[113149] in North American Network Operators' Group
Re: Nipper and Cisco configuration results
daemon@ATHENA.MIT.EDU (Subba Rao)
Sat Apr 4 07:23:27 2009
Date: Sat, 4 Apr 2009 04:21:19 -0700 (PDT)
From: Subba Rao <castellan2004-nsm@yahoo.com>
To: Lee <ler762@gmail.com>
Cc: nanog@nanog.org
Reply-To: castellan2004-nsm@yahoo.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I looked at the configurations yesterday on the routers.=A0 The vty line do=
es not have any "transport" line below it.=A0 All the routers showing "Rlog=
in enabled" have similar configuration.
What are the default services that are enabled for vty on IOS 12.4?=A0 I kn=
ow there are only telnet, SSH and Rlogin.=A0 Is there any particular sequen=
ce that IOS processes the vty access?
Subba Rao
--- On Thu, 4/2/09, Lee <ler762@gmail.com> wrote:
From: Lee <ler762@gmail.com>
Subject: Re: Nipper and Cisco configuration results
To: castellan2004-nsm@yahoo.com
Cc: nanog@nanog.org
Date: Thursday, April 2, 2009, 11:31 PM
On 4/2/09, Subba Rao <castellan2004-nsm@yahoo.com> wrote:
> I am using Nipper for verifying my Cisco configuration.=A0 Nipper is find=
ing
> the "rlogin" service that is not in the configuration.=A0 I have searched=
the
> access lists and do not see it anywhere.=A0 The explanation by Nipper abo=
ut
> this finding, "....Telnet protocol implemented by this service...." is
> confusing.=A0 Here is the Nipper's output:
=A0 <..snip ..>
> Can someone explain why Nipper is saying "Rlogin is enabled" when I do no=
t
> see it in the configuration file?=A0 Is there something else that I need =
to be
> looking at?
I played with it a bit - removing the "transport input telnet" on a
vty line got me the rlogin service is enabled.=A0 Add it back & nipper
says it's disabled...
Do you have a "transport input telnet" on each vty?=A0 If not, does
adding it fix the nipper report?
Regards,
Lee
