The virtual terminal (vty) lines allow remote access to the devices. We can use the Cisco ‘transport input’ command to set which protocols are allowed to access the virtual terminal lines. We can choose from the following transport input command keywords to set the allowed protocols on the virtual terminal lines:

To configure, in the Command Line Interface (CLI), we need to enter the command ‘transport input {all | none | telnet | ssh}’ under the virtual terminal (vty) line configuration mode. We can allow different protocols on the virtual terminal lines, and each vty line accepts one user only. Virtual terminal lines are evaluated starting from the line vty 0 forward.

In the example configuration above, virtual terminal (vty) line 0 was configured with the ‘transport input ssh’ command. Therefore, vty 0 enables SSH connections only. Virtual terminal (vty) line 1 has the command ‘transport input telnet’ and it permits only Telnet connections. The ‘all’ transport input command keyword was used on vty 2. Thus all protocols, both Telnet and SSH protocols, are allowed.

Virtual terminal (vty) line 3 was configured with the ‘none’ keyword, so no protocol is allowed to connect via vty 3. Lastly, ‘transport input telnet ssh’ was entered on vty 4. Meaning, both Telnet and SSH protocols are allowed on the virtual terminal (vty) line 4.

In this example, we’ve configured R1 with the transport input commands shown above. We can use the ‘show run‘ command to view the configured transport input commands in the device. The ‘show line‘ command is used to show which line is in use.

Let’s connect R2 to R1 via SSH. I’ve set the username as ‘study’ and the password as ‘ccnp’.

If we do a ‘show line’ on R1, the output is as shown as below:

The asterisk on the left means that the line is in use. In the output above, lines 0 and 2 have asterisks. That indicates that a user is connected to the console (CTY) line and vty 0. The first VTY line, line 2 VTY, is mapped to vty 0 automatically.

Now, let’s connect R3 to R1 via Telnet. Again, the username is ‘study’, and the password is ‘ccnp’.

If we enter the ‘show line’ command on R1, we will have the output below:

You can see that the asterisk was added on line 3 VTY, which is mapped to vty 1. We now have active connections via the console line, virtual terminal (vty) lines 0 and 1 using SSH and Telnet, respectively.

Download our Free CCNA Study Guide PDF for complete notes on all the CCNA 200-301 exam topics in one book.

We recommend the Cisco CCNA Gold Bootcamp as your main CCNA training course. It’s the highest rated Cisco course online with an average rating of 4.8 from over 30,000 public reviews and is the gold standard in CCNA training: