Monday, August 22, 2016

TELNET


TELNET


Topologi




Device
Interface
IP Address
PC-0
Fa0
192.168.10.10/24
Router 0
Fa0/0
192.168.10.1/24

Pasang ip address di router interface fa0/0

Router(config)#interface fastEthernet 0/0
Router(config-if)#ip address 192.168.10.1 255.255.255.0
Router(config-if)#no shutdown
                                                                                                                                                         
setting authentication di line telnet, jika ada PC yang hendak telnek ke router maka akan diminta password authentication :
              Router(config-if)#line vty 0 4
              Router(config-line)#pass
              Router(config-line)#password peterpan98
              Router(config-line)#login

Outputnya akan seperti ini :

Packet Tracer PC Command Line 1.0
PC>telnet 192.168.10.1
Trying 192.168.10.1 ...Open
User Access Verification
Password: peterpan98
Router>en
% No password set.
Router>

Artinya kita bisa masuk ke router tetapi tidak bisa masuk ke mode privilage, nah agar kita bisa masuk ke privilage mode maka kita harus setting routernya sebagai berikut :

Router(config)#enable password peterpan98

Jika sudah maka kita bisa masuk ke privilage mode :

Router>en
Password: peterpan98
Router#ex
[Connection to 192.168.10.1 closed by foreign host]
PC>telnet 192.168.10.1
Trying 192.168.10.1 ...Open
User Access Verification
Password: peterpan98
Router>en
Password: peterpan98
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#

Settingan yang tadi kita buat masih ada kelemahan yaitu password yang kita buat yang kita buat masih bisa di baca pada saat menampilkan “show run”, lebih baiknya dienkripsi terlebih dahulu :

Router(config)#do sh run
Building configuration...
Current configuration : 553 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
enable password peterpan98
!
 --More--


- Agar passwordnya tidak terlihat masukan script ini:
 

Router(config)#service password-encryption

0 comments:

Post a Comment