Catalyst 3750 - How to disabling telnet

[aebert]

Hi there

I've enabled ssh on my mosted beloved Cat3750 Switch. Now I'd like to disable TELNET.

This is my configuration:

------------------------------------------------

!

enable secret cisco

!

username cisco privilege 15 secret cisco

aaa new-model

aaa authentication login default local-case

aaa authentication login cisco none

!

no ip http server

ip http secure-server

!

line con 0

line vty 0 4

password cisco

login authentication cisco

transport preferred ssh

transport input ssh

line vty 5 15

!

end

(boring stuff is outlined...)

Could anybody give me some advice to get rid of TELNET?

Thanks in advance

[ankurbhasin]

I hope there is nothing configured for line vty 5 15?

Ankur

[allan.thomas]

Two considerations, firstly ensure that all your VTY sessions have the same configuration applied, you only have the first 5 session configured.

Secondly, I would be inclined to also specificy transport output none on all of your vty. This restricts outbound telnet or ssh sessions once a telnet onto this gateway has been established.

This especially useful if this gateway has been compromised for example. However, if you find this useful, then perhaps only enable outbound telnet or ssh on the Console port, therefore you have be connected via the console before you could telnet to another gateway.

Hope this helps

Allan.