protect router

Hi experts

How I can protect my cisco router from my user
I did not will to see the router from user
How i can disable icmp and telnet from user site to the router
thank for your help
MohamaedIT Operations managerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

stuknhawaiiCommented:
for Telnet: create an access list to deny telnet from your users subnet, and allow telnet from your management subnet. Then apply the ACL to the line vty 0 4
for ICMP: create an access list denying all icmp traffic to/from your users subnet in and out of the interface they're connected to (i.e. Interface FastEthernet 0/0).
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MohamaedIT Operations managerAuthor Commented:
Hi stuknhawaii
thank you very much
I will try to add this ACL
thanks
0
MohamaedIT Operations managerAuthor Commented:
Hi I used this command but it is not work any advice please
Router(config)# access-list 1 permit 66.178.99.0 255.255.255.0
than
Router(config)# line vty 0 4
Router(config-line)# access-class 1 in

Router(config)# access-list 101 tcp any any eq telnet
Router(config)# access-list 101 deny tcp any any range 2001 2999
Router(config)# access-list 101 deny tcp any any range 3001 3099
Router(config)# access-list 101 deny tcp any any range 6001 6999
Router(config)# access-list 101 deny tcp any any range 7001 7099

Router(config)# interface serial 0/1
Router(config-if)# ip access-group 101 in

regard

0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.