Does LMS 3.2 still use need rcp enabled on our devices?

[mssnider]

LMS 3.2 running on Unix in a master-slave configuration.

Our security team is asking us why we need rcp (port 514) enabled on our routers.

It's becuase of the following standard commands;

ip rcmd rcp-enable
ip rcmd remote-host cwuser <ip address of LMS> cwuser enable

I believe these commands helped with the archiving of the device configurations? I know it's been a standard command of ours for years, but am not sure if it is still needed?

Any information you can provide would help.

Thanks,

[Joe Clarke · Accepted solution]

RCP is optional.  If you would rather use TFTP, SSH, SCP, etc. you can disable RCP.  By default, LMS/RME will use TFTP, TELNET, and SSH for config archive.

[mssnider]

Perfect...I'll remove it from some of our device configs and run some tests to be sure.

As always, thanks a lot!