[113122] in North American Network Operators' Group
Re: Nipper and Cisco configuration results
daemon@ATHENA.MIT.EDU (Subba Rao)
Fri Apr 3 05:37:37 2009
Date: Fri, 3 Apr 2009 02:35:33 -0700 (PDT)
From: Subba Rao <castellan2004-nsm@yahoo.com>
To: Lee <ler762@gmail.com>
Cc: nanog@nanog.org
Reply-To: castellan2004-nsm@yahoo.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I will check this as soon as I go to work this morning.=A0 One thing I noti=
ced was about the Nipper results is that any router where SSH was disabled/=
Rlogin was enabled and vice versa.
I will go thru the configuration file once again.
Thank you very much for checking this out!
Subba Rao
--- On Thu, 4/2/09, Lee <ler762@gmail.com> wrote:
From: Lee <ler762@gmail.com>
Subject: Re: Nipper and Cisco configuration results
To: castellan2004-nsm@yahoo.com
Cc: nanog@nanog.org
Date: Thursday, April 2, 2009, 11:31 PM
On 4/2/09, Subba Rao <castellan2004-nsm@yahoo.com> wrote:
> I am using Nipper for verifying my Cisco configuration.=A0 Nipper is find=
ing
> the "rlogin" service that is not in the configuration.=A0 I have searched=
the
> access lists and do not see it anywhere.=A0 The explanation by Nipper abo=
ut
> this finding, "....Telnet protocol implemented by this service...." is
> confusing.=A0 Here is the Nipper's output:
=A0 <..snip ..>
> Can someone explain why Nipper is saying "Rlogin is enabled" when I do no=
t
> see it in the configuration file?=A0 Is there something else that I need =
to be
> looking at?
I played with it a bit - removing the "transport input telnet" on a
vty line got me the rlogin service is enabled.=A0 Add it back & nipper
says it's disabled...
Do you have a "transport input telnet" on each vty?=A0 If not, does
adding it fix the nipper report?
Regards,
Lee
