you can also go with....line vty 5 15 transport input none transport output none.That will not allow any type (ssh, telnet, etc) to be established on vty lines 5 15.I would recommend the following config on any devies that uses SSHline vty 0 4 transp...