Cisco Cisco Identity Services Engine 1.3 Guía De Diseño
© 2015 思科系统公司
第
28 页
安全访问操作指南
鉴于系统查询会读取接入设备
MIB，接口查询将请求获取 MIB 或仅与接收陷阱的特定接口相关的 MIB 部分。
所触发的这些查询会从接入设备检索以下数据：
• 接口数据（ifIndex、ifDesc 等）
• 端口和 VLAN 数据
• 端口和 VLAN 数据
• 会话数据（假设接口类型是以太网）
• CDP 数据（思科设备）
• LLDP 数据
• CDP 数据（思科设备）
• LLDP 数据
在触发的接口查询期间收集的有些关键分析属性包括思科发现协议
(CDP) 和链路层发现协议 (LLDP) 表。CDP
和
LLDP 是允许交换机动态获取所连接终端的属性的链路协议。很多设备（包括 IP 视频设备、网络基础设施
和思科设备）都支持这些协议。大多数主要
IP 电话产品都支持 CDP 或 LLDP。因此，仅根据此信息即可对许
多终端进行分类。此外，还可以在各种客户端操作系统上以最低的价格或免费使用许多
CDP/LLDP 代理。
以下输出显示的是使用
SNMP 查询为所连接终端收集 CDP 数据时可收集信息类型的示例。
cat3750x#show cdp neighbor detail
-------------------------
Device ID: APc471.fe34.197a
Entry address(es):
IP address: 10.1.14.100
Platform: cisco AIR-LAP1142N-A-K9 , Capabilities: Trans-Bridge
Interface: GigabitEthernet1/0/2, Port ID (outgoing port): GigabitEthernet0
Holdtime : 123 sec
Version :
Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 12.4(25e)JA, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Fri 27-Jan-12 21:45 by prod_rel_team
advertisement version: 2
Duplex: full
Power drawn: 15.400 Watts
Power request id: 1358, Power management id: 2
Power request levels are:15400 14500 0 0 0
Management address(es):
-------------------------
Device ID: SEP003094C4528A
Entry address(es):
IP address: 10.1.13.100
Platform: Cisco IP Phone 7960, Capabilities: Host Phone Two-port Mac Relay
Interface: GigabitEthernet1/0/1, Port ID (outgoing port): Port 1
Holdtime : 162 sec
Second Port Status: Up
Version :
P00308010100
advertisement version: 2
Duplex: full
Power drawn: 6.300 Watts
Management address(es):
-------------------------
-------------------------
Device ID: APc471.fe34.197a
Entry address(es):
IP address: 10.1.14.100
Platform: cisco AIR-LAP1142N-A-K9 , Capabilities: Trans-Bridge
Interface: GigabitEthernet1/0/2, Port ID (outgoing port): GigabitEthernet0
Holdtime : 123 sec
Version :
Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 12.4(25e)JA, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Fri 27-Jan-12 21:45 by prod_rel_team
advertisement version: 2
Duplex: full
Power drawn: 15.400 Watts
Power request id: 1358, Power management id: 2
Power request levels are:15400 14500 0 0 0
Management address(es):
-------------------------
Device ID: SEP003094C4528A
Entry address(es):
IP address: 10.1.13.100
Platform: Cisco IP Phone 7960, Capabilities: Host Phone Two-port Mac Relay
Interface: GigabitEthernet1/0/1, Port ID (outgoing port): Port 1
Holdtime : 162 sec
Second Port Status: Up
Version :
P00308010100
advertisement version: 2
Duplex: full
Power drawn: 6.300 Watts
Management address(es):
-------------------------