[j-nsp] telnet access

[Stefan Fouant]

> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-
> bounces at puck.nether.net] On Behalf Of Taqdir Singh
> Sent: Thursday, January 28, 2010 7:54 AM
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] telnet access
> 
> Hi Team,
> 
> 1) in case of juniper, telnet access restriction can only be configured
> on
> loopback 0 unit 0 ?

There are no such restrictions.

> 2) does that mean, no one can telnet by default on any other phsyical
> interface or any other loopbacks units ?

In packet mode JUNOS the default is to allow telnet to any interface on the
box.  If you're running SRX or J-Series (with secure flow mode) the default
is to deny telnet on any interfaces.  You would need to configure
host-inbound-services under the respective zone or interface to allow telnet
access on those interfaces.

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D