{
  "port": 2601,
  "protocol": "tcp",
  "service": "zebra VTY (FRR / Quagga)",
  "oneLiner": "The zebra routing manager's telnet config shell on a Linux router running FRR or Quagga.",
  "whatItIs": "FRRouting (and Quagga and GNU Zebra before it) gives each daemon its own VTY — an IOS-like interactive shell reachable over telnet — and zebra's default is 2601, which FRR's setup guide tells you to add to /etc/services. zebra is the daemon that owns the kernel routing table and RIB for the other protocol daemons, so its VTY can inspect and change routing. Most operators use `vtysh` over the local Unix sockets instead, and modern FRR packages bind the VTY to localhost or disable the TCP port. Note that IANA registers 2601 as discp-client, unrelated to zebra.",
  "exposure": {
    "verdict": "never",
    "note": "An unencrypted telnet shell into the daemon that controls the routing table, protected at best by a VTY password. Bind it to localhost or disable the TCP VTY and use vtysh."
  },
  "checkCommand": "nc -v 127.0.0.1 2601",
  "links": [
    {
      "title": "FRRouting — Basic Setup (zebra 2601/tcp, ripd 2602/tcp, vtysh)",
      "url": "https://docs.frrouting.org/en/latest/setup.html",
      "kind": "official-docs"
    },
    {
      "title": "FRRouting/frr",
      "url": "https://github.com/FRRouting/frr",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2601 (discp-client)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2601",
      "kind": "iana"
    }
  ],
  "ianaName": "discp-client"
}