We are in a business that is subjected to NERC guidelines and processes for management of networks. As such, we have to document and approve all tcp/udp ports and services on devices. Those that are not needed should be disabled, those that are needed must be approved. While working with the 3560X switch, I did a TCP scan and found that ports, 21, 22, and 23 were open. 22 and 23 not a surprise but 21 was. I telnetted to port 21 on the device and got this result:
xxxxxxxxxxx-con1#telnet ohxxxx-sw1 21
Trying ohxxxxxx-sw1.bbbbbb.com (10.246.21.241, 21)... Open
220-FTP Server (user 'innnnnnn')
220
USER ftpuser
331-Password:
331
1mages
500-Syntax error -- unknown command
500
I don't know the exact commands to interact with the system, but needless to say, the 3560X let me log in to port 21, for an FTP session.
I have been unsuccessful in finding anything on cisco.com yet, but if any one knows how to disable this feature, I would appreciate hearing it !!
