Re: access list problem




There is your problem. You have more than 5 VTY lines!
Try vty 0 16
access-class 1 in

Doan


On Fri, 25 Aug 2006, tony wrote:

Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns
Int
0 CTY - - - - - 0 0
0 -
* 1 VTY - - - - 1 15 0
0 -
2 VTY - - - - 1 4 0
0 -
3 VTY - - - - 1 0 0
0 -
4 VTY - - - - 1 0 0
0 -
5 VTY - - - - 1 0 0
0 -
6 VTY - - - - - 0 0
0 -
7 VTY - - - - - 0 0
0 -
8 VTY - - - - - 0 0
0 -
9 VTY - - - - - 0 0
0 -
10 VTY - - - - - 0 0
0 -
11 VTY - - - - - 0 0
0 -
12 VTY - - - - - 0 0
0 -
13 VTY - - - - - 0 0
0 -
14 VTY - - - - - 0 0
0 -
15 VTY - - - - - 0 0
0 -
16 VTY - - - - - 0 0
0 -
"Doan" <doan@xxxxxxx> wrote in message
news:Pine.GSO.4.33.0608251422160.5434-100000@xxxxxxxxxxxxxxx
On Fri, 25 Aug 2006, tony wrote:

i am trying to restrict telnet to a switch from one host only

so I did

access-list 1 permit host 10.10.10.5

line vty 0 4
access-class 1 in

but another host on the 10.10.10.x net can still telnet to the switch

What is wrong?

What does a "show line" say?

Doan






.



Relevant Pages

  • Re: access list problem
    ... access-list 1 permit host 10.10.10.5 ... Your switch may have vty 0 15 defined. ...
    (comp.dcom.sys.cisco)
  • Re: access list problem
    ... access-list 1 permit host 10.10.10.5 ... Your switch may have vty 0 15 defined. ...
    (comp.dcom.sys.cisco)
  • Re: access list problem
    ... Int ... access-list 1 permit host 10.10.10.5 ... line vty 0 4 ...
    (comp.dcom.sys.cisco)
  • Re: access list problem
    ... On Fri, 25 Aug 2006, tony wrote: ... You have more than 5 VTY lines! ... access-list 1 permit host 10.10.10.5 ...
    (comp.dcom.sys.cisco)
  • Re: very simple question on VTYs
    ... line vty 0 9 ... This will allow 10 SSH users which are granted from access-list 19 and also ...
    (comp.dcom.sys.cisco)