Disable or Turn Off CDP on Cisco Switches
Cisco Discover Protocol or CDP is a Cisco-proprietary protocol that runs on all Cisco products. CDP allows devices to learn about neighboring devices (the ones attached directly to the switch) including information about their platform, IP address, the version of IOS or other OS, VLAN membership, etc. This can be helpful information when troubleshooting network issues, it can also provide an attacker with valuable information about the layout of your network. Other vulnerabilities include a denial-of-service attack in which CDP packets are generated, flooding the network. If you want to know how to turn off CDP, read on.
To disable CDP on the entire switch, use the “no cdp run” command from enable mode:
no cdp run
CDP can also be disabled on specific ports. To disable CDP on FastEthernet0/3, use these commands from enable mode:
no cdp enable
Be sure to save those settings. In my practice, I turn on CDP when I need it, and then I disable it when I am done. In general, I am opposed to things that constantly generate traffic on the network, regardless of how little, when I do not constantly benefit from that traffic.
Follow the reactions below and share your own thoughts.