08-07-2024 02:00 AM - last edited on 08-07-2024 02:44 AM by shazubai
Does anyone know what the following means that shows vty0 as a user ?
While further down in the last commands the user that exists in cpe is normally shown.
Basically I'm looking to find out who threw the commands with vty0@vty0
358 1 vty0@vty0 |line con 0
359 1 vty0@vty0 |exec-timeout 15 0
360 1 vty0@vty0 |logging synchronous
361 1 vty0@vty0 |transport input none
362 1 vty0@vty0 |transport output none
363 1 vty0@vty0 |stopbits 1
364 1 vty0@vty0 |line vty 0 4
365 1 vty0@vty0 |access-class 10 in
366 1 vty0@vty0 |exec-timeout 15 0
367 1 vty0@vty0 |privilege level 15
368 1 vty0@vty0 |session-limit 3
369 1 vty0@vty0 |logging synchronous
370 1 vty0@vty0 |no vacant-message
371 1 vty0@vty0 |transport input all
372 1 vty0@vty0 |transport output none
373 1 vty0@vty0 |ntp logging
374 1 vty0@vty0 |ntp source GigabitEthernet0/0/0
375 1 vty0@vty0 |ntp access-group peer 99
376 1 vty0@vty0 |ntp server XXXXXXX prefer
377 1 vty0@vty0 |ntp server XXXXX prefer
378 1 vty0@vty0 |ntp server XXXXXX
379 0 Alex@vty0 |no ip ssh maxstartups 5
380 0 Alex@vty0 |no ip ssh rsa keypair-name
381 0 Alex@vty0 |crypto key generate rsa modulus 2048
382 0 Alex@vty0 |ip access-list extended 110
383 0 Alex@vty0 | no deny ip host 0.0.0.0 any
384 0 Alex@vty0 | 55 deny udp any any eq domain
385 0 Alex@vty0 | 60 deny tcp any any eq domain
386 0 Alex@vty0 | 65 deny ip host 0.0.0.0 any
387 0 Alex@vty0 |line vty 0 4
388 0 Alex@vty0 | transport input ssh
08-10-2024 04:59 AM
I've have recently spotted this on an ios switch. With backup comparison, we were able to spot that the ace order in an acl was changed to permit ip any any. I'm also looking for more info on this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide