I would like to log into a Cisco router that is in a LAN
- via telnet or ssh
- as user
<username>with a password
- only from machines in the LAN
About the user:
I usually use the flat blue cable and connect to the router using Hyperterminal.
enable and then I'm asked for a password.
So I don't know the username associated with this password...
What is the associated username?
Suppose it is
I would like to run
telnet 192.168.2.1 -l <username>
and then enter the password.
ssh <username>@192.168.2.1 and then enter the password.
I want this user to be able to telnet or ssh into the router only from machines inside the LAN
I don't know precisely how to do that.
Do I need an access-list like this one?
access-list 101 permit tcp 192.168.2.0 0.0.0.255 host 192.168.2.1 eq 23
access-list 101 permit tcp 192.168.2.0 0.0.0.255 host 192.168.2.1 eq 22
Then do I have to associate this access-list to the router inside network interface (
Can you help me set up the sequence of commands I have to run to achieve that goal?
Ok. I ran:
conf t line vty 0 4 login local
conf t username <username> privilege 15 secret <password>
I can log into the router as:
telnet 192.168.2.1 Username: <username> Password: <password>
Question 1: How to make sure the router cannot be telneted into from outside the LAN?
Question 2: I cannot log into the router via SSH:
ssh <username>@192.168.2.1 ssh: connect to host 192.168.2.1 port 22: Connection refused