[c-nsp] Possible security issue with CDP

[Hank Nussbacher]

On Sat, 28 Jun 2008, Gert Doering wrote:

> Hi,
>
> On Fri, Jun 27, 2008 at 10:13:36AM -0700, Brandon Price wrote:
>> I am sure this is a stupid question but I have to ask..
>>
>> Is there any compelling reason to run CDP in a service provider
>> environment?
>
> We like it.  In a mostly-Cisco-Shop it's very convenient to see what is
> connected where - even if perfect documentation would exist, it's useful
> to check whether the documentation is correct :-) - but sometimes things
> are set up in a hurry and documentation is less than perfect.
>
> Even better, you can use it on a server to see which switchport it's
> connected to.

I use it for easy documenting a network and if you come into a new shop 
and need to do a pen-test, it is a good place to start in mapping out a 
new virgin network.

-Hank