1) An Access List that defines source and destination IP addresses for the session
2) The command under the vty lines that references the Access List
In the examples below the router IP Address is 192.168.1.1
Example (Telnet to Router/Switch):
access-list 100 remark allow hosts on the 192.168.1.0/24 network to telnet to the router/switch
access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 192.168.1.1 eq 23
line vty 0 4
access-class 100 in
Example (Telnet from Router/Switch):
access-list 101 remark allow the router/switch to telnet to hosts on the 192.168.1.0/24 network
access-list 101 permit tcp host 192.168.1.1 192.168.1.0 0.0.0.255 eq 23
line vty 0 4
access-class 101 out
The inbound and and outbound access can be combined as follows:
line vty 0 4
access-list 100 in
access-list 101 out
kshort
