WHATPORT(2601) whatport.net WHATPORT(2601)
2601

zebra VTY (FRR / Quagga)

The zebra routing manager's telnet config shell on a Linux router running FRR or Quagga.

TCP IANA: discp-client

Description

FRRouting (and Quagga and GNU Zebra before it) gives each daemon its own VTY — an IOS-like interactive shell reachable over telnet — and zebra's default is 2601, which FRR's setup guide tells you to add to /etc/services. zebra is the daemon that owns the kernel routing table and RIB for the other protocol daemons, so its VTY can inspect and change routing. Most operators use vtysh over the local Unix sockets instead, and modern FRR packages bind the VTY to localhost or disable the TCP port. Note that IANA registers 2601 as discp-client, unrelated to zebra.

Exposed to the internet?

Do not expose

An unencrypted telnet shell into the daemon that controls the routing table, protected at best by a VTY password. Bind it to localhost or disable the TCP VTY and use vtysh.

Check it yourself

$ nc -v 127.0.0.1 2601

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.