[c-nsp] Reciprocal console connections for CPEs

[Gert Doering]

Hi,

On Wed, Nov 02, 2011 at 11:01:46AM -0400, Duane Grant wrote:
> We run a rather large private extranet and provide dual managed CPE devices
> on-site.  I'm considering connecting the Aux port on CPE A to the Console
> port on CPE B and the reverse in an effort to provide limited remote
> console access the boxes without installing a dial-up line.

Been there, done that, works.

> We'd obviously limit access to the aux tcp port on the router, 

Apply a vty ACL to "line aux 0".

> but I was
> wondering if there were any other gotcha's that I should be aware of.

Make sure there's "no login" on the aux port...  otherwise these boxes
might start spitting their login prompts at each other.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20111102/0aa98e5c/attachment-0001.pgp>