Change ssh default port 22

claude1968 · ‎04-08-2008

Hello,

Is-it possible to change de default port 22 for ssh connection in live VTY in a switch or router? The security department here change the port ssh 22 for fort 14555 for all ssh connection on the servers. They want to do the same thing for Cisco equipment.

Is-it possible?

mchin345 · ‎04-14-2008

I think it is not possible to change the ssh default port in cisco equipments but you can simulate with the help of NAT. For more info please use this document.

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094e77.shtml#topic8

mladentsvetkov · ‎09-30-2008

Did you try

ip ssh port [new port] rotary 1

line vty ...

rotary 1

Regards,

Mladen

remark: this opens the new port for ssh connections, but the default (22) is still open.

mladentsvetkov · ‎09-30-2008

you can read about the "rotary" feature here:

http://www.cisco.com/en/US/tech/tk583/tk617/technologies_q_and_a_item09186a0080267e0f.shtml

It forwards the new port to the specified line. If you forward to a vty line with ssh enabled you can connect with ssh using the new port.

Still you have to use access-list to deny the default ssh port (22).

Regards,

Mladen