Force10 C300 VTY 접근 제어 및 확인

Force10 C300 VTY 접근 제어 및 확인

• access-list

  !
  ip access-list standard vty_access
   seq 5 permit host 192.168.0.100
   seq 10 permit host 192.168.0.101
   seq 15 permit host 192.168.0.102
  !

• line vty

  !
  line console 0
  line vty 0
   exec-timeout 300 0
   access-class vty_access
  line vty 1
   exec-timeout 300 0
   access-class vty_access
  line vty 2
   exec-timeout 300 0
   access-class vty_access
  line vty 3
   exec-timeout 300 0
   access-class vty_access
  line vty 4
   exec-timeout 300 0
   access-class vty_access
  line vty 5
   exec-timeout 300 0
   access-class vty_access
  line vty 6
   exec-timeout 300 0
   access-class vty_access
  line vty 7
   exec-timeout 300 0
   access-class vty_access
  line vty 8
   exec-timeout 300 0
   access-class vty_access
  line vty 9
   exec-timeout 300 0
   access-class vty_access
  !

• 접속자 확인

  #sh ip ssh
  SSH server                : enabled.
  SSH server version        : v1 and v2.
  Password Authentication   : enabled.
  Hostbased Authentication  : disabled.
  RSA       Authentication  : disabled.
     Vty      Encryption  Remote IP
  *  2        3DES        192.168.0.101
  
  #sh user
      Line            User                      Host(s)    Location
  *   2 vty 0         admin                     idle       192.168.0.101