Block all telnet connections 1

[RonSwift]

I am using only SSH to connect to my ASA 5520. I want to block telnet all together. What might be the best way to do this?

Thanks in advance

 

[unclerico]

you want to block telnet to the 5520 or through the 5520??

 

[RonSwift]

Block all telnet connections to the 5520

 

[ADB100]

From the CLI check what telnet connections are allowed:

show run telnet

It should show something like:

telnet 192.168.1.0 255.255.255.0 inside

or maybe several lines.
The syntax is 'Protocol' (i.e. Telnet, SSH or HTTP), 'network address' (i.e. 192.168.1.0), 'subnet mask' (i.e. 255.255.255.0 to indicate all hosts on network 192.168.1.0/24) and finally 'Interface name' (i.e. Inside, Outside etc). Simply remove these lines to disable the access.

For example if you have 'telnet 192.168.1.0 255.255.255.0 inside' and you want to disable this just do a 'no' for the line.

Andy

 

[RonSwift]

Perfect. Thanks