How to disable telnet on 5224/3224 switches?

I've noticed that no one has replied to this.  I am looking for a way to disable telnet as well.  Anyone have any idea's?

Telnet can be disabled on the 5224 by simply using the "no ip telnet server" command from global config mode.

On the 3300 series switches, you would need to create a management access list to deny telnet. The following commands would create a management access list called notelnet to disable telnet access, but allow all other services.

(config)# management access-list notelnet
(config-macl)# deny service telnet
(config-macl)# permit service http
(config-macl)# permit service https
(config-macl)# permit service snmp
(config-macl)# permit service ssh
(config-macl)# exit
(config)# management access-class notelnet

This isn't true.   On both the 5224 and 3248 "no ip telnet server" returns an error:

Console(config)#no ip telnet server
                      ^
% Invalid input detected at '^' marker.
Console(config)#

There is no ip telnet command anyhow.  There is a IOS style reference to the "line vty" which is the telnet server.   You can assign a different password for this line than your administrative account password (e.g. a randomly chosen password), but you cannot disable the telnet server completely.  In addition the firmware on the 5224 and 3248 do not support general administrative access lists, just restrictions on snmp access.

 

It sounds like you may be using an old firmware revision on the 5224. There have been many feature enhancements and CLI command changes between the 1.x, and 3.x firmware revisions. We are currently using the 3.1.0.13 firmware on our 5224 and the "no ip telnet server" command allows you to disable the telnet server.

Regarding the 3248, there is no feature to disable telnet. I have verified that even the latest firmware, 2.1.0.0, does not include this feature.