Cisco MGX 8850 (PXM1E/PXM45) Configuration Manual page 423

Chapter 9 Switch Operating Procedures
If you are using SSH client software to access Cisco MGX switches, consider disabling Telnet client
access so that the switch accepts only secure sessions. To disable Telnet client access, enter the
cnfndparms command, select option number for Telnet Access To Node Disabled, and confirm the
action (Y) as shown in the following example:
PXM1E_SJ.7.PXM.a > cnfndparms
PXM1E_SJ
MGX8850
NODE CONFIGURATION OPTIONS
Opt#
----
1
2
3
4
5
6
7
8
9
10
11
12
13
14
Enter option number (1-14): 14
NODE CONFIGURATION OPTIONS
Opt#
----
14
Enable/Disable telnet access to this node.
Yes:
No:
Enter value for option 14 (Y/N): y
NODE CONFIGURATION OPTIONS
Opt#
----
14
To test whether Telnet access is disabled, try to establish a session with the switch. In the following
example, a Telnet client attempts to connect to a switch on which Telnet access is disabled:
Err: access denied
<Your 'TELNET' connection has terminated>
Cisco MGX 8850 (PXM1E/PXM45), Cisco MGX 8950, Cisco MGX 8830, and Cisco MGX 8880 Configuration Guide
Release 5.0.10, OL-3845-01 Rev. B0, August 16, 2004
Value Type
----- ----
3600 16bit Decimal
3 8bit Decimal
Yes Boolean
0x0 8bit Hex
0x0 8bit Hex
0 8bit Decimal
atm0 8bit Decimal
lnPci0 8bit Decimal
Yes Boolean
Yes Boolean
0 8bit Decimal
0 8bit Decimal
No Boolean
No Boolean
Value Type
----- ----
No Boolean
Telnet access to this node is disabled.
forces all incoming telnet connections to be rejected by
the node's telnet server.
is needed to remotely log into a terminal session on the node.
Telnet access to this node is enabled.
Incoming telnet connections will be accepted by the node's
telnet server. Use of other protocols such as SSH are still
supported for remotely logging into a terminal session on the
node.
Value Type
----- ----
Yes Boolean
System Rev: 04.09 May. 08, 2000 22:50:01 GMT
Node Alarm: NONE
Description
-----------
SHM Card Reset Sliding Window (secs)
SHM Max Card Resets Per Window (0 = infinite)
Core Redundancy Enabled
Required Power Supply Module Bitmap
Required Fan Tray Unit Bitmap
Trap Manager Aging timeout value(Hour(s))
Primary IP interface for Netmgmt
Secondary IP interface for Netmgmt
Auto Setting of Cellbus Clock Rate Enabled
Inband Node-to-Node IP Connectivity Enabled
0 No Gang, 1 Left, 2 Right, 3 Both Present
Card Switchover on Backcard FRU mismatch
Card-to-Card High Priority LCN Disabled
Telnet Access To Node Disabled
Description
-----------
Telnet Access To Node Disabled
If option set to:
This
Use of another protocol such as SSH
This is the default.
Description
-----------
Telnet Access To Node Disabled
Managing Telnet Access Features
9-59