If you want, you could supplement Murilo's configuration with the following to restrict Telnet access to a specific management station, and establish an idle timeout on the VTY lines:
access-list 100 remark --- VTY access from Network Management Station.
access-list 100 permit tcp host 192.168.100.20 any eq 23 log
access-list 100 deny ip any any log
Note: Replace 192.168.100.20 with the address of your management station.
Note: TCP port 23 above, is the Telnet port.
Note: Make sure you use a different ACL number if 100 is already in use.
line vty 0 4
access-class 100 in
exec-timeout 9 0
Your interface ACL (if implemented) will also need to accommodate inbound Telnet.
Olakunle: There is no need to double-post. Please select the most appropriate forum, and post once.
