1

Scenerio is given in the picture. Block telnet using Extended ACL I want to block all the networks except 192.168.5.128/25 from doing telnet of 192.168.5.0/25.

1
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could post and accept your own answer. – Ron Maupin Dec 31 '20 at 5:17
0

On Switch0, you permit the single source subnet for telnet you want, deny all other telnet connections and then permit everything else.

1000 permit tcp 192.168.5.128/25 192.168.5.0/25 eq 23
1010 deny tcp any 192.168.5.0/25 eq 23
9999 permit ip any any
2
  • 1
    Unless the switch is layer 3, that ACL has to go on Router 0. – Ron Trunk Dec 16 '20 at 15:27
  • The 2960 should support extended ACLs. Putting it on the router doesn't prevent telnet from within 192.168.5.0/25. – Zac67 Dec 16 '20 at 18:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.