RE: Cisco IOS question

From: Omar Khawaja (omarkhawaja@yahoo.com)
Date: 05/21/02


From: "Omar Khawaja" <omarkhawaja@yahoo.com>
To: <shadowfx@blackvault.com>, <security-basics@securityfocus.com>
Date: Tue, 21 May 2002 17:50:21 -0400

first you will need to create an access-list:

(config)# access-list 101 deny tcp any any eq 23
(config)# access-list 101 permit ip any any

then from the interface configuration mode, you will need to apply the
access-list:
(config)# int s0/0
(config-if)# access-class 101 in

-----Original Message-----
From: Kevin Brooks [mailto:kbrooksfpc@yahoo.com]
Sent: Monday, May 20, 2002 12:21 PM
To: security-basics@securityfocus.com
Subject: Cisco IOS question

On my cisco 3600 router. How can I disable telnet into
serial 0/0. I do need to leave telnet open on
FastEth0/0 but I don't want anyone to be able to
telnet in from the outside.

Any Ideas?
Thanks

__________________________________________________
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com