setupLock&KeyACL

php中文网
发布: 2016-06-07 15:06:06
原创
1790人浏览过

username foobar password cisco ! int s0 ip address 1.1.1.1 255.255.0.0 ip access-group 101 in ! /* or port 22 for ssh */ access-list 101 permit tcp any host 1.1.1.1 eq telnet access-list 101 dynamic foobar permit ip any any ! line vty 0 2 l

username foobar password cisco

!

int s0

ip address 1.1.1.1 255.255.0.0

ip access-group 101 in

! /* or port 22 for ssh */

access-list 101 permit tcp any host 1.1.1.1 eq telnet

access-list 101 dynamic foobar permit ip any any

!

line vty 0 2

login local

autocommand access-enable host timeout 5

line vty 3 4

login local

rotary 1

The first access list allows telnet into the router. Your users will

telnet into router and authenticate with username foobar and password

"cisco"

The router will then immediately disconnect the telnet session. When

they successfully authenticate, an access list with their source IP will

be added to the dynamic list. Basically, if they authenticate correctly,

they can come in to the inside network. After 5 mins of inactivty the

entry will be deleted from the access list.

The vty 3 and 4 are using the rotary command so that you can telnet to

your router with the command: "telnet 1.1.1.1 3001" This takes you to

vty 3 (or 4). This way, you can telnet into the router and actually

manage it. A very subtle but VERY important point. If you forget this,

you'll be making a trip to use the console port.
最佳 Windows 性能的顶级免费优化软件
最佳 Windows 性能的顶级免费优化软件

每个人都需要一台速度更快、更稳定的 PC。随着时间的推移,垃圾文件、旧注册表数据和不必要的后台进程会占用资源并降低性能。幸运的是,许多工具可以让 Windows 保持平稳运行。

下载
来源:php中文网
本文内容由网友自发贡献,版权归原作者所有,本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容,请联系admin@php.cn
最新问题
开源免费商场系统广告
热门教程
更多>
最新下载
更多>
网站特效
网站源码
网站素材
前端模板
关于我们 免责申明 举报中心 意见反馈 讲师合作 广告合作 最新更新
php中文网:公益在线php培训,帮助PHP学习者快速成长!
关注服务号 技术交流群
PHP中文网订阅号
每天精选资源文章推送

Copyright 2014-2025 https://www.php.cn/ All Rights Reserved | php.cn | 湘ICP备2023035733号