dce clock rate 64000
router rip
version 2
no auto-summary
debug ip routing
show ip protocols
im really tired now
Printable View
dce clock rate 64000
router rip
version 2
no auto-summary
debug ip routing
show ip protocols
im really tired now
hole damage rate 64000
hole rip
hole version 2
no auto-damage
debug hole routing
show hole protocols
cdp run
cdp show neighbors
line vty 0 4 <-telnet enabled
password xxxxx
login
exit
ios
we havnt covered firewall commands yet and how to make exceptions i will go check my command sheet
access-list 107 remark block smtp from any machine but h1 added 2011-06-15
access-list 107 permit tcp host 192.168.1.235 any eq smtp
access-list 107 permit tcp host 192.168.1.235 any eq 587
access-list 107 permit tcp any host 192.168.1.235 eq smtp
access-list 107 permit tcp any host 192.168.1.235 eq 587
access-list 107 deny tcp any any eq smtp
access-list 107 deny tcp any any eq 587
access-list 107 permit ip any any
zzzzzzzzzzzz
probably not the best way to do it, but it works
whats the "eq" mean?
I don't know what it stands for but what it does is say "matching this service or port number"
I never had a minute of formal ios training, when I work on this router I have to pick this shit up on my own and frankly I avoid working on this router whenever possible because fuck ios
cool, im going to use that to block telnet access on my router next time a guy in my class keeps editing my routers MOTD to weird stuff
i would put a password but the teacher says dont put anything other than "class" so when the other class uses the routers they dont have to do a confreg 0x42
*yawn*
I think this is why I like artists better than nerds
you shouldn't even be running a telnet service, ssh is the way to go
you also have to tell it to use that access list up in your policy maps somehwere
my teacher says use telnet to test connectivity, theres 16 routers in the class... and telnet tests data link, transport and network layers so thats the best way ehh
ill ask my teacher whether we will be learning that shit, i dont want to go into industry without that
Jocks do NOT turn me on. I'll take a nerd any day.
Telnet is a great tool to test if a port is open (telnet {address} 25 to see if smtp is working, etc) but it's a shitty way to remote into your device and manage it. SSH does the same exact thing but encrypted and reasonably secure. If you leave a telnet port open to the internet you're going to get hacked within an hour.
cheat your ass off
or just use a linux box like I do and it's right there in the command line
well i use a near latest version of fedora so i guess its already there, great that will be pretty easy then.
and it's just as easy to use as telnet is
ssh username@ipaddress