Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello guys, how to restrict VTY access to a specific IP?
For example:
- Allow access from the private or local network
- Allow access from a specific Public IP
Is this doable?
I'm following this link: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios...
Hello guys, i type this command to check open ports: show control-plane host open-ports
I notice that port 23, 22, 80 and 443 is open by default in the control-plane.
Just some few questions:
1. Is there a way to close port 23 and 22?
2. Is it neede...
H guys, standard acl is 1 - 99.
If I create two acl number 1 and 2, does it mean that only one of them will be active or will be processed?
What I mean is:
int g0/0
ip access-group 1 inip access-list standard 1
deny ip x.x.x.x
.....some more IPs
T...
Block IPs using extended ACL
Block incoming traffic.
Is this correct?
apply to fa0:int fa0ip access-group block_ips in
block ips:ip access-list extended block_ipsdeny ip host 15.16.17.18 any deny ip host 15.16.17.19 any
If extended ACL is used do I n...
Hello guys, aside from VPN how to connect remote networks like a local LAN? For example, connect 3 different offices in 3 different cities. Controlled by a Central IT.
Thank you.
So it will be something like this:
Router(config)#access-class 1 in
Router(config)#line vty 0 15
Router(config)#access-list 1 permit 172.16.0.0 0.0.255.255
Router(config)#access-list 1 deny any
Do I need to set the deny? or no need? I don't want oth...
How to configure to allow specific IP to access vty lines?
I'm following this link: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/12-4t/sec-data-acl-12-4t-book/sec-cntrl-acc-vtl.html
But I can only do from the command be...
Hi Mark,
Also make sure your vty is locked down with an ACL so only you allow who you want in
access-class 100 in --as example
I already have the standard access list for the incoming interface.
Do I need to remove it? and change to extended access ...
Thank you very much, you're of great help.
I set this:
login block-for 120 attempts 3 within 30login on-failure log every 1login on-success log every 1
sorry, how do I view the logs?
