From: George Carr (gcarr@speakeasy.net)
Date: Sun Dec 10 2006 - 09:06:21 ART
One issue to look at is that there are more vty ports on your routers than
show up in the default config.
If you do the command: debug line vty ? from exec (not config) mode you'll
see that it is asking for a line number
or range of line numbers and is probably giving you a valid range something
like: <0-16> which is what my 2600's have.
If you use the transport input none on all the vty ports
1. They will all show up in the config
2. You should not be able to telnet out of the router at that point.
Caution: It can take a long time for the attempted outgoing connection to
time out.
HTH
- George
----- Original Message -----
From: "Kal Han" <calikali2006@gmail.com>
To: "Groupstudy" <security@groupstudy.com>; "Cisco certification"
<ccielab@groupstudy.com>
Sent: Friday, December 08, 2006 8:32 PM
Subject: telnet access - not expected.
> Hi
> I am trying to disable the telnet client on a router.
> Here is what I configured on *R3*
>
> *R3*(config-line)#do sh run | be line
> line con 0
> exec-timeout 0 0
> logging synchronous
> line aux 0
> line vty 0 3
> login
> *transport output none
> *line vty 4
> password cisco
> login
> rotary 3
> *transport output none*
>
> There are two problem. ( basically the transport input and output commands
> are not working )
> When I did it the last time. with the above config, because of *line vty 0
> 3
> * *not* having
> *password* I was not able to login to the router with just one attempt.
> and also I was *not* able *telnet out*. because of "transport output none"
> now its different. I am able to telnet into the router and also out of it.
> Please let me know whats wrong. How am I able to telnet out to *R1*?
> May be end of the day, I missed something simple.
> but im cant think of anything now.
> I rebooted :).. didnt work
>
> *R3*#telnet 195.1.113.1
> *R3*#telnet 195.1.113.1
> Trying 195.1.113.1 ... Open
>
> Username: admin
> Password:
>
> *R1*>
This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART