Secure Router VTY with ACL: Only Management Host Allowed

Bundle lab · $29.99

Configure a standard IPv4 ACL and bind it to the VTY lines on the HQ router so only the dedicated management host can SSH to it. Confirm that regular routed traffic between sites is unaffected, and prove both a permitted and a denied management attempt.

Learning objectives

• Build a standard IPv4 ACL that permits a specific management host and denies others
• Apply the ACL correctly to VTY lines using the access-class command
• Maintain end-to-end routed data connectivity while restricting management-plane access
• Verify permitted and denied VTY access from different hosts
• Troubleshoot common ACL and access-class misconfigurations

Troubleshooting focus

• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.