<div>
What is the concern? Limiting who can connect removes what concerns you might have. Those are UNIX-directional such that only the user who is authorized to connect can ...<br />
<br />
Not clear what the concern is what might a user who is already authorized to get into the switch via ssh, do with the FTP/telnet to a remote destination?<br />
Configure command logging via syslog. This way you will know what a user who has access to the switch did .....<br />
<br />
In a way having granted UserA permission to use your car, and UserA is now driving your car, but you would like to prevent UserA from stopping at points C, D and not drive on toll roads as those fees will be billed to you/r plate/Ezpass.
</div>


What is the concern? Limiting who can connect removes what concerns you might have. Those are UNIX-directional such that only the user who is authorized to connect can ...

Not clear what the concern is what might a user who is already authorized to get into the switch via ssh, do with the FTP/telnet to a remote destination?
Configure command logging via syslog. This way you will know what a user who has access to the switch did .....

In a way having granted UserA permission to use your car, and UserA is now driving your car, but you would like to prevent UserA from stopping at points C, D and not drive on toll roads as those fees will be billed to you/r plate/Ezpass.

<div>
Not sure you could limit based on the privilege/security level of the user.
</div>


Not sure you could limit based on the privilege/security level of the user.

<div>
<div class="content wysiwyg-content">
Got a HP1920, I can stop people getting to the switch via telnet and FTP, but when I have signed onto the switch via a SSH session, I can telnet and FTP off it. How do I stop this ?
</div>
</div>


Got a HP1920, I can stop people getting to the switch via telnet and FTP, but when I have signed onto the switch via a SSH session, I can telnet and FTP off it. How do I stop this ?

Disabling Telnet and FTP from a HP 1920 switch

A switch is a device that filters and forwards packets of data between LAN segments. Switches operate at the data link layer or the network layer of the Open Systems Interconnection (OSI) Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs. A hub is a connection point for devices in a network. Hubs are commonly used to connect segments of a LAN. A hub contains multiple ports; when a packet arrives at one port, it is copied to the other ports so that all segments of the LAN can see all packets.