Remove telnet?

[summoner]

We have a cisco 1700 hooked up to a frame relay T1. We prefer to manage the router via console only. Is it possible to disable the VTY lines? i tried the command "no line vty 0" and it said cant disable last 5 vty lines. Do I have to configure ACLs to restric telnet access that way?

 

[cryptomap]

Enter the line configuration mode and issue the "shutdown" command. Alternatively you could use "transport input none" on the line.

 

[cryptomap]

Ignore the bit about the shutdown command. That was rubbish. Additionally if you want to restrict telnet access do the following.

access-list <list #> permit ip <ip address>

then on vty

access-class <list #> in

 

[summoner]

Thanks for that command. I can't telnet anymroe into the router. If I ever want to re-enable telnet on the vty lines...what is the reverse of &quot;transport input none&quot; is it &quot;transport input telnet&quot;? Thanks

 

[cryptomap]

Yep certainly is.

 

[rbelt]

anther way is to issue the 'no password' on all the vty lines. If there is no password, vty access is shut down.

//RB

 

[summoner]

The &quot;no password&quot; still left me with open vty lines...worse this time because I was able to telnet right in without a password and get a router prompt. I came across another way to use the &quot;no password&quot; command to remove telnet.

remove password (no password)
remove login

add login back in ... this will disable telnet until a password is set

Kinda like setting the router back to factory default