Re: How would you solve this task?

Lots of great advice in this thread, but here is my two cents. I like your
solution better. It is more specific and in my opinion more technically
correct. However, that is not the point of my post. The point is, this is
a task that is a great example of when to clarify with the proctor. Make
sure you choose your words carefully. I might have said something like
"This task wants me to log successful and unsuccessful telnet attempts. I
believe there are multiple ways to define a telnet attempt. For example, I
could simply log all packets destined for the well known telnet port of TCP
23, or I could be very specific and log login success/failures using the
login feature set. Could you clarify which would be more acceptable, or
does it matter?"

HTH

On Mon, Aug 8, 2011 at 4:03 PM, Daniel Dib <daniel.dib_at_reaper.nu> wrote:

> Hi please advise me on this task. I did an ASET TS lab which seems to be
> quite similar to real lab TS. This was one task. How would you configure
> the
> statement below?
>
> "R19 should be logging all telnet access attempts, successful or not.
> Configure R19 as needed such that telnet access is logged."
>
> The solution guide used an ACL bound to the VTY which logs all traffic
> hitting VTY. Sure, this will show if people are trying to telnet but
> nothing
> if session was successful or not. My solution was to use the login
> on-failure and login on-success feature. That would probably mean lost
> points for me, what do you think?
>
> Best regards,
>
> Daniel
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Regards,
Joe Astorino
CCIE #24347
Blog: http://astorinonetworks.com
"He not busy being born is busy dying" - Dylan
Blogs and organic groups at http://www.ccie.net