Disabling Remote Access Methods

Remote access methods can be specifically disabled.
For security you may want to disable specific access methods. The following access methods can be disabled.

  • Telnet access—You can use a Telnet client to access the CLI of the device over the network. If you do not plan to use the CLI over the network, you can disable Telnet access to prevent others from establishing CLI sessions with the device.

  • TFTP—By default, TFTP client access is enabled. You can globally disable TFTP to block TFTP client access.

  • SNMP access—You can disable SNMP management of the device.

  • Web management access—If you want to prevent access to the device through the Web Management Interface, you can disable the Web Management Interface.

    Note: As soon as you disable the Web Management Interface, the device stops responding to Web management sessions. If you make this change using your Web browser, your browser can contact the device, but the device will not reply once the change takes place.

  • Web management access by HP ProCurve Manager—By default, TCP ports 80 and 280 are enabled on the RUCKUS ICX device. TCP port 80 (HTTP) allows access to the device Web Management Interface. TCP port 280 allows access to the device by HP ProCurve Manager.
  1. Enter global configuration mode. 
    device# configure terminal
  2. Disable Telnet access. 
    device(config)# no telnet server
    If you disable Telnet access, you will not be able to access the CLI except through a serial connection to the management module.
  3. Disable TFTP access. 
    device(config)# tftp disable
    When TFTP is disabled, users are prohibited from using the copy tftp command to copy files to the system flash. If you enter the copy tftp command while TFTP is disabled, the system will reject the command and display an error message. To reenable TFTP client access after it has been disabled, use the no tftp disable command.
  4. Disable SNMP management of the device 
    device(config)# no snmp-server
    If you disable SNMP access, you will not be able to use an SNMP-based management application.
  5. Disable web management access through both http access and https access. 
    device(config)# no web-management
    Use the command no web-management http to disable only web management through http access. Use the command no web-management https to disable only web management through https access.
  6. The no web-management command disables both TCP ports. To disable only port 280 and leave port 80 enabled, add the hp-top-tools keyword. 
    device(config)# no web-management hp-top-tools
Parent topic: Remote Access For Managing Devices