Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco IOS Ports

Dear All:

I made a ports scanner to one of my routers cisco 7200 , and i found the following ports are opened "

1- 23 Telnet

2-80 HTTP

3-2001 remote control software

4-9001 cisco Xremote service

5-4001 cisco virtual terminal

6-6001 cisco virtual terminal

i want to know why port 80 is opened although i http server is disabled at this router , and the other las four ports , and how can i disable the last four ports "2001,9001,4001,6001" or control the access to these ports.

regards

Alaa Musa

5 REPLIES
Cisco Employee

Re: Cisco IOS Ports

You can control access to the last four by placing a "access-class" on your VTY/AUX ports. As for HTTP being opened, if you telnet to port 80 on your router, does it open up a connection? If not, then it's not really open and you're port scanner is saying the wrong thing. If you can, then we'd need to look at your config, but make sure you have "no ip http server" configured at the very least.

New Member

Re: Cisco IOS Ports

I made telnet to port 80 at my router and its connect , and i'm sure i add "no ip http server "

Cisco Employee

Re: Cisco IOS Ports

surely "no ip http server" will block the http connection and also telnet to port 80.

New Member

Re: Cisco IOS Ports

Dear Sir:

Yes I'm sure that "IP http server" feature is disabled and i see in my configuration "no IP http server" . also i made the scan for the router by anther scanner also gives me the same results.

your advise is highly appreciated

Cisco Employee

Re: Cisco IOS Ports

Also the 2001, 6001 and 4001, are ports related to the modem line on the router..So if you don't have a modems on the router, you don't need to worry about that..

391
Views
0
Helpful
5
Replies