Kevin, You can use an extended ip access-list denying access to the tcp port 23 applied to the incoming interface.
Example: (substitute your own IP's of course) In Global Cofig mode: Router<config>#access-list 100 deny tcp source-address source-mask dest-address dest-mask eq 23 In Interface Mode: Router<Config>#int s0/0 Router<config-if>#ip access-group 100 in I will assume you know how to create access-lists and that there is an implicit deny all at the end of all acess-lists, so be sure to create rules for all traffic you want to come into that interface. But, if you need further explanation I will be happy to do so or if you wish consult Cisco Systems @ www.cisco.com Best regards, Tyrone Bennett --- Kevin Brooks <[EMAIL PROTECTED]> wrote: > On my cisco 3600 router. How can I disable telnet > into > serial 0/0. I do need to leave telnet open on > FastEth0/0 but I don't want anyone to be able to > telnet in from the outside. > > Any Ideas? > Thanks > > __________________________________________________ > Do You Yahoo!? > LAUNCH - Your Yahoo! Music Experience > http://launch.yahoo.com __________________________________________________ Do You Yahoo!? LAUNCH - Your Yahoo! Music Experience http://launch.yahoo.com
