Ports open on Router

[yonaliu]

Hi, I got a Router 2911 with IOS version 15.2(1)T scanned that ports below is open .

2002  tcp  globe
4002  tcp  mlchat-proxy 
6002  tcp  X11:2 
9002  tcp  dynamid  
What are thye use for? Is it necessary to be open? if no, how can I disable? 

[Seb Rupik · Accepted solution]

Hi there,

These relate to the service-module installed in the router. If you don't use the module, disable transport to it:

!
line 2
  transport input none
!

If you do us it then create a ACL and apply it to limit access only fro your admin subnet (eg: 192.168.0..0/24):

!
access-list 10 permit 192.168.0.0 0.0.0.255
!
line 2
  access-class 10 in
!

cheers,

Seb.