[c-nsp] Cisco disable ports 2001,4001,6001,9001

Lukas Tribus lukas at ltri.eu
Thu Dec 11 07:46:10 EST 2025


On Thu, 11 Dec 2025 at 12:48, Marco Moock via cisco-nsp
<cisco-nsp at puck.nether.net> wrote:
>
> Hello!
>
> Certain Cisco models (in my case 800 series, e.g. C886vaw, 886w etc.)
> have telnet services on port 2001,4001,6001 and 9001.
>
> What is the preferred way to disable them entirely (not firewalling
> them), but keep telnet and ssh?

"transport input none"

on the line causing those ports to open.

for example:
line aux 0
 transport input none


I assume there some show command to review, like show lines perhaps?



Lukas


More information about the cisco-nsp mailing list