Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I disable the management functions on interfaces 2 to 24 and enable the management functions on interface 1 (fa 0/1) on my Cisco Catalyst 3750, is there a Thread or Tutorial?

share|improve this question
up vote 1 down vote accepted

You can create a management vlan and put only interface 1 in that managment vlan. If you search for creating a management vlan you will find plenty of information. By default vlan1 is the management vlan and Cisco (and everyone) recommends that you change it to something other than default (any number other than 1). Also, it is recommended that you use SSH rather than telnet so transmissions, including usernames and passwords, are not transmitted in plain-text.

Here is one link that demonstrates creating a management vlan:

Otherwise, if you have a set of IP addresses that you want to give management access to, you could just use access lists that allow the desired management protocols (ssh/telnet, http: *see below) from only those addresses.

Conversely, you could apply access lists to all interfaces except int1 that block all telnet/ssh connections. You would also need to block access to the port that the web interface uses. *Since that is 80 by default you will need to change the web management interface to a different port ( ). If you do not change the management interface to a different port (leave it at 80) and block port 80, you will obviously have no http access at all.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .