Understanding ‘transport output’ and ‘access-class’
Several years ago I wrote an article called The Elusive “access-class out” Command. My primary goal was to help CCNA students understand both the behavior of and placement of this command. My friend Anthony Sequeira done a great job in the video that is also shown in my original post. Today, I want to share another command and expand on there behavior.
For all of the demonstrations in this article, the following topology will be used. The router named iosv-2 will be the primary focus and the only place changes will be made.
Topology
Backing up for a moment, there are a couple of messages that might be displayed when an IOS device blocks outbound telnet or ssh sessions from the current exec session. These are demonstrated with a quick configuration of an transport output and access-class restriction.
//the first error is unique depending on //if ssh or telnet is being used iosv-2(config)line con 0 iosv-2(config-line)#transport output none iosv-2(config-line)#do telnet 192.168.0.3 % telnet connections not permitted from this terminal iosv-2(config-line)#do ssh -l cisco 192.168.0.3 % ssh connections not permitted from this terminal //now we can re-enable all the protocols //and demonstrate the other error message iosv-2(config-line)#transport input all iosv-2(config-line)#access-list Continue reading