Help: Something is telnetting to my Cisco's (Ciscoworks?)
DComTalk.com Forum Index DComTalk.com
Discussion of VoIP, VPN, Video Conferencen, DSL and other data commucations.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web dcomtalk.com
Help: Something is telnetting to my Cisco's (Ciscoworks?)

 
Post new topic   Reply to topic    DComTalk.com Forum Index -> Cisco
Author Message
genki
Guest





Posted: Mon Dec 05, 2005 5:20 pm    Post subject: Help: Something is telnetting to my Cisco's (Ciscoworks?) Reply with quote

Hi, I'm getting this error message alot on my Cisco boxes.

2005 Dec 02 09:09:42 %MGMT-6-LOGINPASS:User logged in from 10.x.x.x
via Telnet
2005 Dec 02 09:09:46 %MGMT-5-ENABLE_FAIL:User failed to enter enable
mode from 10.x.x.x via Telnet - max attempt reached

I have 3 services running on 10.x.x.x. These are

CiscoWorks.
What's up Gold.
Somix - an MRTG graphing package.

Is there a part of Ciscoworks that telnets to my switches and routers ?


where can I look to solve this ?

Thanks guys in advance.

Genki
Back to top
genki
Guest





Posted: Mon Dec 05, 2005 5:20 pm    Post subject: Re: Help: Something is telnetting to my Cisco's (Ciscoworks? Reply with quote

We don't have the IDS configured and employed yet (doing that this
week, they are
checkpoint IDS's)

The only thing i can think that is doing it is CiscoWorks, why would it
need to telnet to
my equipment though, perhaps to pull configs ? Why not tftp. I would
love to be able to
stop this behavior and get rid of these errors.

I don't think I can really acl out the CiscoWorks box as it needs to
get stuff to do it's
job. It wouldn't seem like a fix.

Thanks for you reply, appreciate it.

Genki
Back to top
John Smith
Guest





Posted: Mon Dec 05, 2005 5:21 pm    Post subject: Re: Help: Something is telnetting to my Cisco's (Ciscoworks? Reply with quote

it is probably your cisco works program thats doing it.
first, make sure you have an ACL on your vty lines in the IOS devices

i really dont know what to tell you about Cisco works and where to look
though. are you using IDS/IPS'es?



On Mon, 05 Dec 2005 06:37:03 -0800, genki wrote:

Quote:
Hi, I'm getting this error message alot on my Cisco boxes.

2005 Dec 02 09:09:42 %MGMT-6-LOGINPASS:User logged in from 10.x.x.x
via Telnet
2005 Dec 02 09:09:46 %MGMT-5-ENABLE_FAIL:User failed to enter enable
mode from 10.x.x.x via Telnet - max attempt reached

I have 3 services running on 10.x.x.x. These are

CiscoWorks.
What's up Gold.
Somix - an MRTG graphing package.

Is there a part of Ciscoworks that telnets to my switches and routers ?


where can I look to solve this ?

Thanks guys in advance.

Genki
Back to top
 
Post new topic   Reply to topic    DComTalk.com Forum Index -> Cisco All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




VoIP Solutions: Telephone Systems Electronics Satellite TV Tech & Gadgets
Powered by phpBB