Cisco router and SSH

[shade91]

Is there an equivalent command for access-class that works with SSH? I disabled telnetting and now only allow SSH to get into the routers (aside from the usual console connect).

 

[BobSutan]

Originally posted by shade91
Is there an equivalent command for access-class that works with SSH?

Sure there is.... its the access-class command. All access-class does is applies ACLs to the VTY lines, regardless of what method you use for remotely accessing the lines (typically telnet, but in your case SSH).

I suggest picking up a copy of Hardening Cisco Routers (O'Reilly), ISBN 0596001665. All the stuff you're asking about is explained in VTY Access starting on page 23.

 

[shade91]

Hrmm.. I thought I tried the access-class command and it didn't work. Guess I'll try again. Thanks again Bob.

EDIT: You're right. It worked. That's strange.. must have been a typo by me last time.