[c-nsp] Cisco disable ports 2001,4001,6001,9001

[Christophe LUCAS]

Hi,

Are you sure "transport input none" has been kept after reboot ?

--Christophe


----- Mail original -----
De: "Lukas Tribus via cisco-nsp" <cisco-nsp at puck.nether.net>
À: "Marco Moock" <mm at dorfdsl.de>
Cc: "cisco-nsp" <cisco-nsp at puck.nether.net>
Envoyé: Jeudi 11 Décembre 2025 13:46:10
Objet: Re: [c-nsp] Cisco disable ports 2001,4001,6001,9001

On Thu, 11 Dec 2025 at 12:48, Marco Moock via cisco-nsp
<cisco-nsp at puck.nether.net> wrote:
>
> Hello!
>
> Certain Cisco models (in my case 800 series, e.g. C886vaw, 886w etc.)
> have telnet services on port 2001,4001,6001 and 9001.
>
> What is the preferred way to disable them entirely (not firewalling
> them), but keep telnet and ssh?

"transport input none"

on the line causing those ports to open.

for example:
line aux 0
 transport input none


I assume there some show command to review, like show lines perhaps?



Lukas
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/