10-26-2012 07:36 AM - edited 03-07-2019 09:42 AM
All,
Is there a way I can prevent someone from plugging into an unused port (via serial cable) and getting into my system?
Regards,
AR
Solved! Go to Solution.
10-26-2012 07:44 AM
If they have the right username, password and a console cable, than they can get to your system.
10-26-2012 07:59 AM
I think what Reza is trying to say is configure authentication on the console port and make it as secure as possible (2 factor authentication would be ideal). You could also set the exec timeout to 0, but that would essentially disable the console port. Not good in case you ever need to get into it.
10-26-2012 08:10 AM
Hi,
Physically secure your rack cage or wiring closet with a good lock. Add CCTV monitoring if you've got an extra budget.
Sent from Cisco Technical Support iPad App
10-26-2012 08:35 AM
Ashley
I looked into this as well. Because someone could connect to the console port and reboot the router and do the break sequence and they are in. I looked into port locks. The stick into an ethernet port and have a key to allow you to take out the plug. They are made for ethernet ports but, I imagine they would work for console port.
10-26-2012 07:44 AM
If they have the right username, password and a console cable, than they can get to your system.
10-26-2012 07:59 AM
I think what Reza is trying to say is configure authentication on the console port and make it as secure as possible (2 factor authentication would be ideal). You could also set the exec timeout to 0, but that would essentially disable the console port. Not good in case you ever need to get into it.
10-26-2012 08:10 AM
Hi,
Physically secure your rack cage or wiring closet with a good lock. Add CCTV monitoring if you've got an extra budget.
Sent from Cisco Technical Support iPad App
10-26-2012 08:35 AM
Ashley
I looked into this as well. Because someone could connect to the console port and reboot the router and do the break sequence and they are in. I looked into port locks. The stick into an ethernet port and have a key to allow you to take out the plug. They are made for ethernet ports but, I imagine they would work for console port.
10-30-2012 08:14 AM
Thank you everyone. I guess it is unfortunate that I can't really stop someone from getting in with a console cable. The switches are in a live system at an airport, so I guess it is up to them to keep it physically secure.
All answers correct.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: