TMA-CISCO-NXOS-3.4.2
Configure CDP
Açıklama
The Cisco Discovery Protocol (CDP) is a media-independent and protocol-independent protocol that runs on all Cisco-manufactured equipment including routers, bridges, access and communication servers, and switches. You can use CDP to discover and view information about all the Cisco devices that are directly attached to the device. CDP advertises potentially sensitive information, including the current version of NX-OS. This information can be used by a malicious actor to identify which vulnerabilities exist on the device, and from there which exploits might be most effective to ... CIS assessment: Manual. Reported as SKIP with review instructions.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
CIS assessment: Manual. To show all CDP definitions, for all interfaces: switch# sho cdp all To show CDP status for any single interface: switch# sho cdp interface Ethernet x/y Ethernetx/y is up CDP disabled globally CDP enabled on interface Refresh time is 60 seconds Hold time is 180 seconds
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
! Enabling CDP Globally cdp enable Enabling on one interface int Ethernet x/y cdp enable To disable CDP globally: no cdp enable To disable CDP on one interface only: int Ethernet x/y no cdp enable
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- cisco-nxosnetworkhardening
- Referans
- CIS Cisco NX-OS Benchmark v1.2.0 - 3.4.2 Configure CDP