I haven't labbed this up but couldn't you do it with an extended access-list?
Extended IP access list TELNET
10 permit ip host 1.1.1.1 any
20 permit ip host 2.2.2.2 any
30 permit tcp host 3.3.3.3 any eq 22
line vty 0 4
transport input telnet ssh
access-class TELNET in
On Sun, Jul 31, 2011 at 10:32 AM, GAURAV MADAN
<gauravmadan1177_at_gmail.com> wrote:
> Hi
>
> Sorry for basic question but it is eating up my mind .. may be I am missing
> up something very basic .
>
> Task
> --------
> Permit telnet access for 1.1.1.1 and 2.2.2.2
> Permit SSH access for 1.1.1.1 ,2.2.2.2 , 3.3.3.3
>
> These are on VTY lines
>
> What I do
> ------------
>
> !
> ip access-list standard TELNET
> permit 1.1.1.1
> permit 2.2.2.2
> permit 3.3.3.3
> !
>
> line vty 0 4
> transport input telnet ssh
> access-class TELNET in
> !
> !
>
> I am sure I am missing something basic .. How do we differentiate in what
> hosts are allowed to telnet and what hosts are allowed to SSH ?
>
> Thanks in advance
> Gaurav Madan
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Sun Jul 31 2011 - 10:47:50 ART
This archive was generated by hypermail 2.2.0 : Mon Aug 01 2011 - 06:30:06 ART