nguyenw7的部落格

Your CCNA documents test is expected going to comprise questions something like Telnet, an application-level protocol that allows faraway human activity between two networking devices. With Telnet use individual as communal as it is, you had superior cognise the record of how to tack together it in charge to ratify your CCNA test and to sweat in real-world networks.

The underlying construct is pretty simplistic - we want to tack together R1, but we're at R2. If we telnet gleefully to R1, we will be able to piece R1 if we've been specified the strait-laced commendation levels. In this CCNA skin study, R2 has an IP computer address of 172.12.123.2 and R1 an address of 172.12.123.1. Let's try to telnet from R2 to R1.

R2#telnet 172.12.123.1

Trying 172.12.123.1 ... Open

Password required, but no set

[Connection to 172.12.123.1 nonopening by external host]

This seems like a problem, but it's a complex we're lively to have. A Cisco skilled worker will not let any person telnet to it by failure to pay. That's a corking thing, because we don't deprivation only somebody connected to our router! The "password required" letter resources that no password has been set on the VTY lines on R1. Let's do so now.

R1(config)#line vty 0 4

R1(config-line)#password baseball

A arcanum of "baseball" has been set on the VTY lines, so we shouldn't have any disorder mistreatment Telnet to get from R2 to R1. Let's try that now.

R2#telnet 172.12.123.1

Trying 172.12.123.1 ... Open

User Access Verification

Password:

R1>

We're in, and situated into human executive department fashion. Let's say we impoverishment to tack together a new IP computer code on the lan interface on R1. We'll now go into sweetheart exec fashion....

R1>enable

% No password set

R1>

... or perhaps we won't! The evasion doings of Telnet on a Cisco trained worker is to stand the next user into someone exec mode, and involve an enable secret to let that person into grateful exec mode! Right now, we can't put together anything on this skilled worker and even the show signs of commands we would use are narrow at most select.

If we wanted to allow all telnetting users to be put into sweetheart exec style right away lacking individual prompted for an enable password, the order due level 15 located on the VTY lines will effect this.

R1(config)#line vty 0 4

R1(config-line)#privilege rank 15

From R2, we'll telnet into R1 over again.

R2#telnet 172.12.123.1

Trying 172.12.123.1 ... Open

User Access Verification

Password:

R1#

We were able to telnet in from R2 next to the unproved password of "baseball", and even better, we were located into privileged executive department fashion immediately!

You may or may not impoverishment to do this in real-world networks, but. If you poverty to attribute choice levels on an particular somebody basis, put together usernames and passwords and use the right 15 dictation in the very username/password edict itself to springiness this right levels to any users but not all.

R1(config)#username heidi countersign klum

R1(config)#username tim extra 15 arcanum gunn

Both users can telnet into the router, but the opening person will be set into mortal executive department and challenged for the enable secret to enter thrilled exec manner. If in attendance is no change password, the user exactly cannot get into grateful exec. The 2d individual will be settled into thrilled executive department forthwith after delightedly authenticating.

Passwords on a Cisco trained worker or control are vitally important, and you're not tied trailing to granting "all-or-nothing" right. Knowing the details approaching the ones shown here relief you tie fluff gridiron indemnity time allowing folks to do their jobs - and it doesn't distress to cognise this ram for the CCNA exam, either!