To access a LAN through router's auxiliary port

[okanyilmaz]

In our network, we're using auxiliary port to control a remote router. But we have concerns about security. Is it possible to reach or control a PC connected to Router's ethernet port?

Is it possible to get IP used at that site?

thanks for your advices.

 

[jimmyzz]

okanyilmaz,
To access the router via the ethernet port, you would be using telnet. You can setup telnet on the router by enabling the vty lines.

You can setup a telnet line login password or create local user accounts on the router.

Router(config)> line vty 0 4
Router(config)> password xxxxxx
or
Router(config)> line vty 0 4
Router(config)> login local

For additional security you could setup a RADIUS or TACACS server and use AAA.

JimmyZ

 

[okanyilmaz]

Jimmy,

Thanks for your advice but my point is, is it possible for a user connected to router from the aux port and then reach the clients behind it?


User----Aux.Port-----Router----Eth.Int.-----Host
------------------------------------------------>

 

[CiscoGod]

Yes it is. If you have modem hanging off of it. Check this out:

http://www.cisco.com/warp/public/701/6.pdf

http://www.vayner.net/Docs/Cisco/Co...the AUX Port for EXEC Dialin Connectivity.pdf

This would would be helpful to war dialers looking for some interesting connections. Set you auto answer to 4 or higher to at least minimize your exposure or unplug the modem line when not in use.

CiscoGod