On Mon, Jan 07, 2002 at 11:23:08AM -0500, Led Slinger wrote:
> I have been tasked with finding a solution to replace telnet for router 
> access to a large group of Cisco Routers.  Is SSH available for Cisco 
> Routers or does anyone have a preferred solution for doing away with 
> the vulnerability associated with telnet and core infrastructure 
> components?

A solution we have proposed here is to place console cables on all
routers, disable telnet access to them, and connect the other end of the
console cable to a Linux box which has nothing but sshd and minicom.  If
there are a lot of routers (such as in our case) a Livingston portmaster
or similar device would help a lot.  The Linux box need not be powerful;
a 486 or Pentium Classic should be more than enough.  This helps for
older routers that have no support for SSH or other encryption.  Most of
the newer Cisco routers have support for SSH built in.

-- 
Rafael R. Sevilla <[EMAIL PROTECTED]>   +63(2)   8177746 ext. 8311
Programmer, Inter.Net Philippines                +63(917) 4458925
http://dido.ph.inter.net/                        OpenPGP Key ID: 0x5CDA17D8
            Heute die Welt und Morgen das Sonnensystem!

Reply via email to