Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Configure and test SSH before blocking Telnet: confirm you can authenticate to the intended device through its management interface, then restrict remote CLI access to SSH and verify that a new Telnet connection is refused. Commands and defaults vary by vendor, device family, and software release, so treat the Cisco commands below as examples—not universal syntax.

Before changing remote access

Telnet is an older remote-terminal protocol. Cisco recommends SSH for device management because Telnet does not protect management traffic from cleartext exposure, which can put credentials and other sensitive information at risk. The protocol specification is RFC 854; Cisco’s guidance explains its security recommendations in its SSH configuration guide and IOS hardening guidance.

First identify the vendor, exact model, operating-system release, management address, applicable VTY or management-line range, and current authentication setup. Confirm that the device and software support SSH and the required cryptographic features; Cisco notes that support can depend on platform, release, and licensing. Consult the command reference for that precise device. IOS/IOS XE syntax should not be pasted into NX-OS, Catalyst 1200, Junos, or another CLI without checking its documentation.

Use your normal change process to preserve the current configuration and keep an approved recovery route available—such as a local console or out-of-band access where appropriate. A remote-access change can lock out administrators if the SSH setup or access policy is wrong.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

Configure SSH and authentication

An SSH server needs more than an SSH client command: the device must support SSH, have a host identity and keys as required by the platform, use an authentication method, and accept SSH on the relevant management interface or remote-access lines.

The following abbreviated example is for Cisco IOS/IOS XE. Replace placeholders, confirm syntax for the device release, and adapt authentication to the existing AAA or local-account design:

configure terminal
hostname <device-name>
username <admin> privilege 15 secret <strong-secret>
ip domain name <domain>
ip ssh version 2
crypto key generate rsa general-keys modulus <platform-approved-size>
line vty 0 <last-vty>
login local
transport input ssh
end

The key-size placeholder is deliberate: select a size supported by the platform and allowed by your security policy. Cisco hardening guidance uses 2048 bits or stronger in its examples; it notes 4096-bit keys may be used when supported and when performance impact is acceptable. Avoid treating older, weaker examples as a current baseline. The sample uses local credentials; if the device uses centralized AAA, configure and verify the applicable authentication method instead.

Cisco’s guide says: “When configuring SSH, ensure that SSHv2 is enabled, as it provides stronger encryption and significantly better security than SSHv1.” See Cisco’s SSH configuration guidance for platform-specific setup and authentication details.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Some devices have separate service controls. For example, the Cisco Catalyst 1200 CLI guide documents ip ssh server to enable its SSH server and no ip telnet server to disable its Telnet server. Those commands are specific to that family; consult the Catalyst 1200 CLI guide or the matching documentation for another device.

Test SSH before blocking Telnet

  1. From an authorized management host or jump host, connect to the device’s management address using an SSH client and the intended administrator account.

  2. Confirm that the session reaches the expected device, authentication succeeds, and the account has the intended privilege level. Where administrators connect from multiple approved networks or jump hosts, test the relevant paths.

  3. Check the device’s SSH status and active connections using its documented commands. Cisco IOS/IOS XE provides show ip ssh for SSH status and show ssh for active SSH connections; commands and output differ across platforms.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #3
    Sale
    Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter
    • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
    • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
    • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
    • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
    • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
  4. If a source access list is part of the plan, confirm it allows the intended management sources before applying or tightening it on the relevant VTY lines. A policy that blocks the administrator’s own source can remove remote access even when SSH itself is working.

Block Telnet and verify the result

On Cisco IOS/IOS XE, the example’s transport input ssh setting on the VTY lines allows SSH and rejects other remote protocols on those lines. Apply the restriction to every applicable VTY line; leaving a line with a different transport policy can leave an unintended access path. Cisco documents this behavior and recommends SSH-only access in its SSH configuration guidance.

On Catalyst 1200, disabling the Telnet server uses the distinct no ip telnet server command. Other platforms may use different commands or controls; check the model-specific guide rather than assuming a VTY transport command also disables a separate Telnet service.

  1. Apply the platform-appropriate Telnet restriction across all relevant management lines or service controls.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #4
    Sale
    UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray
    • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
    • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
    • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
    • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
    • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
  2. Start a fresh SSH session from an authorized test host and confirm it still reaches the expected device and account.

  3. Attempt a fresh Telnet connection from a relevant test location and confirm that it is refused or the Telnet service is unavailable.

  4. Save the configuration using the device’s normal process, then reconnect or perform the planned maintenance validation to confirm access persists. Save commands and change procedures are platform-specific.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot failed access or verification

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.