Configure CDP

SrednjaNivo 2Ručni pregledcisco-nxos

Opis

The Cisco Discovery Protocol (CDP) is a media-independent and protocol-independent protocol that runs on all Cisco-manufactured equipment including routers, bridges, access and communication servers, and switches. You can use CDP to discover and view information about all the Cisco devices that are directly attached to the device. CDP advertises potentially sensitive information, including the current version of NX-OS. This information can be used by a malicious actor to identify which vulnerabilities exist on the device, and from there which exploits might be most effective to ... CIS assessment: Manual. Reported as SKIP with review instructions.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

CIS assessment: Manual. To show all CDP definitions, for all interfaces: switch# sho cdp all To show CDP status for any single interface: switch# sho cdp interface Ethernet x/y Ethernetx/y is up CDP disabled globally CDP enabled on interface Refresh time is 60 seconds Hold time is 180 seconds

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Enabling CDP Globally cdp enable Enabling on one interface int Ethernet x/y cdp enable To disable CDP globally: no cdp enable To disable CDP on one interface only: int Ethernet x/y no cdp enable

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-nxosnetworkhardening
Referenca: CIS Cisco NX-OS Benchmark v1.2.0 - 3.4.2 Configure CDP