Re: Telnet and SSH doubt

From: marc abel <marcabel_at_gmail.com>
Date: Sun, 31 Jul 2011 10:47:50 -0500

I haven't labbed this up but couldn't you do it with an extended access-list?

Extended IP access list TELNET
    10 permit ip host 1.1.1.1 any
    20 permit ip host 2.2.2.2 any
    30 permit tcp host 3.3.3.3 any eq 22

 line vty 0 4
 transport input telnet ssh
 access-class TELNET in

On Sun, Jul 31, 2011 at 10:32 AM, GAURAV MADAN
<gauravmadan1177_at_gmail.com> wrote:
> Hi
>
> Sorry for basic question but it is eating up my mind .. may be I am missing
> up something very basic .
>
> Task
> --------
> Permit telnet access for 1.1.1.1 and 2.2.2.2
> Permit SSH access for 1.1.1.1 ,2.2.2.2 , 3.3.3.3
>
> These are on VTY lines
>
> What I do
> ------------
>
> !
> ip access-list standard TELNET
> permit 1.1.1.1
> permit 2.2.2.2
> permit 3.3.3.3
> !
>
> line vty 0 4
> transport input telnet ssh
> access-class TELNET in
> !
> !
>
> I am sure I am missing something basic .. How do we differentiate in what
> hosts are allowed to telnet and what hosts are allowed to SSH ?
>
> Thanks in advance
> Gaurav Madan
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sun Jul 31 2011 - 10:47:50 ART

This archive was generated by hypermail 2.2.0 : Mon Aug 01 2011 - 06:30:06 ART