Configure CDP

中レベル 2手動レビューcisco-nxos

説明

The Cisco Discovery Protocol (CDP) is a media-independent and protocol-independent protocol that runs on all Cisco-manufactured equipment including routers, bridges, access and communication servers, and switches. You can use CDP to discover and view information about all the Cisco devices that are directly attached to the device. CDP advertises potentially sensitive information, including the current version of NX-OS. This information can be used by a malicious actor to identify which vulnerabilities exist on the device, and from there which exploits might be most effective to ... CIS assessment: Manual. Reported as SKIP with review instructions.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

CIS assessment: Manual. To show all CDP definitions, for all interfaces: switch# sho cdp all To show CDP status for any single interface: switch# sho cdp interface Ethernet x/y Ethernetx/y is up CDP disabled globally CDP enabled on interface Refresh time is 60 seconds Hold time is 180 seconds

修正方法

修正方法: ガイダンスまたは IaC パッチ

! Enabling CDP Globally cdp enable Enabling on one interface int Ethernet x/y cdp enable To disable CDP globally: no cdp enable To disable CDP on one interface only: int Ethernet x/y no cdp enable

プロパティ

オペレーティングシステム: すべて
タグ: cisco-nxosnetworkhardening
参照: CIS Cisco NX-OS Benchmark v1.2.0 - 3.4.2 Configure CDP