Disabling Telnet And SSH on Cisco 2600 Switch

[EverydayDiesel]

Hello,

I would like to deny access to all config on all ports except for the usb on the front of the physical switch.  I have read many examples but they only show how to disable telnet and enable ssh.  I will never remotely change this switch.

How can I disable both?

[Karsten Iwen]

If it never should be possible, you can do many things do disable Telnet/SSH (and probably management through HTTP/HTTPS):

1. Configure "transport input none" on the lines
2. Delete all keys and trustpoints
3. Disable the http and http secure server
4. configure an access-class using a "deny any" ACL
5. remove all vlan interfaces (if available) and shutdown the vlan1-interface, remove the IP-address

To disable Telnet/SSH, the first point only would be enough, the rest is "defense in depth".