Cisco Smart Install, opens up TCP port 4786, want it disabled

Answered Question
Mar 2nd, 2010

Hello, I have upgraded a couple of 2960G switches to 12.2.52SE and now discovered that TCP port 4786 is open on the switches.

I have looked in the document http://www.cisco.com/en/US/docs/switches/lan/smart_install/release_12.2_52_se/configuration/guide/smart_install.html trying to find a way to disable this function/port, but didnt find anything usefull.

Have anyone found a way to disable this function/port?

BR /Christian

I have this problem too.
0 votes
Correct Answer by Kevin Morales about 3 years 7 months ago

Hello, In version  15.0(2)SE2 aplly this command:

config t

no vstack

Sw01#sh vstack config

Role: Client (SmartInstall disabled)

Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***

Vstack default management vlan: 1

Vstack start-up management vlan: 1

Vstack management Vlans: none

Join Window Details:

         Window: Open (default)

         Operation Mode: auto (default)

Vstack Backup Details:

         Mode: On (default)

         Repository:

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.7 (3 ratings)
Loading.
Ganesh Hariharan Tue, 03/02/2010 - 02:54

Hello, I have upgraded a couple of 2960G switches to 12.2.52SE and now discovered that TCP port 4786 is open on the switches.

I have looked in the document http://www.cisco.com/en/US/docs/switches/lan/smart_install/release_12.2_52_se/configuration/guide/smart_install.html trying to find a way to disable this function/port, but didnt find anything usefull.

Have anyone found a way to disable this function/port?

BR /Christian

Hi BR,

As per the IANA the following TCP port 4786 is reserved for Smart Install Service,check out the below link for more information.

http://www.iana.org/assignments/port-numbers

Hope to Help !!

Ganesh.H

ankugarg Thu, 06/09/2011 - 08:04

Hi,

Starting with IOS version.12.2(58)SE,there is a way to close port 4786.See the latest docs for more details.

Thanks,

Ankur

Correct Answer
Kevin Morales Wed, 05/01/2013 - 18:07

Hello, In version  15.0(2)SE2 aplly this command:

config t

no vstack

Sw01#sh vstack config

Role: Client (SmartInstall disabled)

Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***

Vstack default management vlan: 1

Vstack start-up management vlan: 1

Vstack management Vlans: none

Join Window Details:

         Window: Open (default)

         Operation Mode: auto (default)

Vstack Backup Details:

         Mode: On (default)

         Repository:

Actions

This Discussion