How to avoid RST response from a closed port

jorge_sanzdeacedo · ‎09-04-2003

I would like to configure a router and a switch disabling any response from a close port. For example, a port scan could not show closed ports, so none will be able to discover the device.

I need to disable to send a RST in response to a SYN to a closed port. Is it possible?

t-evens · ‎09-08-2003

Jorge,

Depends if I'm understanding you correctly... :) You can configure an access list to deny packets with the RST flag set.

access-list 100 deny tcp any any rst

access-list 100 permit ip any any

--Tim

jorge_sanzdeacedo · ‎09-10-2003

An ACL could work in a router but how about a switch.

My question is focus on a feature to securize a Cisco device, disabling a port scan.