Cisco Configuration Professional

[waguilar71]

Is it better to use CCP than the CLI of each device? I was reading the user guide of the CCP application and was considering it but I would like feedback from the community if this is worth getting into. I'm a network admin and confortable using the CLI but it seems nice to use this tool and work on all your devices from one place, add new ones and even make changes with a click. Again I'm just looking for some feedback from the community who have or are continuing to use it.

Thanks

Wolfy

[fb_webuser]

you need to enable http service on the device first, which has many vulnerabilities, that is the reason most people prefer CLI over CCP. and also, once you enable hhtp on the device, you can get to it from browser, you do not even need CCP.....

---

Posted by WebUser Neeraj Jagga from Cisco Support Community App

[waguilar71]

ok so even not using CCP you still would end up with vulnerabilities once you open the http service on the router. Now would it be easier to configure the hardware via CCP and then shut down the http service once you have the device configured? Is it easier to configure the device on CCP or CLI.

wolfy

[Marvin Rhoads]

CCP is a very useful tool. If you're concerned about the exposure of the http server, simply put an acl on it or, as you suggested, turn it off when not in use.

I've found that setting up more complex configurations - e.g. an IOS zone based firewall plus DMVPN on the same router - is easily done with CCP. It has several useful tools such as the security audit and lockdown. It does have its limitations (doesn't support BGP settings for example) but it is still very useful.