Close ports

[cbeazley]

I have a 2505 router that I need to apply some security on. I can shut down some ports by using 'no service tcp-small-servers' (and udp) but after running a scan I can still see ports 2001, 4001, 6001 and 9001 open.

What are these ports used for and how do I shut them down without using an ACL ?

 

[fmonteiro]

You may try the following access-list:

access-list 199 deny tcp any any eq 2001
access-list 199 deny udp any any eq 2001
<you should repeat the process for each port you want to block>
Do not forget the implicit deny all at the end of the access-list:
access-list 199 permit ip any any

The access-list should be applied to to input interface:
interface <type> <number>
ip access-group 199 in

Any port over 1023 is user defined.