You will still be able to telnet to the router.

Scott

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required