From: Brian Dennis (bdennis@internetworkexpert.com)
Date: Sat Apr 23 2005 - 12:49:59 GMT-3
> % List#100-telnet already contains this IP address
The router is telling you that the dynamic entry is already active. Do
a "show ip access-list 100" to verify this. To clear the dynamic entry,
use the "clear ip access-template" command.
Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
amir cohen
Sent: Friday, April 22, 2005 10:42 PM
To: ccielab@groupstudy.com
Subject: Autocommand for username
Hello,
i need some help in understanding autocommand:
this is my config:
======================================
username test password 0 test
username test autocommand access-enable timeout 5
!
access-list 100 dynamic telnet timeout 10 permit ip
any any
access-list 100 permit tcp 140.10.101.96 0.0.0.7 any
eq telnet
!
=================================
wheb i telneting from the above IP's i got:
R6#140.10.101.7
Trying 140.10.101.7 ... Open
User Access Verification
Username: test
Password:
% List#100-telnet already contains this IP address
pair
[Connection to 140.10.101.7 closed by foreign host]
Any ideas?
Thanx
Amir
This archive was generated by hypermail 2.1.4 : Tue May 03 2005 - 07:55:08 GMT-3