Port 2601Zebra routing daemon VTY

TCP 2601 commonly exposes the Zebra/FRRouting routing daemon’s plaintext management CLI, rather than a discovery service.

inRemote Access Network Services

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 7/10
lookups: 0

also known as discp-client, FRR zebra

Technical Details

what runs on :2601

Although IANA assigns the name discp-client to TCP and UDP 2601, TCP 2601 is widely used by GNU Zebra and FRRouting for the zebra daemon’s VTY management interface. When enabled, it accepts a telnet-like, line-oriented CLI connection; it is not encrypted by default, and the listener’s availability and authentication depend on the daemon’s configuration. FRR’s related routing-daemon VTY ports commonly include 2602 for ripd, 2604 for ospfd, and 2605 for bgpd. UDP 2601 is not the transport used by this VTY interface.

Security Information

exposure of :2601

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 3.7 across 190 ports — this one sits 3.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

A reachable VTY can expose administrative commands that alter routing state, so treat it as a management interface rather than an ordinary application port. Do not expose it directly to the internet; restrict access to trusted management networks or localhost, configure authentication, and use a protected channel such as SSH or a VPN because the VTY traffic itself is not encrypted.

Record

iana registry entry

port: :2601
service: Zebra routing daemon VTY
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 7/10risk
category: Remote Access Network Services
usage: Engineers most often encounter TCP 2601 as the VTY (management command-line) listener for GNU Zebra or FRRouting’s zebra daemon, when that listener is enabled. IANA names the port discp-client, but that is not the use most commonly associated with TCP 2601; UDP 2601 is not commonly associated with the Zebra VTY.
lookups: 0rank 993
added: 2026-09-23
updated: 2026-09-23
references: IANA service name registry — port 2601

Something wrong?

This record is maintained by the engineers who use port 2601. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-23.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 190 in remote access →

the 8 most looked-up other ports in remote access — 190 ports carry that label.

port	service	proto	category	risk	views
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	D2GS Admin Console	TCP	Remote Access	caution	83.7k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:8008	IBM HTTP Server Admin	TCP	Web Services	caution	58.3k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:23	Telnet	TCP	Remote Access	caution	34.8k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :2601Zebra routing daemon VTY

Technical Details

Security Information

Related Ports

Port 2601Zebra routing daemon VTY