Cisco switched telnet, http login configuration, and security reinforcement ACL instance

Cisco switched telnet, http login configuration, and security reinforcement ACL instance
1. cisco switch telnet logon configuration and Security Enhancement 1.1 configuration: (config) # Enable telnet to log on to line vty 0 4 # specify telnet to log on using the local password to authenticate login local # specify logon using the SSH mode transport input telnet # Set the username, permission, and password username kjh privilege 15 secret cisco # Delete Login User Switch (config) # no username zhangxy 1.2 security reinforcement: # access restriction ACL, which allows the specified IP address to log on. All IP addresses not listed in the list are deny; access-list 110 permit tcp 192.168.18.0 0.0.255 any eq telnetaccess-list 110 permit tcp 223. ***. 16.12 0.0.0.0 any eq t Elnetaccess-list 110 deny tcp any # apply ACLline vty 0 4access-class 110 in 2. cisco configuration http Login 2.1 configuration command: Enable: ip http server Disable: no ip http server function: Enable Web configuration; no operation of this command is to disable Web configuration. Command mode: global configuration mode User Guide: Web configuration provides users with an HTTP configuration interface. Web configuration is intuitive and easy to understand. This command is equivalent to selecting [2] in the main menu of Setup configuration mode for Web Server configuration. For example, enable the Web Server function to enable Web configuration. Switch (Config) # allow http login to ip http server # idle 600 http # connection timeout (#10 # automatic disconnection if no operation is performed within minutes) # life 86400 http # maximum connection time (up to 24 hours) # request 10000 http # maximum number of concurrent connections ip http timeout-policy idle 600 life 86400 request 10 # specify the local authentication ip http authentication local # Set the username, permission, and password username kjh privilege 15 secret cisco # disable http service use command no ip domain lookupno ip bootp serverno ip http secure-server