06-15-2007 04:04 PM - edited 03-05-2019 04:45 PM
We have sevral 2950s I recently upgraded IOS and configed to only permit SSH. Since security is the concern, I also did 'no ip http server'. Unfortunately now Cisco Network Assistat does not work (no SSL on that IOS).
How can I utilize CNA in this environment?
06-15-2007 05:27 PM
If you disable http server, CNA won't work. If you want to secure http, create an access-list for http server to only accept http requests from specific hosts.
10-01-2007 08:48 AM
Once "transport input ssh" in placed under the VTY lines, there is no access to the http server. Is there a way to only allow SSH on the lines but also allow the web server interface to be active, besides allowing telnet sessions?
Thanks.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: