RE: Telnet to loopback only

From: Victor Cappuccio (cvictor@protokolgroup.com)
Date: Fri Aug 11 2006 - 18:08:46 ART


Hi Guys,

http://www.groupstudy.com/archives/ccielab/200604/msg01295.html

Zero, that does not seems to be working

-----Mensaje original-----
De: nobody@groupstudy.com [mailto:nobody@groupstudy.com] En nombre de
ZeroFlash
Enviado el: Viernes, 11 de Agosto de 2006 04:13 p.m.
Para: 'Patricia Loreal'; Cisco certification
Asunto: RE: Telnet to loopback only

I would actually use an extended ACL stating something like this:

Access-list 100 permit tcp any host 150.1.1.1 eq 23
Access-list 100 permit tcp any host 150.1.2.2 eq 23
Access-list 100 permit tcp any host 150.1.3.3 eq 23

line vty 0 4
access-class 100 in

ZeroFlash
CCIE #16217

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Patricia Loreal
Sent: Friday, August 11, 2006 4:03 PM
To: Cisco certification
Subject: Telnet to loopback only

Dear Team!

Task says: "make telnet to loopback0 access with privilege 15", Easy enough
but IMO there is a catch here The Loopbacks assigned to routers are:

150.1.1.1/32
150.1.2.2/32
150.1.3.3/32

Should I permit all loopback address range at line vty in using a standard
access-list?

access-list 1 permit 150.1.1.1
access-list 1 permit 150.1.2.2
access-list 1 permit 150.1.3.3

line vty 0 4
access-class 1 in

Opinions about this is highly appreciated

Thanks
Patricia



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:56 ART