Determining open ports on routers

[m_ahanchian]

Hi All,

I need to determine which ports are open on a particular interface on more than 200 routers. I have configuration of all of them, but it would be very time consuming to do this manually.

Is there any application or script that can create this report automatically?

Regards,

Masoud

[jackko]

there is a cisco product named security auditor and it should resolve your issue.

http://www.cisco.com/en/US/products/ps6263/products_data_sheet0900aecd8027a009.html

alternatively, if you don't prefer purchasing the product, you may use a port scanner to scan all those routers. e.g. nmap

[Georg Pauwen]

Hello Masoud,

OpUtils has a Cisco port scanner, but it apparently only works on 2500 routers and up, not sure if that fits your purpose. You can download it here>

Download OpUtils 3.2.0

http://manageengine.adventnet.com/products/oputils/download.html

Regards,

GP

[m_ahanchian]

Hi,

The point is I don't want to use a port scanner for various reasons. I have to analyze router configs that I already have. And configs are fairly complex having many ACLs for QoS, policy based routing, VPN ...