1.2.4 Create 'access-list' for use with 'line vty' - 'ACL permit tcp is configured'

Information

Access lists control the transmission of packets on an interface, control Virtual Terminal Line (VTY) access, and restrict the contents of routing updates. The Cisco IOS software stops checking the extended access list after a match occurs.

Solution

Configure the VTY ACL that will be used to restrict management access to the device.
hostname(config)#access-list <vty_acl_number> permit tcp <vty_acl_block_with_mask> any
hostname(config)#access-list <vty_acl_number> permit tcp host <vty_acl_host> any
hostname(config)#deny ip any any log

See Also

https://workbench.cisecurity.org/files/508

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(15)

Plugin: Cisco

Control ID: c1c1b31f79b786422189fa1d7784b39e58c3757ff05eb3cb8b81dd101f011e80