Press "Enter" to skip to content

//> A L C A T R O N . N E T //> Posts

Netdisco – Ultimate Open Source Network Management Tool

Well since I am working in all types of networky things, I really recommend “netdisco” for working on any big network projects which require big implementations or changes to the current network, and of course your normal day to day network support of devices.

At the moment im working on this quite largish project to segment a /20 huge broadcast domain to 40 x /24 vlaned subnets. We need to know what sits on the big network and how we will transition every single device accross to new IP addresses and what kind of impact that will have.

This is where netdisco comes in, I put in all my devices into this tool (well all the Cisco switches etc which exist in my network via SNMP + CDP) and I let the tool monitor the devices. So basically it monitors every port, whats plugged in to the switch, and what IP is connected to each port, MAC etc.

From this we can gather a database of whats currently present in the network and how we will transition it accross to individual subnets. It is particularly useful if you wish to migrate printers & devices with static IP, because it will tell you what switch they sit on, their current IP, and MAC address. This way before starting your work to transition over you can plan your DHCP server configuration, and new IP reservations etc.

Another great thing about this tool as well is, it shows archived data for each port, so if something has been unplugged for 2 days, you can still find what has been connected to the port!

However it is also useful for your normal day to day support of your network switches/routers and knowing what exacly it is connected to each port. So for example you want to know in your network what is 10.44.23.231? No worries, this tool will find it for you, and what switch its connected to and port + its MAC address!

Netdisco you can operate through a web browser, and the current features it offers are: (as taken from the website www.netdisco.org)

  • MAC Address to switch port resolution.
  • IP Address to switch port resolution.
  • Find Switch Ports with multiple nodes attached
  • Find nodes using multiple IP addresses
  • Find nodes by vendor (using MAC address OUI)
  • View and Change VLAN assigned to port
  • SSID And Channel Information on wireless ports
  • Central location to disable/enable switch ports.
  • Navigation through a Web Interface. Maintenance through a Command Line Interface (CLI).
  • Database store for scalability and speed (Postgresql).
  • Easily extendible to new network device types and vendors.
  • Built-in user system to restrict access to sensitive data and features.
  • Administratively enable/disable switch ports from web interface with logging.
  • Automatic inventory and search of network hardware.
  • Duplex Mismatch Finder for uplink ports.
  • Find rogue Wireless Access Points (APs) from the wired-side of network.
  • Netdisco creates a clickable graph/map of your network topology.
  • Get statistics of the number of actual nodes connected to network and their address-space usage.
  • Find devices using IP Addresses without DNS entries

There is one thing with this tool, it is very tedios to setup and configure, you can spend virtually days trying to get things right…

However I came accross this website http://wokka.org/netdisco/ which has a Vmware image of the tool, which you can download. Its already pre-setup, and you just follow a few of the instructions and its all ready to go. The OS it runs under is FreeBSD, and netdisco was originally configured to run smoothly & secure on this OS.

If you wish to take netdisco to a production level in your environment you can setup a VMware ESX server and run the image. As a general rule, the thing to watch is the polling frequencies versus how long it takes to poll all of your devices, every 10mins polling should be sufficient for about 50-150 devices.

However, if in your network you have 2000+ devices it is recommended to increase the polling time to 4 hours and let it run on a Dual CPU, 4GB RAM, 15GB+ Hdd space, since it will be processing a fairly large amount of SQL data etc

For most users the Vmware image should be sufficient to use, or you can set it up using the installation procedure on the official netdisco website. (be warned its quite a long process!)

Leave a Comment

OID value to graph stats

If you wish to perform any type of graphing in MRTG/Cacti on a network device to look at the SNR, Attenuation, