Open TCP Ports on 9216i

We are auditing open TCP ports on our network equipment and discovered a number of open TCP ports on our 9216i. Is there any way to tell what the open ports are used for and shut them down if unnecessary? The show tcp command is not available. show tech did not reveal anything.

There is the standard set of ports that are open for mgmt by ssh, telnet, and SNMP v2 or v3. Additionally, there is port 80 open so you can point web browser to it and get the FM code. The list is as follows.
Common to all applications
* SSH 22 (TCP)
* TELNET 23 (TCP)
* HTTP 80 (TCP)
* SYSLOG 514 (UDP)
Fabric Manager Server and Performance Manager
* SNMP_TRAP 2162 (UDP)
* SNMP picks a random free local port (UDP) - (can be changed in server.properties)
* Java RMI 9099, 9199 to 9299 (TCP)
Fabric Manager Client
* Java RMI 9099, 9199 to 9299 (TCP)
* SNMP picks a random free local port. (UDP) or 9189 (TCP) if SNMP proxy is enabled (can be changed in server.properties)
Device Manager
* SNMP_TRAP 1163 to 1170 (UDP) (picks one available in this range)
* SNMP picks a random free local port (UDP) or 9189 (TCP) if SNMP Proxy is enabled (can be changed in server.properties)
You can shut off telnet in lieu of ssh in the configuration. Also, it is possible to use access-lists on the mgmt ports to limit IP addresses/ports/etc. Also, don't forget that the IPS ports will be listening for FCIP and ISCSI if enabled.

Similar Messages

Listing and closing open TCP ports

Hi,
For security reasons I would like to have as few open TCP ports as possible on my iMac, leaving open only those that I feel are worthwhile having enabled. How can I go about to
a) identify which TCP ports are currently open on the system
b) identify the processes that have opened the ports and understand the origin and purpose of those process
c) disable the processes that have ports open, if I feel that there is no good reason for having them open
I'm running OS X 10.9.4.
Thanks!
Fredrik

You can run "netstat" in the Terminal or maybe Network Utility to see open ports. However, all you should really do is make sure you don't have any sharing services enabled. Otherwise that is all you can do. Macs are not meant to be used as servers or in secure environments. They are strictly consumer machines. Apple has engineered them to be highly secure, but not configurable by the user. It is highly unlikely that any modifications that an end-user can make would do anything other than reduce security.

Unknown open TCP ports on router

Anyone know how to close these open ports on my Cisco 7606 router?
Anyone know what these TCP ports are used for?
49   - Not sure what this one is other than what IANA reports about TCP port 49
4510
4509
2222
I'm sure I could add an ACL to block communications to my router based on this ports but would rather figure out how to close 'em so this already overloaded router doesn't have additional processing.
Cisco-7606# sh tcp br all
TCB       Local Address           Foreign Address           (state)
12EFC1C0 172.16.8.3.14401        10.8.2.14.49              TIMEWAIT
1CC4F57C 172.16.8.3.26963        10.8.2.14.49              TIMEWAIT
1A419F90 0.0.0.0.4510            *.*                       LISTEN
1C581740 0.0.0.0.4509            *.*                       LISTEN
1A417BBC 0.0.0.0.2222            *.*                       LISTEN
12FB03A8 10.8.10.2.2222          10.8.1.42.4690            CLOSEWAIT
12FB099C 10.8.10.2.2222          10.8.1.42.2233            CLOSEWAIT
12FA7DF0 10.10.0.3.2222          10.8.1.15.4878            CLOSEWAIT
1CD47780 10.10.0.3.2222          10.8.1.15.3917            CLOSEWAIT
1CDDBCE0 10.8.10.2.2222          10.8.1.42.3964            CLOSEWAIT
Cisco-7606# sh ver | i image
System image file is "disk0:c7600rsp72043-advipservicesk9-mz.122-33.SRD3.bin"
Tks
Frank

Frank
I can offer some suggestion about one of your port numbers. TCP port 49 is used for TACACS. If you are using TACACS for authentication, or authorization, or accounting then we know why port 49 is open and blocking TCP49 will prevent TACACS from working with your router.
I have no insights or suggestions about the other port numbers that you mention.
HTH
Rick

How to open TCP Port on my RV220 Firewall router?

Hello,
I have a windows 8 server for a LAN. This has a Cisco RV220W Firewall which is connected to the T1 router. In order to host a 3rd party video conferencing software I need to have the TCP 1935 port open.
I tried the following -
1. Logged into my RV220W and added a rule using Manage Firewall Rules (Firewall-Access Control-Custome Services). Here I added a rule for TCP start port 1935 and Finish port 1935.
2. Then I added an inbound rule on my Windows 8 server to open TCP 1935.
However when I tested it using porttest.net, it said TCP 1935 is still closed. Can someone please let me know how can I open TCP 1935 port?
Thanks,
Abhi

Hello
your steps seems to be fine at first look, but somewhere in that chain there is probably something broken.
what kind of service is on that server port?
are you able to open connection from outside with telnet to Router WAN IP and port? example test from outside/internet:
telnet X.X.X.X YYYY
where X.X.X.X is WAN IP of Router and YYYY is port number.
You can confirm that port forwarding is working on both devices:
you can try to connect with computer between Router and Firewall and try that port on firewall.
if previous test works, then for testing purposes move server to subnet between Router and Firewall and perform connectivity test from internet.

OPEN TCP-Ports

I've detected 4 open network-protzs on my Oracle 8.05 EE
without configured MTS oder listener.
Why ??
Older releases (7.3.4 on other platforms) don't have this
"problem".
Any hints are wellcome
So long
Christian
null

There is the standard set of ports that are open for mgmt by ssh, telnet, and SNMP v2 or v3. Additionally, there is port 80 open so you can point web browser to it and get the FM code. The list is as follows.
Common to all applications
* SSH 22 (TCP)
* TELNET 23 (TCP)
* HTTP 80 (TCP)
* SYSLOG 514 (UDP)
Fabric Manager Server and Performance Manager
* SNMP_TRAP 2162 (UDP)
* SNMP picks a random free local port (UDP) - (can be changed in server.properties)
* Java RMI 9099, 9199 to 9299 (TCP)
Fabric Manager Client
* Java RMI 9099, 9199 to 9299 (TCP)
* SNMP picks a random free local port. (UDP) or 9189 (TCP) if SNMP proxy is enabled (can be changed in server.properties)
Device Manager
* SNMP_TRAP 1163 to 1170 (UDP) (picks one available in this range)
* SNMP picks a random free local port (UDP) or 9189 (TCP) if SNMP Proxy is enabled (can be changed in server.properties)
You can shut off telnet in lieu of ssh in the configuration. Also, it is possible to use access-lists on the mgmt ports to limit IP addresses/ports/etc. Also, don't forget that the IPS ports will be listening for FCIP and ISCSI if enabled.

Open TCP Port: 3839 amx-rms

Port scan on localhost shows the above subject. What is it? Do I need this? If not, how do I get rid of it?

Ended up finding out the issue had to with WPA2 session timeouts.
For whatever reason we had the timeouts configured for 30 minutes, which means every 30 minutes the phones are forced to re-auth with the AP. This process was taking long enough that the KeepAlive handshake between the phones and the call managers would fail, resulting in an abnormal unregister.
I've since bumped the value up to 12 hours and magically, the phones don't drop.
Now I get to battle some QoS and/or WiFi interference issues. yay!

Open tcp 21 port in asr 1001

Hi everyone!
Some times ago i noted, that our asr 1001 has open tcp port 21, however i couldn't find service in one, which links with ftp. When i execute telnet ip_asr 21, i receive rst,ack from asr. It's ok, but i want to disable this port. Did anybody meet with it? And how i can look open and listen ports on ios xe?
Thanks in advance.

I would add it via ipfw in a terminal window. Then it will be there
when you restart.

Open UDP Ports on AirPort Extreme

I need to open a few UDP Ports on my new AirPort Extreme so that the software that is running on my network can access the internet over those ports and the software can be accessed from the internet as well. I can find in the AirPort Extreme manual how to open TCP ports but not UDP. I have the list of ports I need to open, but can't find where to configure them in the router firmware.
I would like help on where to configure these ports. Thank you.

If you are using the Airport Utility on the Airport Extreme N Base Station, the port mapping screen should look like what you see on page 56 of the manual "Designing Airport Networks" found at:
http://manuals.info.apple.com/en/DesigningAirPort_Networks_Using_AirPortUtility.pdf
...and it clearly shows how/where to specify UDP and TCP ports.

UDP and TCP ports

Hi:
I have a question. As we know, scanning TCP ports is a lot eaiser than UDP ports because active UDP ports don't respond and there are other reasons as well.
try{
Socket soc= new Scoket(address, portnumber);
catch(Throwable e){ System.out.println(e)}
look at the code above, it can only tell you active TCP ports for the Throwable e tells you nothing about UDP ports. An active UDP port doesn' respond to the connection call "soc". Therefore it will throw an exception(connection refused) after trying to connect an active UDP port. This exception is just like those of closed TCP ports.
What i am saying is that active UDP ports will be treated the same as closed TCP ports. They are hidden in closed TCP ports. How do i sift them out? Any solutions?

I am basically trying to determine how many UDP and TCP ports on a machine are open. Open TCP ports are easy to see. But UDP ports are tricky. Can you please tell me more in detail using a datagram socket?

SPA9000 TCP ports

I have a strange problem with an SPA9000 and I am not sure if it is me.
Have set up lines 1 thru 4 to use TCP as SIP transport and using 5060 for line 1, 5061 for line 2 etc. If I run a port scan to the device the only TCP port I see open is 80 and the only UDP ports open are 53, 67, 5080 thru 5084 and 6060.
If I set up lines 1 thru 4 to use UDP as SIP transport then ports 5060 thru 5063 appear as open UDP ports in the scan.
The question I have is : Why can I not see these ports as open TCP ports when lines 1 thru 4 have TCP as SIP transport?
An answer would be most appreciated
Thanks

First let me explain the difference between TCP and UDP. TCP (Transmission Control Protocol) is the most commonly used protocol on the Internet. The reason for this is because TCP offers error correction. When the TCP protocol is used there is a "guaranteed delivery." This is due largely in part to a method called "flow control." Flow control determines when data needs to be re-sent, and stops the flow of data until previous packets are successfully transferred. This works because if a packet of data is sent, a collision may occur. When this happens, the client re-requests the packet from the server until the whole packet is complete and is identical to its original.
UDP (User Datagram Protocol) is anther commonly used protocol on the Internet. However, UDP is never used to send important data such as webpages, database information, etc; UDP is commonly used for streaming audio and video. The reason UDP is faster than TCP is because there is no form of flow control or error correction. The data sent over the Internet is affected by collisions, and errors will be present.
Now knowing the difference between TCP and UDP, UDP is used mainly due to its speed over TCP. Frames of data should be delivered the fastest way possible to that the other party to achieve real time communication. Just imagine if TCP is used in VoIP. If a message is having some packet loss, it won’t send the message and will be requesting it again and again until no error is detected thus requiring a lot of bandwidth speed and the down fall is that communication will be slow communication between parties or even worst none at all.

Opening TCP 1802 Port on WRT45G

I was browsing the forums and found several threads about opening ports, but none that I looked at seemed to outline or actually explain exactly what to do (unless I'm just missing something). I hope by posting a this thread I can get specific answers rather than trying to have to figure out what other people did and how to apply it my situation.
My Situation:
I'm trying to get the application "Fantasy Grounds" to work, which requires a direct connect through TCP port 1802 and 1803. At the moment I have the ports forwarded to my laptop (static IP 192.168.1.102), triggered, open on my modem, and open on my windows firewall (better than nothing eh?). Every time I try to connect to it, it fails (It has worked on my internal network before, but I'm not sure if it still does). I've run PCflank port scanners, which report it as being "closed" (At one time it was "stealthed".).
After fiddling with this problem for so long, I'm fresh out of ideas. I've tried both the software company, and my ISP tech support, neither helped too much.
Here are some screenshots of what I have set up (Triggering, Forwarding, Modem, and Firewall, respectively). I don't think I set them up incorrectly, but you never know.
http://www.geocities.com/dungeonmaster813/TechSupport.jpg
I have a WRT45G Linksys Router and a Speedtouch 516 Modem if that makes any difference.
Thanks in advance,
MattMessage Edited by OneRingShort on 05-24-200706:40 PM

hi , first off, either use "port forwarding" or "port triggering".....not both at the same time.....the way u have setup port forwarding is fine....i'd also suggest that u turn offf the "windows firewall" since u already have a NAT and a hardware firewall (router) .... my question to you is , does the router do the authentication for you ? ie - have you setup the router as PPPoE or automatic configuration DHCP ???
i'm assuming that it is automatic conenction DHCP , since you have mentioned opening ports on the modem...
if that is the case....you will first have to convert the modem to a "bridge" mode , configure the router to PPPoE and then setup port forwarding on the router only.
by converting the modem to a "bridge" , you will in effect be disabling the NAT and teh authentication will pass on to the router.....
i figure the problem is that u have one too many firewalls ...... the modem if not in a bridge mode has a NAT , the router has a NAT and SPI firewall , and there is also the "windows firewall"
let me if if the above works for u.

