cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1331
Views
10
Helpful
1
Replies

Any means to disable USB-type A or make USB-A storage only (not able to perform console function)

Kevin_CBP
Level 1
Level 1

 have security concerns of USB ports act as console access. Someone can leave a Bluetooth console dongles on the USB ports by accidents or intentionally leaving the switches/routes exposed to attack without gaining the physical access to the devices.

 

Reading the document, it is unclear if media-type rj45 commands can make the console functions work only on console ports so USB ports can only work for storage only.

 

I am asking specific for C1000 switches but I think this question should apply to a lot of devices.

 

If not such function exists, this can be a security issue in the future.

 

 

1 Accepted Solution

Accepted Solutions

Francesco Molino
VIP Alumni
VIP Alumni

Hi 

 

On switches you can’t (never validated with C1000 but 9k Catalyst, 3850,… you can’t).

On routers, there’s a command: hw-module usb disable.

 

 


Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question

View solution in original post

1 Reply 1

Francesco Molino
VIP Alumni
VIP Alumni

Hi 

 

On switches you can’t (never validated with C1000 but 9k Catalyst, 3850,… you can’t).

On routers, there’s a command: hw-module usb disable.

 

 


Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question