• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2560
  • Last Modified:

Cisco 800 Router what is Port 10000?

I have a Cisco 800 router on the network that acts as gateway/isp router.

When I run a nmap scan to the cisco IP address

NMAP returns

Interesting ports on 192.168.10.1:
10000/tcp open  snet-sensor-mgmt?

Can someone tell me why this port is open and what is the function of this service?
0
ensermo
Asked:
ensermo
  • 2
  • 2
1 Solution
 
JFrederick29Commented:
The 800 is a VPN router, correct?  TCP 10000 is used for TCP encapsulation of IPSEC traffic.  If not running VPN, check the NAT statements on the router for a TCP 10000 port forward.
0
 
ensermoAuthor Commented:
It is running indeed VPN. (Site-to-site) to another Cisco Router.

Thus port 10000 is a VPN port. The snet-sensor-mgmt is just a wrong "service" by NMAP?
0
 
JFrederick29Commented:
Are you scanning the LAN IP on the Cisco or the WAN/external IP?  NMAP probably just associates TCP 10000 with snet-sensor-mgmt which is why it reports that service.
0
 
ensermoAuthor Commented:
The LAN IP(internal). Ok. So it is VPN related. Just checking that no strange services where running.
0

Featured Post

Get Certified for a Job in Cybersecurity

Want an exciting career in an emerging field? Earn your MS in Cybersecurity and get certified in ethical hacking or computer forensic investigation. WGU’s MSCSIA degree program was designed to meet the most recent U.S. Department of Homeland Security (DHS) and NSA guidelines.  

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now