Cisco Discovery Protocol

Cisco Discovery Protocol
Name	Cisco Discovery Protocol
Developer	Cisco Systems
Initial release	1994
Status	proprietary
Os	Cisco IOS, Cisco NX-OS
Layer	Data Link Layer
Port	N/A

Cisco Discovery Protocol is a proprietary network layer-2 protocol developed by Cisco Systems to advertise device identity, capabilities, and interconnections across Ethernet and other media. It provides automated neighbor discovery for devices such as Cisco Catalyst, Cisco Nexus, Cisco IOS XE, and Cisco IOS XR platforms and complements management systems like Cisco Prime and Cisco DNA Center. Cisco Discovery Protocol is widely used in enterprise environments alongside standards-based protocols and network management tools from vendors including Juniper Networks, Arista Networks, and HP Enterprise.

Overview

Originally introduced in the mid-1990s by Cisco Systems for its Catalyst series switches and routers, the protocol was intended to simplify topology discovery for administrators using products such as CiscoWorks and Cisco Prime Infrastructure. It operates at the Data Link Layer and exchanges periodic advertisements between directly connected neighbors to share information about platform, software image, IP addresses, and VLAN configuration. In heterogeneous environments, network operators often use it in concert with standards-based discovery protocols implemented by vendors such as Juniper Networks (with its own mechanisms), Extreme Networks, Arista Networks, and management suites from SolarWinds or Nagios.

Protocol Operation

Cisco Discovery Protocol frames are sent periodically as multicast frames on interfaces like Ethernet, FastEthernet, GigabitEthernet, and on serial links supported by platforms including Cisco ASR and Cisco ISR routers. The protocol exchanges device identifiers such as device ID, port ID, capabilities, and management addresses that are consumable by systems like Cisco Prime Infrastructure, NetFlow collectors, and topology mappers generated by Microsoft System Center or ServiceNow CMDB integrations. CDP operates independently of Border Gateway Protocol and Open Shortest Path First routing processes, although information it conveys can inform configuration decisions for services such as VLAN Trunking Protocol and Spanning Tree Protocol.

Message Types and Format

CDP messages consist of a header and a sequence of type-length-value (TLV) elements carrying attributes including Device ID, Address, Port ID, Capabilities, Software Version, and Platform. These TLVs enable management systems like Cisco Prime and packet analyzers such as Wireshark to parse and display neighbor information. The protocol uses Ethernet multicast addresses for IPv4 and is encapsulated at layer 2, which differentiates it from layer-3 protocols like Link Layer Discovery Protocol or Bonjour used by Apple Inc. systems. CDP frames can include optional TLVs used by features on platforms such as Cisco Nexus and Cisco Catalyst to advertise virtual chassis, virtualization details, or stacking information.

Security and Vulnerabilities

Because CDP broadcasts detailed device information on directly connected networks, it can expose sensitive data to attackers with access to a local switched segment or to compromised hosts running services like Kismet or packet capture tools such as Wireshark and tcpdump. Vulnerabilities in CDP implementations have been identified in the past on platforms like Cisco IOS and Cisco Nexus, sometimes allowing crafted TLVs to trigger crashes or memory corruption, prompting advisories from Cisco Security Advisory channels. Best practices from National Institute of Standards and Technology and vendor hardening guides recommend disabling CDP on untrusted interfaces, controlling access with solutions such as 802.1X and Access Control Lists, and monitoring with intrusion detection systems from vendors like Palo Alto Networks or Snort.

Configuration and Management

Administrators configure CDP on Cisco platforms using command-line interfaces on devices such as Cisco Catalyst and Cisco Nexus, enabling or disabling the protocol globally or per-interface. Configuration workflows intersect with management platforms including Cisco Prime Infrastructure, SolarWinds Network Performance Monitor, and orchestration tools like Ansible or Cisco DNA Center for bulk changes and auditing. Operational practices reference documentation and guidelines from Cisco Systems and compliance requirements from organizations such as CIS for secure baseline configurations, often automating checks with tools like Puppet or Chef.

Interoperability and Alternatives

In multivendor environments, administrators often prefer standards-based alternatives such as Link Layer Discovery Protocol (LLDP), which is defined by IEEE and implemented by vendors including Juniper Networks, Arista Networks, Extreme Networks, HP Enterprise, and Broadcom. LLDP interoperates across heterogeneous hardware and provides extensions like LLDP-MED for VoIP endpoint discovery used by vendors including Avaya and Polycom. Gateways and translators are available to map CDP TLVs to LLDP fields when integrating Cisco devices with non-Cisco ecosystems, and orchestration platforms like NetBox and OpenDaylight can consume both CDP and LLDP data for unified topology views.

Use Cases and Deployment Considerations

CDP is useful for automated topology mapping, neighbor verification, and rapid troubleshooting in Cisco-centric labs, campus networks, and branch deployments using hardware such as Cisco Catalyst 9000 series and Cisco Nexus 7000 series. However, in data center fabrics, service provider networks, or multivendor campuses, operators frequently prefer LLDP to avoid exposing vendor-specific details and to maintain interoperability with orchestration and monitoring systems from Juniper Networks, Arista Networks, HPE Aruba, and others. Deployment considerations include security posture on edge ports, integration with configuration management tools like Ansible and SaltStack, and alignment with compliance frameworks from NIST and CIS for production networks.

Category:Cisco protocols