- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: show cdp
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
show cdp
hello i'm trying to see where my checkpoint is connected (which physical port)
the physical port is eth 2 on the checkpoint
is there a command similar to "show cdp" in checkpoint CLI ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sort of. From the third edition of my book:
Determining the Layer 2 switching path is a little more difficult and may involve
tracing cables. If you are using Cisco switches in your network, from the firewall you
can sniff and decode Cisco Discovery Protocol (CDP) frames from the switch attached to
the firewall with this command:
tcpdump -vn -s 1500 -i (interface) 'ether[20:2] == 0x2000'
Figure 1-6: tcpdump Decode of CDP Traffic
From your testing workstation, you can do something similar in Wireshark. Start a
capture on your network interface and use the following filter:
eth.dst == 01:00:0c:cc:cc:cc
Figure 1-7: Wireshark Decode of CDP Traffic
The CDP traffic should tell you enough about the locally attached switch to identify
it. Keep in mind that there may be many other switches in the path between your testing
workstation and the firewall depending upon the architecture of your network; you need
to discover them all. If they are Cisco switches and you can obtain command-line access
to them, running the Cisco IOS command show cdp neighbors is helpful for
identifying adjacent switches.
Depending on the vendor (and version) of the networking devices used in your
environment, they may be using the IEEE 802.1AB Link Layer Discovery Protocol
(LLDP) instead of CDP. The Cisco command show lldp neighbors is helpful for
identifying adjacent switches; use this command to view and decode LLDP traffic:
tcpdump -vn -s 1500 -i (interface) ether proto 0x88cc
CET (Europe) Timezone Course Scheduled for July 1-2
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This looks like another great candidate for @HeikoAnkenbrand or @Danny to turn into oneliner 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cisco Discover Protocol is not supported with Check Point.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is self-written CDP deamon for Check Point. Works like a charm.
https://github.com/oribit/cdpd-cp
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What about LLDP?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Only in R81 and above per sk117676, note the limitations about VSX.
