Description
This article describes the option to disable Telnet access to FortiGate permanently.
Scope
FortiGate.
Solution
In v6.2.0, the option has been added that completely disables Telnet, removing the GUI options per interface and disabling the Telnet daemon.
When Telnet is disabled, the Telnet port cannot be configured and access cannot be enabled on interfaces.
To disable Telnet.
config system global
set admin-telnet disable
end
When disabled, the Telnet port is removed from the System -> Settings, and Telnet is no longer an administrative access option on the Network -> Interfaces.
To enable telnet execute the below command.
config system global
set admin-telnet enable
set admin-telnet-port <port>
end
Note:
When the admin-telnet command is disabled in a FortiGate 6000F, 7000E, or 7000F platform, the command 'execute load-balance slot manage <slot-id>' returns a 'Connection timeout' message. Re-enabling the admin-telnet feature will not re-grant telnet access and a 'Connection timeout' message will still be displayed. A unit reboot can fix the problem.
