Disable telnet from outside interface

[Paul.Lane]

I noticed that our routers are allowing telnet from the outside interface. The routers in question are a 3640 and 2600 series. How do I disable telnet for just the outside interface?

Thanks

[rwiesmann]

Hi

What do you mean with outside interface?

You can have a ACL on you vty and allow only specific ip addresses. Thats done with an access list like:

access-list 20 permit 10.0.0.0 0.0.0.255

router(config)#line vty 0 4

router(config-line)#access-class 20

Hope that helps you

Roger

[Paul.Lane]

I see. So I could create the ACL to allow telnet to the routers from only the specified internal network.

Thank you.

[rwiesmann]

Exactly, but you always have to pay attention when you configure it if you are

connectet to it with telnet so you don't look you out.

Ciao

Roger