RE: REFUSE-MESSAGE command

From: Brian Dennis (brian@labforge.com)
Date: Wed Feb 19 2003 - 20:47:12 GMT-3


What if all lines are full then the person on line 2 drops. What line is
the next person who telnets in going to hit ;-)

If you want to assign a separate vty for an admin user you should set it
up using a rotary.

Rack4R1#sho run | begin line vty
line vty 0 4
 access-class 100 in
 password XXXXXX
 login
 rotary 1
!
end

Rack4R1#sho run | include access-list 100
access-list 100 deny tcp any any eq telnet
access-list 100 permit tcp any any eq 7001
Rack4R1#

TCP port 3001 would also work.

Brian Dennis, CCIE #2210 (R&S/ISP Dial/Security)
brian@labforge.com
http://www.labforge.com

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Chuck Church
Sent: Wednesday, February 19, 2003 2:57 PM
To: jfaure@sztele.com; erickbe@yahoo.com
Cc: ccielab@groupstudy.com
Subject: Re: REFUSE-MESSAGE command

I suppose you could use your normal login info for the 0 through 3 VTY
lines, and then put an autocommand for VTY line 4, showing your message.
Or
you could assign a separate password for this line, so only you can get
into
that line, so that the main network guy is ever blocked from the device.

Chuck Church
CCIE #8776, MCNE, MCSE

----- Original Message -----
From: <jfaure@sztele.com>
To: <erickbe@yahoo.com>
Cc: <ccielab@groupstudy.com>
Sent: Wednesday, February 19, 2003 1:54 PM
Subject: Re: REFUSE-MESSAGE command

> Erick:
>
> Do you know some solution to receive a preconfigured "refuse" message
if
> all the vty lines are busy in the router wich you are telnetting?
>
> I'm also trying with the global "busy-message" command, but no luck:
you
> receive a standard notification, not the message configured.
>
> Regards
> Juan Faure Ferrer
> email: jfaure@sztele.com
>
> Lmnea de Negocio de Telematica y CC
> Ingeniero de Integracisn de Redes y Sistemas
>
------------------------------------------------------------------------

--
--
>
> SOLUZIONA TELECOMUNICACIONES
> Servicios Profesionales de UNION FENOSA
> Jerez, 3
> 28016 MADRID
> tel 91 579 30 00 fax 91 350 72 83
>
------------------------------------------------------------------------
--
-
>
>
>
>
>                     "Erick B."
>                     <erickbe@yahoo       Para:   jfaure@sztele.com,
>                     .com>                 ccielab@groupstudy.com
>                                          cc:
>                     19/02/03 06:44       Asunto: Re: REFUSE-MESSAGE
command
>                     Por favor,
>                     responda a
>                     erickbe
>
>
>
>
>
>
> I think this is more for TTY lines (reverse telnet,
> etc). When all VTYs are in use the router doesn't have
> a open TCP port to connect to so it doesn't get to a
> connected TCP state.
>
> I do know the refuse-message w/tty does not work as
> documented since 12.0 code. I had this working on some
> term servers at work on old code until a code upgrade.
>
>
> With 12.0, 12.0T, 12.1, 12.1T, 12.2, 12.2T on various
> router and feature sets there is a bug with it that
> hasn't been fixed yet.
>
> With above versions, when you try to access a busy
> line it saids:
>
> Line has invalid autocommand "show
> refuse-message"Connection closed by foreign host
>
> *instead of* the refuse-message defined.
>
> The bug id is CSCdy51736 and is still in new status.
> The bug description is a little off and I've also
> asked it be corrected, and submitted feedback multiple
> times on it as this bug effects a production term
> server environment at work (minor annoyance).
>
> I've inquired about the bug w/TAC a few times but no
> one is assigned to work on it I'm told. Guess it's not
> that big of problem to get fixed. Now that you've
> reminded me I'll open another case on this to see if
> they can fix this.
>
> Erick
>
> --- jfaure@sztele.com wrote:
> > Hi,
> >
> > I'm trying this ios feature. I though if you enable
> > this in the vty line,
> > when the 5 vty connections are busy , you receive
> > the message you put
> > before this command. However, i've tried and at the
> > remote router only
> > appears the standard message informing you that the
> > connection was refused,
> > but no the message you have configured.
> >
> > Am i missing something ?
> >
> > Any help would be apreciated. Regards
>
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Shopping - Send Flowers for Valentine's Day
> http://shopping.yahoo.com


This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:32 GMT-3