I see these ports open when running nmap against IOS switches: 22, 902, 903, 3389, 5900, 5906. These were just form 3750's running 12.2(35)SE2 and 6900's running 12.2(33)SXH2a. I would have expected ports other than 22 to respond, and some boilerpl...