Endpoint discovery

[TH09]

Hi Experts,

I wanted to discover all the different devices ( cameras, phones, printers, servers etc ..) currently connected to the access switches, any recommendations what are some of the best commands (IOSXE) or the best way to discover what is connected on the switches so I can create a list of all the different devices.

Thanks!

[Seb Rupik]

Hi there,

I'd recommend you look at nmap and its host discovery features:

https://nmap.org/book/man-host-discovery.html

Keep in mind that this discovery process occurs at Layer3. For some devices which cannot be identified, looking for details at Layer2 (ie the MAC address) is the only option left. From a MAC address you can dervive the OUI which can sometimes be a good inidcator as to what the device is. On the switch itself just run the command sh mac address . You will have to parse the MAC addresses from the output and feed them into an online tool like:  https://www.wireshark.org/tools/oui-lookup.html

Also enabling CDP and LLDP on the switch may give additional fidelity to your host discovery results.

cheers,

Seb.