Lock and Key ACL + Remote management of router

December 11, 2007 @ 2:09 am · Filed under CCIE Study

Hey,
Another option could be to put the autocommand against a username if the router is using local authentication.
One user for lock and key, another user to telnet into the router.

– Regards,
Peter Kingston Studying my CCIE
On Dec 11, 2007 9:39 AM, Darby Weaver wrote:
> Well you could could setup each vty separately and > specify a different parameter for each. > > line vty 0 4 - is a range of vty. > > And then you could create and acl for whomever needs > the autocommand or vice versa or both for that matter. > > You could also specify telnet for some lines, ssh for > others, for example. > > > > — “Hough, Earl” wrote: > > > Wim, > > > > Another trick is to reserve a specific VTY line by > > giving it a different > > port number using the rotary command. This allows a > > backdoor to get to > > your vty lines and bypassing the autocommand on vty > > lines 0 through 4. > > > > line vty 5 > > rotary 99 > > transport input ssh > > access-class 23 in > > > > HTH. > > > > Earl Hough > > #16508 > > > > —–Original Message—– > > From: nobody@groupstudy.com > > [mailto:nobody@groupstudy.com] On Behalf Of > > wim.depauw@getronics.com > > Sent: Monday, December 10, 2007 3:15 PM > > To: ccielab@groupstudy.com > > Subject: Lock and Key ACL + Remote management of > > router > > > > Hi, > > > > I’ve been playing with the lock and key feature , > > which is pretty nice > > but I wondered : > > > > When you enable autocommand on your vty lines you > > will not able to > > connect to your router anymore by telnet/ssh . > > The reason is that you hit your autocommand command > > each time. > > > > Does anybody have a solution for this ? I couldn’t > > find anything back on > > the doc cd about this … > > > > My first thought was to put on line vty 4 no > > autocommand but then you > > need to be really quick to get to this session > > ))) > > > > gr > > wim > > > > > _______________________________________________________________________ > > Subscription information may be found at: > > http://www.groupstudy.com/list/CCIELab.html > > > > _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ > > _ _ _ _ _ _ _ _ _ _ _ _ > > > > The information contained in this transmission is > > confidential. It is intended solely for the use of > > the individual(s) or organization(s) > > to whom it is addressed. Any disclosure, copying or > > further distribution is not permitted unless such > > privilege is explicitly granted in > > writing by SARCOM, Inc. Furthermore, SARCOM, Inc. is > > not responsible for the proper and complete > > transmission of the substance > > of this communication, nor for any delay in its > > receipt. > > > > > _______________________________________________________________________ > > Subscription information may be found at: > > http://www.groupstudy.com/list/CCIELab.html > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html