TMA-CISCO-NXOS-3.4.2
Configure CDP
설명
The Cisco Discovery Protocol (CDP) is a media-independent and protocol-independent protocol that runs on all Cisco-manufactured equipment including routers, bridges, access and communication servers, and switches. You can use CDP to discover and view information about all the Cisco devices that are directly attached to the device. CDP advertises potentially sensitive information, including the current version of NX-OS. This information can be used by a malicious actor to identify which vulnerabilities exist on the device, and from there which exploits might be most effective to ... CIS assessment: Manual. Reported as SKIP with review instructions.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
CIS assessment: Manual. To show all CDP definitions, for all interfaces: switch# sho cdp all To show CDP status for any single interface: switch# sho cdp interface Ethernet x/y Ethernetx/y is up CDP disabled globally CDP enabled on interface Refresh time is 60 seconds Hold time is 180 seconds
조치 방법
조치 방식: 가이드 또는 인프라 패치
! Enabling CDP Globally cdp enable Enabling on one interface int Ethernet x/y cdp enable To disable CDP globally: no cdp enable To disable CDP on one interface only: int Ethernet x/y no cdp enable
속성
- 운영 체제
- 모두
- 태그
- cisco-nxosnetworkhardening
- 참고 자료
- CIS Cisco NX-OS Benchmark v1.2.0 - 3.4.2 Configure CDP