213k views
3 votes
A network engineer has created a standard ACL to control SSH access to a router. Which command will apply the ACL to the VTY lines?

1 Answer

5 votes

Final answer:

To apply an ACL to the VTY lines for SSH access control, use the 'line vty' command followed by 'access-class' with the ACL name or number and specify the direction with 'in' or 'out'. Replace 'SSH_ACCESS' with your actual ACL name or number in the configuration.

Step-by-step explanation:

To apply an Access Control List (ACL) to control SSH access to a router, you should use the ACL in conjunction with the VTY lines configuration. The command sequence to accomplish this would begin by accessing the VTY lines configuration mode with 'line vty' command. Once in the VTY configuration mode, you apply the standard ACL by using the 'access-class' command followed by the name or number of the ACL, then the 'in' or 'out' keyword to specify the direction in which the ACL will filter traffic.

Here is an example of how you might apply an ACL named 'SSH_ACCESS' to a router's VTY lines to control incoming SSH access:

line vty 0 4
access-class SSH_ACCESS in

Remember to replace 'SSH_ACCESS' with the actual ACL name or number that you have configured. Additionally, make sure the ACL allows the necessary traffic before applying it to prevent accidental lockout from the router.

User Antony Hutchison
by
7.9k points