Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Security of a 2948G L2 switch outside of our immediate control.

Unanswered Question


Can anyone tell me where to look for the syntax to apply an incoming acl

list on my 6509 switch and/or is there a way to syslog a particular port? I only have Sup1 module and do not have a Policy Feature Card. I do have a 8510 that does all of my Vlan routing.

The reason I am asking is that I will have a 2948G outside of my control with devices still being abled to connect to my Win NT network. I disabled local console/telnet connections including the enable ones, disabled ports which are not going to used and configured them with a null vlan information. I am also using Cisco Secure for authentication. We are wanting to be able to log if the device goes offline and don't want anyone to be able to recover the password via turning off the power and going through the password recovery methods.



Mitch Kohn

Network Administrator

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ciscomoderator Tue, 05/28/2002 - 17:38
User Badges:
  • Gold, 750 points or more

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

bsivasub Sat, 06/22/2002 - 19:02
User Badges:

Configuring IP permit list would prevent un-authorized access to your CAT switches


Make sure the config-register is 0x2102 which ignores break sequence.

But, If someone can physically connect to the console and do password recovery, you may have to secure the switch physically and there is nothing CISCO IOS can do.


This Discussion