USB port blocking

[BrunoZ]

Hi,

The Cisco 2960-X has two USB-A ports available on the front. I have a request to have these USB ports deactivated. I did not find any word in the Software Configuration Guide about shutting down these ports from CLI. Is there a solution ? 

[balaji.bandi]

Personally i do not belive you have support of this in Switches(i see some feature in routers -hw-module usb disable) . If any one can able to access USB Port, then you have bigger problem of physical security.

use the Tape and close it - that only option i can see here.

[BrunoZ · Accepted solution]

Thank you. I have read carefully the documentation and your answer confirms my reading. Regarding the physical blocking of ports, we are using port locks: some exist with universal keys, others with individual keys. However, it is bad that we cannot apply a full "in depth" defense 

[Leo Laohoo]

This feature is only supported on some platforms running IOS-XE.  

[BrunoZ · Accepted solution]

Thank you for the information

[Faresnani · Accepted solution]

In this case, you need to apply physical security to your Data Center

[BrunoZ]

My switches are not located in a data center, but in an industrial site. Of course, you do not have any concern if you are in a secure area

[Georg Pauwen]

Hello,

on a side note, I guess you could put a password on the console port (line con 0 --> password password). 

[Faresnani]

so if you mean by USB console port yes you're right, but I thought that you mean USB port for data transfer 

[BrunoZ]

I mean USB port for data transfer

[BrunoZ]

I mean USB-A ports for data tranbsfer