| chris@nospam.com 2004-09-23, 9:31 am |
|
Why would you want CDP? In reality, having CDP advertising on the
host ports is a security issue as it advertises switch information
that should be protected.
True story: I took a Redhat RHCE training class and they were having
problems with the clients not getting dhcp reservations. I fired up
ethereal on my workstation and saw they had not disabled CDP on the
host ports. By looknig at those packets, I saw they had not set
"spanning-tree portfast" which was causing the dhcp problems. Then I
politely told them the version of IOS the switch was very outdated and
vulnerable to a few different attacks. They were a bit chagrined
since it was a linux security class. :}
-Chris
On Mon, 19 Jul 2004 11:00:09 -0500, "P. Thompson" <no-spam@new.rr.com>
wrote:
>
>
>On Thu, 15 Jul 2004, Tennis Smith wrote:
>
>
>Google is your friend. http://www.monkeymental.com/nuke/index.php
|