linevty and mgmt interface

[Arjun Dabol]

Hi

I have a 6800 switch and it has mgmt 0 interface.

I want to disable line vty completely (telnet and ssh both) and just want to allow access via this int. mgmt 0.

can someone tell what config needs to be done for this on 6800 ?

thanks

[Leo Laohoo]

You still need VTY but put an ACL to only allow access via the Management port subnet.

[Mark Malone]

and to add to Leos point souce all the traffic from the mgmt going outbound too for mgmt protocls that you have in use

ip tacacs source-interface

logging source-interface
ntp source

ip tftp source-interface
ip ssh source-interface
snmp-server source-interface informs

[Arjun Dabol]

Thankyou . 

Ok so in my case I have a router with mgmt interface (int mgmt 0) with ip address 192.168.1.1 

Now I want that my network administrator sholuld telnet in to the router using only this int mgmt IP and Not any other loopback OR interface IP configured on the router ? So where exactly i configure this ACL and apply ?