新手配置了CISCO路由器，为何PING的通TELNET不通

jordanis1

网络环境是最基本的：光纤接入-CISCO2911路由器-CISCO交换机-50台主机。
外网接在2911的GigabitEthernet0/0口子。
内网接在2911的GigabitEthernet0/1.

做了些基本配置，但是发现可以PING通。不可以TELNET。不知道为何。
贴配置：
abc>en
Password:
abc#show conf
Using 4077 out of 262136 bytes
!
! Last configuration change at 01:38:11 UTC Tue Jun 25 2013
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname abc
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
enable secret 4 zrEITLdKFlA/kOzsY.bOFcZ85r/o6pG6iYkCVEdXAK2
!
no aaa new-model
!
no ipv6 cef
!
!
!
!
!
ip domain name yourdomain.com
ip cef
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-1586406889
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1586406889
revocation-check none
rsakeypair TP-self-signed-1586406889
!
!
crypto pki certificate chain TP-self-signed-1586406889
certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
license udi pid CISCO2911/K9 sn FGL1645132X
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
ip address 180.177.228.70 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 10.138.20.254 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
ip route 0.0.0.0 0.0.0.0 180.177.228.69
!
access-list 1 permit any
access-list 23 permit 10.10.10.0 0.0.0.7
!
!
!
control-plane
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for  one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace <myuser> and <mypassword> with the username and password you want to
use.

-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE  PUBLICLY-KNOWN
CREDENTIALS

Here are the Cisco IOS commands.

username <myuser>  privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
exec-timeout 0 0
password xxxxxx
logging synchronous
login
line aux 0
password xxxxxx
login
line 2
no activation-**acter
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class 23 in
privilege level 15
password xxxxxx
login
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
password xxxxxx
login
transport input telnet ssh
line vty 16 1114
password xxxxxx
login
transport input all
!
scheduler allocate 20000 1000
!
end

abc#


抱歉，不知道为何，我做了很简单的配置。show config却出来这么多。。。

jordanis1

求指教！！！

zhuchen89

access-list 23 permit 10.10.10.0 0.0.0.7地址段为10.10.10.1-6，你看看你发起telnet的主机的地址是否为这个地址段的

jordanis1

zhuchen89 发表于 2013-6-28 23:42
access-list 23 permit 10.10.10.0 0.0.0.7地址段为10.10.10.1-6，你看看你发起telnet的主机的地址是否为这 ...

谢谢你，那我应该删了这条命令还是改成access-list 23 permit 0.0.0.0 0.0.0.0 ？
谢谢

jordanis1

可以了，非常感谢！