18 Posts
0
3310
September 14th, 2020 09:00
Close Port 23
Hi everyone,
I have a Dell Powerconnect 6224, we have a security rule to diable all telnet protocols, the issue is I disabled the telnet on that switch put the port 23 still open and it shows up every time when we do a port scan, My Question Is There a Way To Close the Port 23?
System Model ID: PCT6224
Machine Type: PowerConnect 6224
Current Running Image: 3.3.17.1
No Events found!
DELL-Josh Cr
Moderator
•
9.2K Posts
0
September 15th, 2020 14:00
Great, glad you got it resolved.
DELL-Josh Cr
Moderator
•
9.2K Posts
0
September 14th, 2020 13:00
Hi Ahmedo,
The best way is to use an ACL to deny all port 23 traffic. Page 210 https://dell.to/35yvWoE Let me know if you have any additional questions.
Ahmedo
18 Posts
0
September 15th, 2020 13:00
I know telnet is using the TCP any way, I did create the rule for blocking udp, and the port still open what to do???
access-list DenyPort23 deny udp any eq 23 any eq 23
@DELL-Josh Cr
Ahmedo
18 Posts
0
September 15th, 2020 13:00
I did run the following command but it does not block the port 23
SwitchName(config)#access-list DenyPort23 deny tcp any eq 23 any eq 23
Please help!
@DELL-Josh Cr
DELL-Josh Cr
Moderator
•
9.2K Posts
0
September 15th, 2020 13:00
Try blocking UDP as well.
Ahmedo
18 Posts
0
September 15th, 2020 13:00
using powershell to check if the port is open or close
Test-NetConnection IPAddress -Port 23
DELL-Josh Cr
Moderator
•
9.2K Posts
1
September 15th, 2020 13:00
How are you testing it? Are you opening a telnet session or just scanning the port?
Ahmedo
18 Posts
0
September 15th, 2020 14:00
yesssssss correct! that solved the issue,
thanks for all your help @DELL-Josh Cr
DELL-Josh Cr
Moderator
•
9.2K Posts
1
September 15th, 2020 14:00
It is probably the implicit deny all at the end the acl. So you need to add a permit all for other traffic. SwitchName(config)#access-list DenyPort23 permit every any any
DELL-Josh Cr
Moderator
•
9.2K Posts
0
September 15th, 2020 14:00
Did you do (config)#ip access-group DenyPort23
To apply it to all interfaces?
Ahmedo
18 Posts
0
September 15th, 2020 14:00
Every time I ran this command I lose the connection with the switch! And I have to reboot the switch (Start from Startup-Config again) to get connected to it.
@DELL-Josh Cr