Telnet and SSH on packet tracer

A terminal emulation program for TCP/IP networks such as the Internet. The Telnet program runs on your computer and connects your PC to a server on the network. You can then enter commands through the Telnet program and they will be executed as if you were entering them directly on the server console. This enables you to control the server and communicate with other servers on the network. To start a Telnet session, you must log in to a server by entering a valid username and password. Telnet is a common way to remotely control Web servers. To telnet means to establish a connection with the Telnet protocol, either with command line client or with a programmatic interface.
SSH 
Secure Shell (SSH) is a cryptographic network protocol for secure data communication, remote shell services or command execution and other secure network services between two networked computers that connects, via a secure channel over an insecure network, a server and a client (running SSH server and SSH client programs, respectively). It was designed as a replacement for Telnet and other insecure remote shell protocols such as the Berkeley rsh and rexec protocols, which send information, notably passwords, in plaintext, rendering them susceptible to interception and disclosure using packet analysis. The encryption used by SSH is intended to provide confidentiality and integrity of data over an unsecured network, such as the Internet.

a network protocol that ensures a high-level encryption, allowing for the data transmitted over insecure networks, such as the Internet, to be kept intact and integrate. SSH and SSH Telnet, in particular, work for establishing a secure communication between two network-connected computers as an alternative to remote shells, such as TELNET, that send sensitive information in an insecure environment. 

In contrast to other remote access protocols, such as FTP, SSH Telnet ensures higher level of connection security between distant machines but at the same time represents a potential threat to the server stability. Thus, SSH access is considered a special privilege by hosting providers and is often assigned to users only per request. 

Let us apply Telnet and SSH on packet tracer.

 1
Take the topology as in the above diagram. Set IPs on the PCs. As, by default, all PCs are in vlan 1. We will create a virtual interface on switch with vlan 1 as follows.

 2

Now, we can ping to switch by our hosts because hosts are in vlan 1 and switch also has a vlan 1 interface.
 3

Now, try to telnet the switch from our PC, it refuses because we have not applied authentication on the switch yet.
 4
So, lets apply line authentication on the switch. The system supports 20 virtual tty (vty) lines for Telnet, Secure Shell Server (SSH) and FTP services. Each Telnet, SSH, or FTP session requires one vty line. You can add security to your system by configuring the software to validate login requests. 

 4.5
Now, we can easily telnet. But it does not let us go in the switch enabled mode because we have not set the password on the switch yet.

 5

Lets apply password on the switch enabled mode.

 6
Now, we can go inside Switch configuration mode from our pc.

 7

So, now let us apply SSH on the switch.

 9

Commands continued.

 11

Now, we try to telnet it but it is refused because ssh has over ruled telnet. So, we will use SSH protocol on it. By default username is admin.

 12

And we can apply any sort of configuration on our switch from out pc.

 13

Now, if we want to change the username from admin to something else, we will do it as follows.

14

and from our pc as follows.

15

The SSH commands are as follows.

Switch(config)#ip domain name ?

 WORD  Default domain nameSwitch(config)#ip domain name abc.comSwitch(config)#crypto key generate rsa
% Please define a hostname other than Switch.


Switch(config)#hostname s1


s1(config)#ip domain name cs-studys1

s1(config)#crypto key generate rsa

Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose Keys. Choosing a key modulus greater than 512 may take   a few minutes.

s1(config)#line vty 0 15

s1(config-line)#transport input ssh

The name for the keys will be: s1.cs-study
How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]

s1(config)#ip ssh version 2

s1(config-line)#

Reactions:

16 comments:

  1. Replies
    1. Platinum FREE Download Business Voip Solutions with DU solution.I like the helpful information you provide in your articles. I will bookmark your blog and check again here regularly.

      Delete
  2. I just wonder what are the configurations in telneting multiple switches...can someone give me a full grasp?

    ReplyDelete
    Replies
    1. yup thats possible. i have just tried that. Connect two switches with the crossover cable and attach PC to one of the switch. You can telnet both switches from that PC. Like in the image attached. PC0 is able to telnet both switches. Dont forget to provide the vlan interfaces to both switches in order to enable telnet. Hope that helps. Cheers :)

      Delete
    2. oops forgot to attach the url

      http://img585.imageshack.us/img585/8463/k8f.png

      Delete
  3. thankx it was really helpful

    ReplyDelete
  4. Nice example, I doing a lab on packet tracer if possible to use teraterm with packet tracer.

    ReplyDelete
  5. Nice information
    Thanks for sharing

    ReplyDelete
  6. Very useful information.
    Thank you.

    ReplyDelete
  7. How can a vlan interface be assigned a dhcp ip address??

    ReplyDelete
    Replies
    1. Hi , There is no DHCP applied here . Look carefully . DHCP is mostly applied either on router or Server. We rnt using any of those devices. We just applied IP address to vlan interface of switch so that we can ping the switch.

      Delete
  8. Worthwhile post on telnet and ssh on packet tracer and its effective working overall.

    ReplyDelete
  9. Useful and dynamic resource on post on telnet and ssh on packet tracer tools.

    ReplyDelete
  10. Nice explaination very usefull..

    ReplyDelete