Extreme Networks

Adam_Schappell · ‎10-25-2018

Hello, we have a requirement to have TFTP disabled on our switch... Is this possible? If so what commands can I run?

Truyen_Phan · ‎01-16-2019

Hi Adam,

TFTP is executed under the inetd process. TFTPd is disabled by default on higher releases (6.x+) which the 6720 does not support. IPfilter is not needed to block this.

Please do the following to disable tftpd. A reload will be needed to take effect.

The below will do the following:

take back up of inetd.conf
comment out tftpd in inetd.conf and put in new file via sed
overwrite inetd.conf with update file
copy inetd.conf to 2nd partition in case of partition swap in the future
reload switch

code:

sw0# unhide foscmd
Password: ******** (fibranne)
sw0# fos bash | no
sw0:root> netstat -anp | grep :69
udp    0   0 0.0.0.0:69       0.0.0.0:*              1295/inetd

sw0:root> cat /etc/inetd.conf | grep tftpd
tftp dgram  udp   wait  nobody /usr/sbin/in.tftpd  in.tftpd /tftpboot

bash-2.04# cp /etc/inetd.conf /etc/inetd.conf.bak
bash-2.04# cp /mnt/etc/inetd.conf /mnt/etc/inetd.conf.bak
bash-2.04# sed -e 's/^tftp/#tftp/' /etc/inetd.conf > /etc/inetd.conf.new
bash-2.04# cp /etc/inetd.conf.new /etc/inetd.conf
bash-2.04# grep tftp /etc/inetd.conf
#tftp dgram  udp   wait  nobody /usr/sbin/in.tftpd  in.tftpd /tftpboot

bash-2.04# cp /etc/inetd.conf /mnt/etc/inetd.conf
bash-2.04# exit
exit
sw0# reload system

### After switch boots up ###

code:

sw0# unhide foscmd
Password: ******** (fibranne)
sw0# fos bash | no
bash-2.04# netstat -anp | grep :69
bash-2.04#

View solution in original post

Adam_Schappell · ‎01-14-2019

Im not exactly sure how to see which on tftp is using. SSH is enabled and Tenet is disabled.

# sh vrf - shows nothing.

Ivan_Chan · ‎01-14-2019

was tftp using telnet or ssh

Adam_Schappell · ‎01-14-2019

I cannot access that link from the other network.

Adam_Schappell · ‎01-14-2019

Would like to be able to disable the TFTP daemon....

Ivan_Chan · ‎01-14-2019

if you click on the link for the live session, we can share the session.
You can login to show me … the link is above, session is still open for the next 30 min.

Extreme Networks

How to disable TFTP on VDX6720

How to disable TFTP on VDX6720