cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2192
Views
5
Helpful
4
Replies

Q: Show ports om ISR4000

jogolev
Level 1
Level 1

What is the equivalent command of ‘show control-plane host open-ports’ on ISR4000?

Closest I found is "show ip sockets", which gives me raw ports at the moment.

 

show inv

NAME: "Chassis", DESCR: "Cisco ISR4331 Chassis"

 

show version

Cisco IOS XE Software, Version 03.16.04b.S - Extended Support Release

Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S4b, RELEASE SOFTWARE (fc1)

4 Replies 4

Reza Sharifi
Hall of Fame
Hall of Fame

What output/information are you looking for? 

I am looking for the list of services running with open ports.

This is for PCI/Qualys vulnerability assessment.

For example on ISR2 2900:

#show control-plane host open-ports
Active internet connections (servers and established)

Prot Local Address Foreign Address Service State
 tcp *:22 *:0 SSH-Server LISTEN
 tcp *:23 *:0 Telnet LISTEN
 tcp *:2443 *:0 Skinny Socket Server LISTEN
 tcp *:179 IP-addr:63884 BGP ESTABLIS
 tcp IP-addr:5060 IP-addr:43611 SIP ESTABLIS
 tcp *:22 IP-addr:33432 SSH-Server ESTABLIS
 tcp *:179 *:0 BGP LISTEN
 tcp *:1720 *:0 H.225 LISTEN
 tcp *:35586 IP-addr:5060 CCSIP_TCP_SOCKET ESTABLIS
 tcp *:5061 *:0 CCSIP_TLS_SOCKET LISTEN
 tcp *:2000 *:0 Cisco Call manager serve LISTEN
 tcp *:5060 *:0 SIP LISTEN
 tcp *:24490 IP-addr:2000 SCCP Application ESTABLIS
 udp *:58623 *:0 IP SNMP LISTEN
 udp *:67 *:0 DHCPD Receive LISTEN
 udp *:56470 IP-addr:514 Syslog ESTABLIS
 udp *:123 *:0 NTP LISTEN
 udp *:4500 *:0 ISAKMP LISTEN
 udp *:1167 *:0 IP SLAs Control Process LISTEN
 udp *:161 *:0 IP SNMP LISTEN
 udp *:162 *:0 IP SNMP LISTEN
 udp *:1967 *:0 RTR control LISTEN
 udp *:53885 IP-addr:162 IOS host service ESTABLIS
 udp *:500 *:0 ISAKMP LISTEN

I am looking for the equivalent output for ISR 4000.

sarabycell
Level 1
Level 1

show ip ports all 

at least the

tcp  *:22... LISTEN ...SSHd

is missing at 16.8(1)

 

the "show ip ports all" command displays the listining BGP-Ports, but only established SSH-Ports...

Review Cisco Networking for a $25 gift card