How do i find out what tcp ports are open? and where do i look it up?

how do i find out what tcp ports are open? and where would i go to see them? i have a program that is asking for it and i am unable to find where those are listed.

If you are not too tech savvy, try using the Network Utility found in the Utilities folder. Just have the Mac scan itself.
If tech savvy, there's always Fyodor's classic NMap, found at www.insecure.org.

TCP Port 62078 on my iPad is open

TCP Port 62078 on my iPad is open with tcpwrappers - also UDP Port 5353 is open/filtered - is this normal? How can I close these ports? On my Macbook Pro they are closed. I do not like having open ports on my network.
Thank You
Bob

I maintain a firewall for our corporate network and management asked for a mDNS proxy so that their iPhones on our Wi-Fi network could see our Airprint printers on the Ethernet LAN. I regularly see firewall log entries for traffic from desktops on the LAN to iPhones on the Wi-Fi network. At first it seemed random, but then I realised that the desktops and the iPhones were assigned to the same user in each case. The iPhones have presumably been paired with the desktop (iTunes) in the past and the iPhones are using mDNS / Bonjour to look for desktops that they have been previously paired with. The desktops are communicating from ports in the range of 60289 to 62089 and always direct to port 62078 on the iPhone. We don't have iPads on our network (as far as I know!), but from the Original Poster, it appears that this may also be the case with iPads.
A little bit of digging found an article about Juice Jacking : http://www.zdziarski.com/blog/?p=2345
So this port is used for iPhone or iPad Wi-Fi synching, as mentioned by rjw1678. Once a pairing has been established with a computer, then your iPhone or iPad will always try to pair with this device until such time as you perform a factory restore on the iPhone / iPad.

BEFW11S4 UDP AND TCP PORT opening

How do i open UDP AND TCP ports specifically TCP ports: 80, 6667, 28910, 29900, 29920
UDP ports: 4321, 27900 Its for a networkable game i need to open these ports to play it.

Ok But when i try disabling the numbers in the forwarding field i run out of spaces in the field to be able to disable them Is there an advanced firewall settings that i dont know about? I put in all of the range forwarding and put the range forwarding start for example 80 originally (TCP ports: 80, 6667, 28910, 29900, 29920
UDP ports: 4321, 27900) The ones i try to disable i run out of fields to disable them in the forwarding for example there are 10 slots for disabling and Im trying to disable them on two numbers 192.168.1.101. and 192.168.1.100 So i need to disable them for both ip numbers I got 10 fields to enter it into them and 10 x 2 is more than the numbers..... You get me?? and on top of that i dont know if what i did was enough Linksys doesnt want to help me without paying 30 dollars so im just thinking i should buy a new router....... i mean they charge 39 dollars for a new router and they want me to pay 39 dollars for tech support it just doesnt make any sense........

Leopard Holding TCP port 88/kerberos-sec open, why?

I port scanned my computer and leopard is leaving kerberos open on tcp port 88. How do I close this port? Is this normal operation?
Any ideas?
Thank you!

yeah... i know what the ports are and what services run on them.
in addition to being listed in the actual port scan... i already knew what they were anyway.
kerberos is an authentication system... it is certainly not limited to file sharing. but now that AFP is off i will see if the kerberos port also closes. i am thinking it will stay open for use with ARD.
as mentioned... no FTP server (or FTP program in general. nor on in the 'File Sharing' section.) is running and none are listed in the firewall settings as allowed. my second posts shows that there is nothing running anything on port 21 from netstat either.
same deal with RTSP. no QTSS running nor anything else that would use it.
yet they still would show up in a port scan. and running ftp via the terminal gave me a "Connected to xxx.xxx.xxx.xxx" but nothing actually happens beyond that.
in both those instances (FTP / RTSP) they are not showing in the netstat list either.
i have used both handmade ipfw and WaterRoof and NoobProof on other machines. so i am familiar with them already.
i am specifically wondering why port 21 (and 554) could be showing as open in a port scan when no services are using them and they are not even showing up in netstat.
it is no longer allowing me to connect to 21 via the command line (times out now vs. saying 'connected' with no additional prompts).
in both cases... no actual applications were running on the machine. and the number of other services is pretty minimal.
i'll run another port scan and see if 21 (or 554) show up still. or if any other new seemingly phantom ports show up.

Open TCP Ports on 9216i

Similar Messages

Maybe you are looking for