In a Cisco IP voice environment, cdp must be enabled to communicate
aux-vlan, power and 
QoS issues.  I don't think that there is any workaround with this, is there?

Robert

-----Original Message-----
From: Ian Henderson [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 13, 2003 5:40 AM
To: [EMAIL PROTECTED]
Subject: Re: OT - CDP: Is it treated as a 'vulnerability' in your world?
[7:65285]


On Thu, 13 Mar 2003, John Neiberger wrote:

> I can't think of any valid reason to turn off CDP within your network.  On
> the edges--any connections to other networks, including the internet--I'd
> turn it off.  But inside?  Why turn it off?  If someone already has access
> to your router in able to see the CDP information you've got much bigger
> problems than CDP!

We actually used it as an auditing tool with a bit of perl hackery.

The program created an array of CDP neighbours for each router, and then
used that to create a network map database. This was used for generating
real-time network maps (if something goes away, it leaves the map) and
auditing to see if something was on the network that shouldn't be.

Rgds,



- I.

--
Ian Henderson CCNA, CCNP
Senior Network Engineer, Chime Communications
LEGAL NOTICE
Unless expressly stated otherwise, this message is confidential and may be
privileged. It is intended for the addressee(s) only. Access to this E-mail
by anyone else is unauthorized. If you are not an addressee, any disclosure
or copying of the contents of this E-mail or any action taken (or not taken)
in reliance on it is unauthorized and may be unlawful. If you are not an
addressee, please inform the sender immediately.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65297&t=65297
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to