Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Disable Console port

Hi

I need to completely disable consol port on all Cisco products for some security reason


can anyone tell me how can i done this ?

3 REPLIES
Cisco Employee

Re: Disable Console port

The console/aux port is very important for the routers in order to do password recovery etc.

You can disable it by doing:

Router(config)# line aux 0
Router(config-line)# no exec

You can also set a password for it if you don't want to disable i:

Router(config)# line aux 0
Router(config-line)# password xxx
Router(config-line)# login
Router(config-line)# end

I hope it helps.

PK

Re: Disable Console port

Hi

I need to completely disable consol port on all Cisco products for some security reason


can anyone tell me how can i done this ?

As suggested the no exec command disables all EXEC sessions to the router via that port.If you issue this command on the console port of the router because it will disallow all exec sessions to the router's console port.

Hope to Help !!

Ganesh.H

Hall of Fame Super Silver

Re: Disable Console port

Mahdi

Your original post said that you need to do this for ALL Cisco equipment. Since you do not indicate what Cisco equipment that you have this is a very broad set of equipment. I doubt that there is any answer that will work for ALL Cisco equipment. For IOS based equipment there is a single solution that works. If your requirement is to disable the console port then no exec is the way to disable it.

I would join with PK in asking you to think carefully before you do this. Access to the console port is an important part of the troubleshooting process for some problems. I have a customer who has a pair of routers that recently went through a power failure. When power was restored the routers did not come back on line. The switches to which they were connected indicated that the switch ports were not connected, so there was some issue on the router side. The only access that we had to the routers was through the console port. If we had not had console access I am not sure how we would have resolved this problem. So I suggest that you weigh carefully whatever requirement leads you to disable all console access againt the loss of a potentially valuable troubleshooting tool.

HTH

Rick

9749
Views
0
Helpful
3
Replies