Telnet configuration

[Nhut]

Hi everybody. How can I configure Router1 and Switch1 to telnet so that every laptop and PC in the network diagram can telnet?

[DanielP211]

Hello!

Telnet is a really insecure protocol, that I would not recommend. That being said since it's a probably a lab you enable telnet like this:

create a user:
username XXX priv 15 pass 0 XXX

line vty 0 15
transport input telnet ssh
login local

BR

[Nhut]

Due to requirements, I have to use telnet

[DanielP211]

Then that is all the configuration you need.

[Nhut]

Does it apply to both switches and routers?

[Torbjørn]

If you apply the config DanielP supplied to both the router and the switch they will both accept inbound telnet sessions. The client devices must also be able to reach an address on the switch and the router for this to work.

Here is an explanation of the configuration DanielP supplied:

! Creates a local user on the device 
username XXX priv 15 pass 0 XXX 
! 
! Enter configuration for "Virtual teletype", a virtual port for remote access. 
line vty 0 15 
 ! Specify that telnet must be used for inbound connections to the device 
 transport input telnet ssh 
 ! Use local user accounts for authentication of inbound sessions 
 login local

You can read more about this under the IOS-XE security configuration guide: https://www.cisco.com/c/en/us/td/docs/routers/ios/config/17-x/sec-vpn/b-security-vpn.html

[Martin L]

if u mean "every" literally, then u need more static routes to reach those networks; Use Ping first; then telnet; where ping fails, check routing table for missing routes to and from PC/laptop.  Also, to reach L2 switches from remote networks/subnets u need ip default-gateway x.x.x.x on them (in addition to IP)

Regards, ML
**Please Rate All Helpful Responses **

[Joseph W. Doherty · Accepted solution]

"if u mean "every" literally, then u need more static routes to reach those networks; . . . "

BTW, or possibly consider using a dynamic routing protocol. (Or get it to work correctly using static or dynamic routing - great learning opportunity.)

"Also, to reach L2 switches from remote networks/subnets u need ip default-gateway x.x.x.x on them (in addition to IP)"

Also BTW, possibly not, if ARP proxy active; still, what @Martin L suggests, is "better".