Disattiva l'accesso telnet a tutti, tranne l'host specificato.
#configure terminal
#configure terminal
(config)#ip access-list extended VTY_ACCESS
(config-ext-nacl)#10 permit tcp host 185.54.81.23 any eq telnet (autorizza un host)
(config-ext-nacl)#12 deny tcp host 202.85.221.208 any eq 22 (blocca un host)
(config-ext-nacl)#15 permit tcp any any eq 22
(config-ext-nacl)#12 deny tcp host 202.85.221.208 any eq 22 (blocca un host)
(config-ext-nacl)#15 permit tcp any any eq 22
(config-ext-nacl)#20 deny tcp any any eq telnet
(config-ext-nacl)#line vty 0 4
(config-line)#access-class VTY_ACCESS in
(config-line)#end