Configure CDP

MediumLevel 2Manual reviewcisco-nxos

Description

The Cisco Discovery Protocol (CDP) is a media-independent and protocol-independent protocol that runs on all Cisco-manufactured equipment including routers, bridges, access and communication servers, and switches. You can use CDP to discover and view information about all the Cisco devices that are directly attached to the device. CDP advertises potentially sensitive information, including the current version of NX-OS. This information can be used by a malicious actor to identify which vulnerabilities exist on the device, and from there which exploits might be most effective to ... CIS assessment: Manual. Reported as SKIP with review instructions.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

CIS assessment: Manual. To show all CDP definitions, for all interfaces: switch# sho cdp all To show CDP status for any single interface: switch# sho cdp interface Ethernet x/y Ethernetx/y is up CDP disabled globally CDP enabled on interface Refresh time is 60 seconds Hold time is 180 seconds

How it is fixed

Fix method: Guidance or infrastructure patch

! Enabling CDP Globally cdp enable Enabling on one interface int Ethernet x/y cdp enable To disable CDP globally: no cdp enable To disable CDP on one interface only: int Ethernet x/y no cdp enable

Properties

Operating systems: Any
Tags: cisco-nxosnetworkhardening
Reference: CIS Cisco NX-OS Benchmark v1.2.0 - 3.4.2 Configure CDP