本帖最后由 iosvip@163.com 于 2018-6-27 08:59 编辑 Rocky 发表于 2018-6-26 23:02
IOS 12.2(52)SE之前的软件版本,不受Smart Install安全漏洞影响,所以就没有这命令。
IOS 12.2(52)SE 当前这个版本,本身有监听TCP.4786 端口,且show vstack也能看到作为客户端的信息,但没有关闭该服务的命令。是否有其他解决方法?thx.
xxx-C3560-24TS#show ver
Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(52)SE, RELEASE SOFTWARE (fc3)
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Fri 25-Sep-09 08:13 by sasyamal
Image text-base: 0x01000000, data-base: 0x02E00000
ROM: Bootstrap program is C3560 boot loader
BOOTLDR: C3560 Boot Loader (C3560-HBOOT-M) Version 12.2(50r)SE, RELEASE SOFTWARE (fc1)
dqg-C3560-24TS uptime is 1 day, 22 hours, 58 minutes
System returned to ROM by power-on
System image file is "flash:c3560-ipservicesk9-mz.122-52.SE.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email to
export@cisco.com.
cisco WS-C3560V2-24TS (PowerPC405) processor (revision F0) with 131072K bytes of memory.
Processor board ID FDO1439X286
Last reset from power-on
2 Virtual Ethernet interfaces
24 FastEthernet interfaces
2 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : B4:14:89:10:D7:00
Motherboard assembly number : 73-11765-08
Power supply part number : 341-0328-02
Motherboard serial number : FDO143911KV
Power supply serial number : DCA1428M4JV
Model revision number : F0
Motherboard revision number : A0
Model number : WS-C3560V2-24TS-S
System serial number : FDO1439xxx6
Top Assembly Part Number : 800-31050-04
Top Assembly Revision Number : A0
Version ID : V04
CLEI Code Number : COMP900ARA
Hardware Board Revision Number : 0x03
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 26 WS-C3560V2-24TS 12.2(52)SE C3560-IPSERVICESK9-M
Configuration register is 0xF
xx-C3560-24TS#show vs conf Role: Client
Vstack Director IP address: 0.0.0.0
*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack management Vlans: none
xx-C3560-24TS#conf t
Enter configuration commands, one per line. End with CNTL/Z.
xx-C3560-24TS(config)#no vs
xx-C3560-24TS(config)#no vstack
% Incomplete command.
xxg-C3560-24TS(config)#no vstack config
xxg-C3560-24TS(config)#end
xxg-C3560-24TS#show tcp br all
TCB Local Address Foreign Address (state)
04F65F88 10.x.128.14.22 10.x.33.91.14176 ESTAB
04F37D28 *.4786 *.* LISTEN