Not a vty — this is ospfd's OSPF API, the socket that lets an external program inject LSAs.
FRRouting defines 2607 as OSPF_API_SYNC_PORT: the API server ospfd opens when started with -a/--apiserver, which ospfclient and traffic-engineering or segment-routing controllers use to originate and read opaque LSAs. It is off unless someone enabled it, and it sits one port above the ospf6d vty (2606) rather than belonging to the vty series. IANA registers 2607 as "Dell Connection", which is a separate and rarely seen assignment.
Do not expose
The API can originate LSAs into the OSPF domain with no authentication of its own — FRR's own guidance is to bind it to 127.0.0.1 with --apiserver_addr.
$ nc -vz -w 3 TARGET 2607Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.