Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco Configuration Professional

Is it better to use CCP than the CLI of each device? I was reading the user guide of the CCP application and was considering it but I would like feedback from the community if this is worth getting into. I'm a network admin and confortable using the CLI but it seems nice to use this tool and work on all your devices from one place, add new ones and even make changes with a click. Again I'm just looking for some feedback from the community who have or are continuing to use it.




Cisco Configuration Professional

you need to enable http service on the device first, which has many vulnerabilities, that is the reason most people prefer CLI over CCP. and also, once you enable hhtp on the device, you can get to it from browser, you do not even need CCP.....


Posted by WebUser Neeraj Jagga from Cisco Support Community App

New Member

Cisco Configuration Professional

ok so even not using CCP you still would end up with vulnerabilities once you open the http service on the router. Now would it be easier to configure the hardware via CCP and then shut down the http service once you have the device configured? Is it easier to configure the device on CCP or CLI.


Hall of Fame Super Silver

Cisco Configuration Professional

CCP is a very useful tool. If you're concerned about the exposure of the http server, simply put an acl on it or, as you suggested, turn it off when not in use.

I've found that setting up more complex configurations - e.g. an IOS zone based firewall plus DMVPN on the same router - is easily done with CCP. It has several useful tools such as the security audit and lockdown. It does have its limitations (doesn't support BGP settings for example) but it is still very useful.

CreatePlease to create content