Hi all,
I currently use a 2511 RJ Terminal Server on a site with dial up access
through a modem. Ten pieces of Cisco equipment are then configured using
reverse telnet to their consoles.
Someone's thrown a spanner in the works. We now need to use something such
as SSH to the Terminal Server.
The
Put linux on an old 386/486, connect the console port of the 2500 to a
serial port of the linux box. ssh to the linux box, start up a minicom
session with the 2500 and from their you have access to all of your equipment.
Use iptables on the box to restrict access to it.
(by the way, as long as
Although this would be considered "high maintenance", you could
think about a FreeBSD box with a Cyclades serial card. (you can get enough
to handle A LOT more than 16 serial ports if you need it) You could get
the BSD box in a 1U format. It supports ssh and telnet. The problem here
is you
It's not THAT high maintenance... I mean...how often have yo urebooted any
linux/bsd box? : )
But cyclades are not cheap! : (
>>> "Carroll Kong" 11/21/01 01:28PM >>>
Although this would be considered "high maintenance", you could
think about a FreeBSD box with a Cyclades serial card. (you c
Why not just build a linux box with ssh support and telnet from there to
the term server? Another step - but probably more secure...and a lot
cheaper than another router.
Berry
At 01:04 PM 11/21/2001 -0500, you wrote:
>Hi all,
>
>I currently use a 2511 RJ Terminal Server on a site with dial u
seems to be the consensus... : )
Although if you telnet from the linux box then you are just as insecure as
you originally were...
-Patrick
>>> "Berry Mobley" 11/21/01 01:53PM >>>
Why not just build a linux box with ssh support and telnet from there to
the term server? Another step - but pr
High maintenance as in, there is a hdd, if it fails it is a pain
in the butt to get your colocation guy to pull it out. Or have fun flying
down there. It will cost money to do that, plus hdds will more likely fail
than say a flash card. You COULD run FreeBSD on a flash card, but
ultimately,
Patrick,
I had to reboot my two servers four times. That being said, they were like
turbo 486 machines with 32MB (or was it 64MB) RAM and 1GB drives. The
operating system was Red Hat version something-or-other. They were the
smallest machines I could get my hands on at the time. They ran DNS
: [EMAIL PROTECTED]
Subject: Re: Terminal Server with SSH - Not cheap are they? [7:27038]
seems to be the consensus... : )
Although if you telnet from the linux box then you are just as insecure as
you originally were...
-Patrick
>>> "Berry Mobley" 11/21/01 01:53PM >>>
ROTECTED]]On Behalf Of
> Patrick Ramsey
> Sent: Wednesday, November 21, 2001 10:58 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Terminal Server with SSH - Not cheap are they? [7:27038]
>
>
> seems to be the consensus... : )
>
> Although if you telnet from the linux box t
[EMAIL PROTECTED]]On Behalf Of
> > Patrick Ramsey
> > Sent: Wednesday, November 21, 2001 10:58 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Terminal Server with SSH - Not cheap are they? [7:27038]
> >
> >
> > seems to be the consensus... : )
> >
>
ROTECTED]">news:[EMAIL PROTECTED]...
> > > One could install an extra ethernet nic in the linux box and then just
> use
> >a
> > > cross-over cable to connect directly to the 2501.
> > >
> > > Regards,
> > > Kent
> > >
>
hance, it will blow your mind.
- Original Message -
From: "Gaz"
To:
Sent: Thursday, November 22, 2001 10:53 AM
Subject: Re: Terminal Server with SSH - Not cheap are they? [7:27038]
> Carroll you are a star.
>
> I'm ordering one now to give it a try.
> I'l
No, not really... here's why:
you're connection to the jump-point (your linux box) is via SSH.
you're connection to the router is via telnet
configure the router to *only* accept telnet sessions from the linux box
So, in theory someone could sniff the network and get your login
authentication
TED]]On Behalf Of
> Patrick Ramsey
> Sent: Wednesday, November 21, 2001 10:58 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Terminal Server with SSH - Not cheap are they? [7:27038]
>
>
> seems to be the consensus... : )
>
> Although if you telnet from the linux box then you
15 matches
Mail list logo
