Re: what does outbound VTY restricting with ACL mean?

From: Bryan Bartik (bbartik@ipexpert.com)
Date: Wed Mar 25 2009 - 15:00:58 ART


Hi Jeremy,

Outbound VTY ACL can restrict the user from remotely accessing other
devices. Prevents using the device as a jumping point to other devices. You
will get a message like this:

R5#telnet 192.168.156.1
Trying 192.168.156.1 ... Open

R1>telnet 192.168.12.2
Trying 192.168.12.2 ...
% Connections to that host not permitted from this terminal
R1>

This is the ACL on R1:

R1(config)#access-list 2 deny any
R1(config)#line vty 0 4
R1(config-line)#no login
R1(config-line)#access-class 2 out

You can also do this:

R1(config)#line vty 0 4
R1(config-line)#transport output none

Bryan Bartik
CCIE #23707, CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com

On Wed, Mar 25, 2009 at 11:45 AM, jeremy co <jeremy.cool14@gmail.com> wrote:

> Hi,
>
> what does outbound VTY restricting with ACL mean?
>
> vty lines are used for accessing to router, what does outbound VTY
> restricting with ACL mean?
>
> how can we initiate outbound traffic on vty line?
>
>
> Jeremy
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

--

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Mon Apr 06 2009 - 06:44:07 ART