I don't think the above anwser is what you wanted. Although that will work. To SSH to your router insted of Telnet you just need to install the IOS that has the SSH stuff in it. Such as the firewall/IPSEC/3DES. Then just fallow the steps found here http://www.cisco.com/warp/public/707/ssh.shtml and you'll be on your way. I'd set the VTY 0 15 to prefur ssh in bound This will not allow any telnet to your router.
One problem (if it can be called that) is that when you enable ssh on the router the longest time you can be with out activity is 60 sec. which kind of sucks. who wants to be kick out after of not doing soemthing for 1 minute. But i guess its a security thing.
you can disable the HTTP stuff by doing the command "no ip http server"
as for the other stuff i'd just build ACL's to stop them. If you just want to block them but allow them every thing else (not sure why you would but hey)
i'd do something like this:
access-list 150 deny tcp any any eq 2001
access-list 150 deny tcp any any eq 6001
access-list 150 permit ip any any
Note that i'm not sure why the router has 2001 and 6001 enabled and there maybe a vary good reason. But i can think of why they would need thoes ports.
Hope this helps
If not let me know and we'll get it worked out.
Good luck.
