Telnet Replacement

corey_hatch · ‎09-29-2003

I'm trying to get rid of clear text passwords being sent between management workstations and Cisco routers/switches (on the internal LAN). The client will not upgrade their IOS versions presently and therefore cannot benefit from SSH. Are there any other network management protocols that can be employed?

mostiguy · ‎09-29-2003

You could use unencrypted telnet through IPSec. That is really your only option, but compared to using SSH, that is like using ICBMs to hunt deer

corey_hatch · ‎09-29-2003

What about ppp authentication? Can you use this outside of the normal dialup context? Is there anyway to leverage this protocol?

mostiguy · ‎09-30-2003

PPP is only going to be found on routers, not switches, or firewall or vpn devices.

Maybe you could look into kerberos and kerborized telnet.