From: Casassa, Nathan (ncasassa@xxxxxxxxxxx)
Date: Fri May 11 2001 - 15:57:16 GMT-3
I think his question makes perfect sense to me. He wants to know if you can
change the port number the router uses for incoming telnet instead of it's
default of 23. The answer is yes. You can use NAT to do this. For example
if the accessible IP is 192.168.1.1 do this:
On the incoming interface configure "ip nat outside"
and in global config
ip nat inside source static tcp 192.168.1.192 23 192.168.1.192 999
Now when you try to telnet you must specify port 999. I know it works fine
because I do it with most of my routers.
-----Original Message-----
From: Henson, Charles [mailto:CHenson@neteffectcorp.com]
Sent: Friday, May 11, 2001 10:35 AM
To: crl; Rodney Cain; Groupstudy
Subject: RE: Is it possible to change vty tcp (telnet) port to something
o ther than 23?
W/O sounding stupid can you elaborate on that please?
Charles
-----Original Message-----
From: crl [mailto:cisco@crl.fdns.net]
Sent: Friday, May 11, 2001 10:13 AM
To: Rodney Cain; Groupstudy
Subject: Re: Is it possible to change vty tcp (telnet) port to something
other than 23?
Since it's the terminal server you're connecting to, you can telnet directly
to the devices on the async port (ie. ports 2001-2016). It still won't let
you into the termserver itself, but this might suffice for what you need...
----- Original Message -----
From: "Rodney Cain" <rodney@mousetails.net>
To: <ccielab@groupstudy.com>
Sent: Friday, May 11, 2001 8:38 AM
Subject: Is it possible to change vty tcp (telnet) port to something other
than 23?
> Is it possible to change the port a router listens on for vty telnet type
> connections to something other than 23..... say like maybe 999 for
example?
>
> My ISP is blocking inbound telnet connections (tcp port 23), which
prevents me
> from connecting directly to my 2511 which is acting as a terminal server.
I
> realize that I could do a port redirect from a small firewall, linux box,
etc.
> but I was hoping there was a secret IOS setting which would accomplish the
> same thing. I suppose that if the answer is that it is not possible, then
I
> will have to investigate other options, like ssh. I have had no luck
> searching for an answer on CCO and elsewhere....
>
> Thanks for any help.
>
> Rodney Cain
> rodney@mousetails.net
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:39 GMT-3