Re: Telnet Control

yeah,

but it seems that there is not other way but to add the acl to a route-map
or MQC.

Thanx guys for your help.

Splinter

On Fri, May 29, 2009 at 1:59 PM, Rich Collins <nilsi2002_at_gmail.com> wrote:

> Hi Dan,
>
> That looks like a nice way to do it without having to filter
> individual interfaces on the target router R1. I never thought of
> that.
>
> However you still have the ACL which isn't allowed.
>
>
> Thanks
> Rich
>
> On Thu, May 28, 2009 at 11:49 PM, Danshtr <danshtr_at_gmail.com> wrote:
> > You can also use local policy PBR to drop returning telnet packets to
> > non-loopback IP addresses.
> > Assuming Loopback addresses are in the scope of 9.1.99.*
> >
> > R1(config)#access-list 101 deny ip any 9.1.99.0 0.0.0.255
> > R1(config)#access-list 101 permit tcp any eq 23 any
> > !
> > R1(config)#route-map rmDenyTelnet
> > R1(config-route-map)#match ip address 101
> > R1(config-route-map)#set interface null 0
> > !
> > R1(config)#ip local policy route-map rmDenyTelnet
> >
> > HTH
> >
> >
> >
> > Best regards,
> > Dan
> >
> >
> >
> > On Wed, May 27, 2009 at 8:32 PM, Splinter <splinter330_at_gmail.com> wrote:
> >
> >> Hi,
> >>
> >> is there any other way to configure telnet access control without using
> >> acls.
> >>
> >>
> >> i know it can be done with MQC but then you will be using acls to
> >> accomplish
> >> this task.
> >>
> >> any feedback would be great.
> >>
> >> Splinter
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri May 29 2009 - 14:21:15 ART