Maipu- Access control on line VTY

Access-Class configuration for Maipu routers

This section is about control access on line vty (telnet) sessions. Normally it is configured for security reasons and providing rights/permission to authorized persons to allow the access of router.

Steps:

• Create a standard ACL as per your requirement to allow specific users  OR deny specific users.
•  Apply ACL under line vty mode with access-class command.

Configuration :

ip access-list standard 1

10 deny 192.168.1.0 0.0.0.255

20 permit any

exit 

#### Configure a ACL as per requirement ( In this ACL 192.168.1.0/24 is denied and eveything else is permitted) ####

line vty 0 15

access-class 1 in

password 0 a

login

exit

 ### Apply under Line vty mode ###

For any queries Plz put comments with your mail id. Will reply you soon.

Maipu - IP Accounting

IP ACCOUNTING configuration for Maipu routers

This section is about, How to enable IP accounting in Maipu routers.  We have to configure IP accounting list command in global configuration. Then need to enable IP accounting for required interface. Then need to turn off ip route-cache and turn on ip route – cache for particular interface.  

----

ip accounting-list 0.0.0.0 255.255.255.255

### configure this command in global configuration ###

interface f0

 ip address 10.1.1.1 255.255.255.0

 ip accounting      #### Enable ip accounting for this interface ####

ip route-cache

 (first use no IP route-cache, then use IP route-cache)

 exit

SHOW COMMAND:

Show ip accounting

For any queries Plz put comments with your mail id. Will reply you soon...