03-21-2009 06:09 PM - edited 03-06-2019 04:44 AM
Hi
I a trying to set up a Telnet connection from my computer to a pair of switches and 3 routers
I dont want to console into the devices everytime. I want to use telnet to access each device.
How can i set this up
step1. I need give password to vty line
Line vty 0 15
Password -----
login
Step2. I need to give password to the device
enable password ------
enable secret ------
Q1. In order to access the switch via telnet do i give ip address to the management vlan 1 or any vlan if its a layer 3 switch.
Q2 In order to access the router via telnet which IP address do i use to access the router.
Q3. The straight cable going from my computer to the switchport (interface)should be in which vlan so telnet can be performed
03-21-2009 06:24 PM
All what you mentioned are required.
You should be able to telnet based on ip address on the switch/router belonging to any vlan - assuming we have routing between vlans either via a one arm router or an L3 switch.
Here is a sample config.
ip dhcp excluded-address 172.16.0.1
ip dhcp excluded-address 172.16.32.1
ip dhcp excluded-address 172.16.64.1
!
ip dhcp pool vlan101
import all
network 172.16.0.0 255.255.224.0
default-router 172.16.0.1
dns-server 192.168.1.254
!
ip dhcp pool vlan102
import all
network 172.16.32.0 255.255.224.0
default-router 172.16.32.1
dns-server 192.168.1.254
!
ip dhcp pool vlan103
import all
network 172.16.64.0 255.255.224.0
default-router 172.16.64.1
dns-server 192.168.1.254
!
!
!
interface Ethernet0/0
description connected to EthernetLAN
ip address 10.10.10.254 255.255.255.0
ip access-group 100 in
ip rip advertise 40
ip inspect myfirewall out
full-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Ethernet0/1
no ip address
full-duplex
!
interface Ethernet0/1.101
encapsulation dot1Q 101
ip address 172.16.0.1 255.255.224.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip rip advertise 40
!
interface Ethernet0/1.102
encapsulation dot1Q 102
ip address 172.16.32.1 255.255.224.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip rip advertise 40
!
interface Ethernet0/1.103
encapsulation dot1Q 103
ip address 172.16.64.1 255.255.224.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip rip advertise 40
!
router rip
timers basic 40 240 240 320
network 10.0.0.0
network 172.16.0.0
!
ip http server
ip http port 9090
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.10.252
!
!
logging trap debugging
logging source-interface Ethernet0/0
logging 172.16.64.2
access-list 100 deny tcp any any
access-list 100 deny ip any any
access-list 100 deny udp any any
!
snmp-server community public RO
snmp-server enable traps tty
!
!
!
gateway
!
!
!
line con 0
exec-timeout 0 0
password 7 XXXXXXXXXXXXXXXXXX
login
line aux 0
line vty 0 4
password 7 XXXXXXXXXXXXXXXXXx
login
03-21-2009 06:49 PM
Hi
Can anyone please answer to my questions please
The above output is to detailed.
03-22-2009 04:38 AM
Yes, do everything you said you would do. Then, you can only telnet to whatever IP's you are routed to. So, as the guy above said, you need to ensure you have inter-VLAN routing setup if the destination IP's are not on the same subnet.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide