RE: Telnet to loopback only

From: ZeroFlash (Fire_Ice@verizon.net)
Date: Fri Aug 11 2006 - 17:13:12 ART


I would actually use an extended ACL stating something like this:

Access-list 100 permit tcp any host 150.1.1.1 eq 23
Access-list 100 permit tcp any host 150.1.2.2 eq 23
Access-list 100 permit tcp any host 150.1.3.3 eq 23

line vty 0 4
access-class 100 in

ZeroFlash
CCIE #16217

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Patricia Loreal
Sent: Friday, August 11, 2006 4:03 PM
To: Cisco certification
Subject: Telnet to loopback only

Dear Team!

Task says: "make telnet to loopback0 access with privilege 15", Easy enough
but IMO there is a catch here The Loopbacks assigned to routers are:

150.1.1.1/32
150.1.2.2/32
150.1.3.3/32

Should I permit all loopback address range at line vty in using a standard
access-list?

access-list 1 permit 150.1.1.1
access-list 1 permit 150.1.2.2
access-list 1 permit 150.1.3.3

line vty 0 4
access-class 1 in

Opinions about this is highly appreciated

Thanks
Patricia



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:56 ART