https://community.hpe.com/t5/switches-hubs-and-modems/allow-telnet-acl/m-p/4467127#M19260 <BR />Yes, it is possible with the 5400zl series<BR />and some others.<BR /><BR />To block inbound telnet to a vlan<BR />except for machine a.b.c.d it would be:<BR /><BR />ip access-list extended "block-telnet" <BR /> 10 permit tcp 0.0.0.0 255.255.255.255 a.b.c.d 0.0.0.0 eq 23<BR /> 20 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 23<BR /> 30 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 <BR /> exit <BR /><BR />Assumes clients are on vlan numbered<BR />'n'<BR /><BR />vlan n<BR /> ip access-group "block-telnet" in<BR />exit<BR /> Tue, 28 Jul 2009 14:43:13 GMT Bruce Campbell_3 2009-07-28T14:43:13Z https://community.hpe.com/t5/switches-hubs-and-modems/allow-telnet-acl/m-p/4467126#M19259 I wish to deny telnet on our network bar one machine is this possible using acl's Mon, 27 Jul 2009 08:42:35 GMT https://community.hpe.com/t5/switches-hubs-and-modems/allow-telnet-acl/m-p/4467126#M19259 andy_johnson(cnews) 2009-07-27T08:42:35Z https://community.hpe.com/t5/switches-hubs-and-modems/allow-telnet-acl/m-p/4467127#M19260 <BR />Yes, it is possible with the 5400zl series<BR />and some others.<BR /><BR />To block inbound telnet to a vlan<BR />except for machine a.b.c.d it would be:<BR /><BR />ip access-list extended "block-telnet" <BR /> 10 permit tcp 0.0.0.0 255.255.255.255 a.b.c.d 0.0.0.0 eq 23<BR /> 20 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 23<BR /> 30 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 <BR /> exit <BR /><BR />Assumes clients are on vlan numbered<BR />'n'<BR /><BR />vlan n<BR /> ip access-group "block-telnet" in<BR />exit<BR /> Tue, 28 Jul 2009 14:43:13 GMT https://community.hpe.com/t5/switches-hubs-and-modems/allow-telnet-acl/m-p/4467127#M19260 Bruce Campbell_3 2009-07-28T14:43:13Z