Discovery Cisco IP Phone

[rgarciatso]

I am trying to discover a few of our Cisco IP phones on our network. I enter the direct IP and get "Alive, Not classified". Is there anything specific I need to do to discover IP phones. Any help would be appreciated.

Thanks
Ray Garcia

[emanning1138]

Attached are the results when I scan a single phone. I am not certain what you mean about the appropriate port being open in the Shazzam probe. Thanks!

[doug_schulze]

You'll see right in your payload..

scanner name="SNMP" port="161" portprobe="snmp" protocol="udp" result="refused" service="snmp"/

The target is refusing the SNMP connection so you are not getting back any of the other attributes that you would need to continue discovery. Remember for SNMP you need the read only community string and ensure the midservers IP has the access to make queries to the target you are looking to discover.

[tylerwinfield]

Cisco IP Phones do not support SNMP. Their information useful to discovery is through HTTP.
http://phoneaddr/DeviceInformation (DeviceInformationX for XML version)
http://phoneaddr/NetworkConfiguration (ConfigurationX for XML version)

I've been struggling to find a way for a probe to collect the output of these HTTP URLs as well.

[conmic]

Hey Tyler,

Did you have any luck to get the XML data with Discovery?

[paul_miller]

Hi Ray,

Have you ever managed to get this working? I am trying to discover our Cisco IP Phones and am hoping someone has cracked this.

Thanks!

Paul