protect router

Hi experts

How I can protect my cisco router from my user
I did not will to see the router from user
How i can disable icmp and telnet from user site to the router
thank for your help
MohamaedIT Operations managerAsked:
Who is Participating?
 
stuknhawaiiConnect With a Mentor Commented:
for Telnet: create an access list to deny telnet from your users subnet, and allow telnet from your management subnet. Then apply the ACL to the line vty 0 4
for ICMP: create an access list denying all icmp traffic to/from your users subnet in and out of the interface they're connected to (i.e. Interface FastEthernet 0/0).
0
 
MohamaedIT Operations managerAuthor Commented:
Hi stuknhawaii
thank you very much
I will try to add this ACL
thanks
0
 
MohamaedIT Operations managerAuthor Commented:
Hi I used this command but it is not work any advice please
Router(config)# access-list 1 permit 66.178.99.0 255.255.255.0
than
Router(config)# line vty 0 4
Router(config-line)# access-class 1 in

Router(config)# access-list 101 tcp any any eq telnet
Router(config)# access-list 101 deny tcp any any range 2001 2999
Router(config)# access-list 101 deny tcp any any range 3001 3099
Router(config)# access-list 101 deny tcp any any range 6001 6999
Router(config)# access-list 101 deny tcp any any range 7001 7099

Router(config)# interface serial 0/1
Router(config-if)# ip access-group 101 in

regard

0
All Courses

From novice to tech pro — start learning today.