RE: Is it possible to change vty tcp (telnet) port to something o ther than 23?

From: Brian Dennis (brian@xxxxxx)
Date: Fri May 11 2001 - 16:59:42 GMT-3


   
You can also put a vty in a rotary group to get it to answer to a different
port. This will enable the particular vty to answer to port number 7000 +
the rotary group number you configured. See below.

Another solution would be to use a rolled cable and connect it from the aux
port to the console port. Then just telnet to the high port used by the aux
port and you'll be on the console.

Brian Dennis, CCIE #2210 (R&S)(ISP/Dial) CCSI #98640
5G Networks, Inc.
brian@5g.net
(925) 260-2724

Access_Server-B#172.16.1.50
Trying 172.16.1.50 ... Open

User Access Verification

Username: root
Password:
Access_Server-A#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Access_Server-A(config)#line vty 4
Access_Server-A(config-line)#rotary ?
  <0-100> Rotary group to add line to

Access_Server-A(config-line)#rotary 1
Access_Server-A(config-line)#^Z
Access_Server-A#exit

[Connection to 172.16.1.50 closed by foreign host]
Access_Server-B#172.16.1.50 7001
Trying 172.16.1.50, 7001 ... Open

User Access Verification

Username: root
Password:
Access_Server-A#

> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Casassa, Nathan
> Sent: Friday, May 11, 2001 11:57 AM
> To: 'Henson, Charles'; crl; Rodney Cain; Groupstudy
> Subject: RE: Is it possible to change vty tcp (telnet) port to something
> o ther than 23?
>
>
> I think his question makes perfect sense to me. He wants to know
> if you can
> change the port number the router uses for incoming telnet instead of it's
> default of 23. The answer is yes. You can use NAT to do this. For example
> if the accessible IP is 192.168.1.1 do this:
>
> On the incoming interface configure "ip nat outside"
>
> and in global config
>
> ip nat inside source static tcp 192.168.1.192 23 192.168.1.192 999
>
>
> Now when you try to telnet you must specify port 999. I know it
> works fine
> because I do it with most of my routers.
>
>
>
> -----Original Message-----
> From: Henson, Charles [mailto:CHenson@neteffectcorp.com]
> Sent: Friday, May 11, 2001 10:35 AM
> To: crl; Rodney Cain; Groupstudy
> Subject: RE: Is it possible to change vty tcp (telnet) port to something
> o ther than 23?
>
>
> W/O sounding stupid can you elaborate on that please?
>
> Charles
>
>
> -----Original Message-----
> From: crl [mailto:cisco@crl.fdns.net]
> Sent: Friday, May 11, 2001 10:13 AM
> To: Rodney Cain; Groupstudy
> Subject: Re: Is it possible to change vty tcp (telnet) port to something
> other than 23?
>
>
> Since it's the terminal server you're connecting to, you can
> telnet directly
> to the devices on the async port (ie. ports 2001-2016). It still won't let
> you into the termserver itself, but this might suffice for what
> you need...
>
>
> ----- Original Message -----
> From: "Rodney Cain" <rodney@mousetails.net>
> To: <ccielab@groupstudy.com>
> Sent: Friday, May 11, 2001 8:38 AM
> Subject: Is it possible to change vty tcp (telnet) port to something other
> than 23?
>
>
> > Is it possible to change the port a router listens on for vty
> telnet type
> > connections to something other than 23..... say like maybe 999 for
> example?
> >
> > My ISP is blocking inbound telnet connections (tcp port 23), which
> prevents me
> > from connecting directly to my 2511 which is acting as a
> terminal server.
> I
> > realize that I could do a port redirect from a small firewall,
> linux box,
> etc.
> > but I was hoping there was a secret IOS setting which would
> accomplish the
> > same thing. I suppose that if the answer is that it is not
> possible, then
> I
> > will have to investigate other options, like ssh. I have had no luck
> > searching for an answer on CCO and elsewhere....
> >
> > Thanks for any help.
> >
> > Rodney Cain
> > rodney@mousetails.net
> > **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:39 GMT-3