On 1/8/2013 9:28 AM, Johnny Billquist wrote: On 2013-01-08 07:02, Dave McGuire wrote: On 01/08/2013 12:53 AM, Ian McLaughlin wrote: The problem with ssh is it's "out of band" as far as hecnet is concerned. It would be nice if the discovery was purely decnet. True. Well, if one can define access lists using DECnet addresses as filter terms, I'd be ok with that, for nonprivileged access. I've just verified that a MOP console request works from Linux using locally-stored authentication on the IOS side to establish a nonprivileged IOS CLI session on a 7206VXR running IOS 12.3(22), like so: $ moprc -v <MAC address> ...and like this from NCP under VMS: NCP> connect node gw physical address <MAC address> via <circuit-name> Note that the MAC address must have its octets delimited by colons under Linux, and hyphens under VMS. This is a service (protocol?) called Console Carrier Request. If you have Phase V, I think you use SET HOST/MOP under VMS. Under RSX, there is a special program called CCR that you use. And correct, this is not a routed protocol, so you need to be on the local network, and you cannot go through NCP on another machine using TELL. :-) I'm going to play with this. I think this is the solution to keeping cisco queries in-band. I'll report back on how I plan on using this. -brian