Scenerio is given in the picture. Block telnet using Extended ACL I want to block all the networks except from doing telnet of

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer.
    – Ron Maupin
    Commented Nov 19, 2022 at 22:45

1 Answer 1


On Switch0, you permit the single source subnet for telnet you want, deny all other telnet connections and then permit everything else.

1000 permit tcp eq 23
1010 deny tcp any eq 23
9999 permit ip any any
  • 2
    Unless the switch is layer 3, that ACL has to go on Router 0.
    – Ron Trunk
    Commented Dec 16, 2020 at 15:27
  • The 2960 should support extended ACLs. Putting it on the router doesn't prevent telnet from within
    – Zac67
    Commented Dec 16, 2020 at 18:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.