Hmm...it looks like the presence of the login and authorization commands
is fulfilling the requirement for a password to be configured on those
lines.
Ok, I'll go back to pondering then. Could you add an access list to
block incoming traffic to port 23? That might accomplish the same goal.
There must be another way, though. I'll let you know if I think of
something.
John
>>> "Sean Young" <[EMAIL PROTECTED]> 3/27/01 8:38:38 AM >>>
This is my configuration
line con 0
logging synchronous
login authentication usetacacs
transport input lat pad v120 lapb-ta mop telnet rlogin udptn nasi ssh
line aux 0
line vty 0 4
exec-timeout 0 0
authorization commands 1 usetacacs1
login authentication usetacacs
!
even when I set the "exec-timeout 0 0", I still can telnet to the
router which is something I would like to avoid. I only want ssh to
work. By the way, I use TACACS+ to authenticate users.
Anymore ideas?
Sean
>From: "John Neiberger" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>CC: [EMAIL PROTECTED]
>Subject: Re: Cisco router is running very slow when SSh is implmented
>Date: Tue, 27 Mar 2001 08:20:26 -0700
>
>I don't know about the performance issue, that sounds like a
"feature"
>since a 3640 shouldn't have much trouble handling that.
>
>As far as disabling telnet, the only way I know of is not to set a
vty
>password. While not disabling the telnet server, it will prevent any
>attempts to telnet to the router.
>
>John
>
> >>> "Sean Young" <[EMAIL PROTECTED]> 3/27/01 7:58:37 AM >>>
>Hi everyone,
>
>Is it just me or anyone in the group experiencing the same thing?
>I've implemented SSH features on one of our ACCESS servers and I
>notice
>that it is very slow. The access server is a Cisco 3640 with 128MB
>RAM.
>I notice the performance is quited slow even on a Fast Ethernet LAN.
>I don't have any performance issues with Unix servers. Another
thing,
>now that I have SSH running on the access server, how can I turn off
>telnet completely on the router? I check Cisco website but didn't
see
>any solutions for it.
>
>Any ideas? Thanks.
>
>Sean
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com
>
>_________________________________
>FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
>
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
