Disabling TFTP

[arell1234]

I am trying to disable TFTP on my router but have had no luck. I have no tftp-server commands in the running config but I still seem to be able to connect to the router with a TFTP client. Is there anyway to stop the router from accepting tftp connections?

[Vasilii Mikhailovskii]

Ingress ACL or CoPP?

[paul driver]

Hello

Following on from Vasilli comments, below are two examples for denying tftp to your router via CoPP and ACL

Router ip = 1.1.1.1/24

CoPP

access-list 100 permit tcp any host 1.1.1.1 eq telnet

class-map match-all notftp_cm
match access-group 100

policy-map notftp_pm
class notftp_cm
drop
class class-default

control-plane host
service-policy input notftp_pm


ACL

access-list 101 deny   tcp any host 1.1.1.1 eq telnet
access-list 101 permit ip any any

int x/x
ip access-group 101 in

res

Paul