LMS 3.1 - Report/Notify on duplicate ip address

Answered Question
Apr 13th, 2009
User Badges:

Is there any way within CiscoWorks to notify when a duplicate ip address is found on the network?

Correct Answer by Joe Clarke about 8 years 2 months ago

Campus Manager User Tracking can detect duplicate IP addresses for end hosts. Again, nothing needs to be configured on the network side per se. You should need to make sure Campus is managing all of the routers in your network so it can be aware of their ARP tables. The report is found under Campus Manager > User Tracking > Reports > Report Generator > Duplicates.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
Joe Clarke Mon, 04/13/2009 - 13:50
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Yes. DFM does this automatically if the devices are managed by DFM and in a Known state. You can also configure DFM to send such events an email notifications by configuring Notification Services under DFM > Notification Services.

chris.mcgarrah@... Tue, 04/14/2009 - 04:51
User Badges:

Do you know how this is done? Is it a parse of syslog? or is there a trap?

Does logging need to be set a particular level? Do any certain traps need to be enabled?


Thanks for your help.

Joe Clarke Tue, 04/14/2009 - 08:30
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

DFM determines this by polling the devices it manages, and checking all of the IP addresses for duplicates. Nothing needs to be done on the devices except for enabling SNMP.

chris.mcgarrah@... Tue, 04/14/2009 - 08:47
User Badges:

OK, so it is only checking for duplicate addresses among the devices it manages.


Do you know if the capability exists to detect duplicate address for hosts communicating through a router, for example?


Thanks again for your help.

Correct Answer
Joe Clarke Tue, 04/14/2009 - 08:51
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Campus Manager User Tracking can detect duplicate IP addresses for end hosts. Again, nothing needs to be configured on the network side per se. You should need to make sure Campus is managing all of the routers in your network so it can be aware of their ARP tables. The report is found under Campus Manager > User Tracking > Reports > Report Generator > Duplicates.

chris.mcgarrah@... Tue, 04/14/2009 - 11:08
User Badges:

Thanks that is very helpful. Is there any way to get that same type of information closer to real time with some type of trap or syslog? We would like to send a notification as soon as a duplicate host ip address is detected. Thanks.

Joe Clarke Tue, 04/14/2009 - 11:13
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Not from within LMS. I have not seen such a syslog on the device which can provide this, either.

Actions

This Discussion