Use no cdp run in global configuration mode to disable Cisco Discovery Protocol across the entire Cisco IOS device. This can reduce exposure of device information, such as software-version details that could support targeted attacks. section 1.1.3
Disable and verify global CDP
R1(config)# no cdp run R1(config)# do show cdp % CDP is not enabled The do show cdp command verifies that CDP is no longer running.
Distinguish global and interface-level behavior:
- Use cdp run to reenable CDP globally. section 1.1.3
- Use no cdp enable in interface configuration mode to stop one interface from sending or processing CDP advertisements. section 1.1.3
- Global disablement overrides interface settings; CDP remains inactive on every interface until globally reenabled. section 1.1.3
