Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are several Cisco devices on my network which I can find with ping or nmap but I have no idea what the type (e.g. switches, routers) or specific model is. Is there some way to find this out without physical access or having a login to any of these?

share|improve this question
If CDP is enabled, you might get more information by running a CDP client. – Zoredache Apr 3 '13 at 22:32
that is a good answer, although Cisco's exam guide suggests no cdp enable – T. Webster Apr 4 '13 at 2:12
@T.Webster CDP is usually only disabled facing untrusted ports, like your ISP or a customer port. In a more enterprise context, CDP is used by Cisco APs and Cisco phones, so it's usually enabled on access ports regardless of what the exam guide might suggest. – scottm32768 Apr 10 '13 at 16:43
up vote 3 down vote accepted

You can find some information by using nmap's -O switch. You can also get the information using SNMP but you would have to look at Cisco's MIB's to figure out which one to use.

share|improve this answer
e.g. nmap -A works also – T. Webster Apr 3 '13 at 23:39

ICMP cannot be used to extract information like that.

Without a login you maybe have one option:

Hope that SNMP is enabled and using a known community string like "public". SNMP will at least reveal an OID you can tie back to a model number using SNMPwalk. Plenty of tutorials out there on how to do this.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.