Guys, How about permitting telnet only from directly connected (up)link address(es) via vty acl? It is almost always a good thing (tm) to have that. Regards, -- D.K.