I think the extended named access list don't allow you to say "eq" to at the end.
Also make sure you have domain-name, rsa key on the router. and then try this. RSA key don't show in the config, to test if you have rsa key try this: router#show crypto key mypubkey rsa then try this. username test password 0 test ip domain-name router.test.com ip ssh time-out 60 ip ssh authentication-retries 2 access-list 101 permit 22 host 10.1.1.2 host 10.1.1.1 line vty 0 4 access-class 101 in login local transport input ssh Hope this helps. Raj:) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73022&t=72990 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]