LMS 3.1 - Report/Notify on duplicate ip address

Answered Question
Apr 13th, 2009

Is there any way within CiscoWorks to notify when a duplicate ip address is found on the network?

Correct Answer by Joe Clarke about 7 years 10 months ago

Campus Manager User Tracking can detect duplicate IP addresses for end hosts. Again, nothing needs to be configured on the network side per se. You should need to make sure Campus is managing all of the routers in your network so it can be aware of their ARP tables. The report is found under Campus Manager > User Tracking > Reports > Report Generator > Duplicates.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
Joe Clarke Mon, 04/13/2009 - 13:50

Yes. DFM does this automatically if the devices are managed by DFM and in a Known state. You can also configure DFM to send such events an email notifications by configuring Notification Services under DFM > Notification Services.

chris.mcgarrah@... Tue, 04/14/2009 - 04:51

Do you know how this is done? Is it a parse of syslog? or is there a trap?

Does logging need to be set a particular level? Do any certain traps need to be enabled?


Thanks for your help.

Joe Clarke Tue, 04/14/2009 - 08:30

DFM determines this by polling the devices it manages, and checking all of the IP addresses for duplicates. Nothing needs to be done on the devices except for enabling SNMP.

chris.mcgarrah@... Tue, 04/14/2009 - 08:47

OK, so it is only checking for duplicate addresses among the devices it manages.


Do you know if the capability exists to detect duplicate address for hosts communicating through a router, for example?


Thanks again for your help.

Correct Answer
Joe Clarke Tue, 04/14/2009 - 08:51

Campus Manager User Tracking can detect duplicate IP addresses for end hosts. Again, nothing needs to be configured on the network side per se. You should need to make sure Campus is managing all of the routers in your network so it can be aware of their ARP tables. The report is found under Campus Manager > User Tracking > Reports > Report Generator > Duplicates.

chris.mcgarrah@... Tue, 04/14/2009 - 11:08

Thanks that is very helpful. Is there any way to get that same type of information closer to real time with some type of trap or syslog? We would like to send a notification as soon as a duplicate host ip address is detected. Thanks.

Joe Clarke Tue, 04/14/2009 - 11:13

Not from within LMS. I have not seen such a syslog on the device which can provide this, either.

Actions

This Discussion