Re: Catalyst 6509 Switch access control [7:63358]

2003-02-20 Thread Larry Letterman
Sorry about thatI sometimes forget that most people are running hybrid, since we run all our sup/msfc devices natively.. Troy's solution is in fact a great way to lock it down... -- Larry Letterman Network Engineer Cisco Systems ""Berman Andrew"" wrote in message [EMAIL PROTECTED]">ne

Re: Catalyst 6509 Switch access control [7:63358]

2003-02-20 Thread Berman Andrew
Thanks. Yes, indeed it does have MSFCs. But if I just put ACLs in the MSFC won't I be merely preventing telnet to the MSFCs and not to the switch itself? The MSFC can be reached by direct telnet to its own IP address or by telneting to the switch and then issuing a "session 15" command. I think t

Re: Catalyst 6509 Switch access control [7:63358]

2003-02-20 Thread Larry Letterman
The 6509 with a switch supervisor and no msfc can restrict telnet with a VACL...if the switch has a MSFC then you can apply an ACL... Larry Letterman Network Engineer Cisco Systems - Original Message - From: "Berman Andrew" To: Sent: Wednesday, February 19, 2003 7:50 AM Subject: Cataly

RE: Catalyst 6509 Switch access control [7:63358]

2003-02-19 Thread Troy Leliard
Hi Andrew .. I presume that your cat is running CAT0S. What you need to do is basically the following, say for example you only wanted to allow 192.168.0.0/24 telnet access to your Cat set ip permint 192.168.0.0 255.255.255.0 telnet You can also add specific host set ip permit 192.168.1.5 255.