Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Can Ping, but cannot Telnet

Hi,

I have recently configured a cisco 2811 router for the client.It is CME and is having a a VPN connection to a remote office. All the thing which I configured is working perfectly.

The fast ethernet 0/0 is with a Public IP. I can ping this IP from outside networks, but I cant telnet it. I have attached the config of the same router.Appreciate your commets on this.

Faizal

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Gold

Re: Can Ping, but cannot Telnet

In ACL nat-acl change:

permit ip any any

to:

permit ip 10.132.1.0 0.0.0.255 any


Note: you do no need vpnd configuration for pppoe client.

4 REPLIES
Cisco Employee

Re: Can Ping, but cannot Telnet

Base on the configuration, I don't see a reason why telnet would not work from the Internet. Where are you trying to telnet from? Could it be firewall that might be blocking telnet traffic?

Hall of Fame Super Gold

Re: Can Ping, but cannot Telnet

In ACL nat-acl change:

permit ip any any

to:

permit ip 10.132.1.0 0.0.0.255 any


Note: you do no need vpnd configuration for pppoe client.

New Member

Re: Can Ping, but cannot Telnet

faizal_vi,


I dont see anywhere you defined access list pointing to the public ip address you are trying to telnet from. I do suggest you use http://whatismyipaddress.com/ to find out your public ip address. In that case you only allow access to a specific ip address instead of all traffic. for example if your public ip address is 68.205.201.70, you will just need to add the following to your config file.

access-list 2 permit 68.205.201.70

line vty 0 4
access-class 2 in

line vty 5 15
access-class 2 in

Hope this works for you

Hall of Fame Super Gold

Re: Can Ping, but cannot Telnet

No, the problem is tjat you cannot use ip any any in NAT ACL, as I have explained above.

4947
Views
0
Helpful
4
Replies