Disable HTTP remote access on a Billion 7800GZ but keep SSH?
Posted: Fri Feb 28, 2014 3:49 pm
Due to security concerns we need to disable HTTP access and only keep SSH access on the billion device.
> remoteaccess disable --service HTTP
> remoteaccess show
remote access for FTP is disabled
remote access for HTTP is disabled
remote access for ICMP is enabled
remote access for SNMP is enabled
remote access for SSH is enabled
remote access for TELNET is disabled
remote access for TFTP is disabled
> save
When I log out of my current SSH CLI session and try to connect using another SSH session it seems the SSH remote access gets closed as well.
ICMP to the billion is fine but seems all remote capability is disabled to the device when you just disable the HTTP service.
NMAP shows it being closed as well.
Starting Nmap 4.76 ( http://nmap.org ) at 2014-02-28 10:45 EST
Interesting ports on X.X.X.X
Not shown: 999 filtered ports
PORT STATE SERVICE
1723/tcp closed pptp
Nmap done: 1 IP address (1 host up) scanned in 5.27 seconds
Anyone have any insight on this?
thanks.
> remoteaccess disable --service HTTP
> remoteaccess show
remote access for FTP is disabled
remote access for HTTP is disabled
remote access for ICMP is enabled
remote access for SNMP is enabled
remote access for SSH is enabled
remote access for TELNET is disabled
remote access for TFTP is disabled
> save
When I log out of my current SSH CLI session and try to connect using another SSH session it seems the SSH remote access gets closed as well.
ICMP to the billion is fine but seems all remote capability is disabled to the device when you just disable the HTTP service.
NMAP shows it being closed as well.
Starting Nmap 4.76 ( http://nmap.org ) at 2014-02-28 10:45 EST
Interesting ports on X.X.X.X
Not shown: 999 filtered ports
PORT STATE SERVICE
1723/tcp closed pptp
Nmap done: 1 IP address (1 host up) scanned in 5.27 seconds
Anyone have any insight on this?
thanks.