邪恶八进制信息安全团队技术讨论组's Archiver

EvilOctal 2005-7-25 21:07

[转载]改路由器telnet的端口

文章作者:softmap

You can change your telnet Port use:

1. Command "rotary" under vty interface,the router will answer to TCP port number 3000 + the rotary group number and TCP port number 7000 + the rotary group number.

line vty 1 2
rotary 1
password letmein
login

*************************
* Sample *
*************************
2611XM#t
Enter configuration commands, one per line. End with CNTL/Z.
2611XM(config)#line vty 1 2
2611XM(config-line)#rota
2611XM(config-line)#rotary ?
<0-100> Rotary group to add line to

2611XM(config-line)#rotary 1
2611XM(config-line)#^Z
---------------------------------------

At PC side:

#### Before #####

C:\>netstat -n -a -p TCP

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1029 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1186 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1188 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1192 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1028 0.0.0.0:0 LISTENING
TCP 192.168.0.2:139 0.0.0.0:0 LISTENING

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

And now start 2 telnet session from PC to 2611XM

------------------------------
Session (1)
C:\>telnet 192.168.0.100


2611XM line 66
YOU CAN ACCESS THIS DEVICE
Username: abc
Password:

2611XM#
2611XM#
2611XM#..........

C:\>netstat -n -a -p TCP

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1029 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1186 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1188 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1192 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2691 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1028 0.0.0.0:0 LISTENING
TCP 192.168.0.2:139 0.0.0.0:0 LISTENING
TCP 192.168.0.2:2691 192.168.0.100:23 ESTABLISHED <<<<<<<<

--------------------------------------------
Session (2)
C:\>telnet 192.168.0.100 3001
^ TCP Port 3001


2611XM line 67
YOU CAN ACCESS THIS DEVICE
Username: abc
Password:

2611XM#
2611XM#
2611XM#

C:\>netstat -n -a -p TCP

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1029 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1186 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1188 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1192 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2691 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2709 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1028 0.0.0.0:0 LISTENING
TCP 192.168.0.2:139 0.0.0.0:0 LISTENING
TCP 192.168.0.2:2691 192.168.0.100:23 ESTABLISHED
TCP 192.168.0.2:2709 192.168.0.100:3001 ESTABLISHED <<<<<<<<<<<<<


+++++++++++++++++++++++++++++++++++++++++++++++++++
2.You can use NAT feature


ip nat inside source static tcp 1.1.1.1 192.168.0.1 3721   

Use NAT Feature, you can change your telnet Port to any TCP Port,so it is a best solution??????

页: [1]
© 1999-2008 EvilOctal Security Team