Cisco Ethernet switch Manual do Utilizador descarregar pdf (Página 67)

676767

© 2002, Cisco Systems, Inc. All rights reserved.

l2-security-bh.ppt

Cisco Discovery Protocol (CDP)

¥ Runs at Layer 2 and allows Cisco devices

to chat with one another

¥ Can be used to learn sensible information

about the CDP sender (IP address,

software version, router model É)

¥ CDP is in the clear and unauthenticated

¥ Consider disabling CDP, or being very

selective in its use in security sensitive

environments (backbone vs. user port

may be a good distinction)

¥ Note: there was a reason Cisco developed

CDP, some Cisco apps make use of it!

CatOS> (enable) set cdp disable

<mod>/<port> | all

IOS(config)#no cdp run

IOS(config-if)#no cdp enable

0x2000

SNAP

Proto

0100.0ccc.cccc

DST MAC

1 2 ... 62 63 64 65 66 67 68 69 70 71 72 ... 83 84

Comentários a estes Manuais

Sem comentários