cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1380
Views
5
Helpful
4
Replies

I need some assitance on disabling Telnet using ACLs

Bimsara
Level 1
Level 1

Hi Everyone,

 

I have tried multiple times to disable telnet using acls but i could still telnet from the pc, i have attached all my configurations,

Any help would be great! thank you.

1 Accepted Solution

Accepted Solutions

Hello,

 

you need to apply an access list to your VTY lines.

 

In the sample config below, you would deny TELNET access from all hosts on your network, and allow anyone else. 

 

access-list 1 deny 192.168.2.0 0.0.0.127
access-list 1 permit any
!
line vty 0 15
access-class 1 in

View solution in original post

4 Replies 4

luis_cordova
VIP Alumni
VIP Alumni

Hi @Bimsara 

 

Try this:

 

access-list 10 deny any

 

line vty 0 4

access-class 10 in

 

Regards

Hello,

 

you need to apply an access list to your VTY lines.

 

In the sample config below, you would deny TELNET access from all hosts on your network, and allow anyone else. 

 

access-list 1 deny 192.168.2.0 0.0.0.127
access-list 1 permit any
!
line vty 0 15
access-class 1 in

balaji.bandi
Hall of Fame
Hall of Fame

As per your request, you want to deny only certain IP address range @Georg PauwenPauwen suggestions works as expected.

 

if you deny any, all will be dropped, and you have the only option is console.(SSH still works though)

 

If you looking to disable telnet and enable SSH only ( as good practice - telnet is not secure)

 

line vty 0 4
transport input ssh

 

make sure you create a username and password.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Leo Laohoo
Hall of Fame
Hall of Fame

To all concerned,
It is very clear this thread is school work.
Help the students learn: Post the links to documents and configuration guides.
Please refrain from handing out answers.

Review Cisco Networking for a $25 gift card