restrict access to telnet

[ssobczyk]

Hi, I want to restrict telnet access to router to one IP (ex. Loopback) - to router IP, not from specific IP. I tried to set ACL for destination IP, but it doesn't work. In debug packet I see x.x.x.x(3354) -> 0.0.0.0(23), 1 packet. Why destination address is 0.0.0.0 ? Could anybody help me ?

[lgijssel]

If understand it well, you want to enable telnet to the router on just one IP adress? This can be done easily using the following global command:

ip telnet source-interface .. (for example lo0)

This will cause that responses to telnet packets are always using this source-adress. You can then use access-lists to specify which destinations are allowed.

Regards,

Leo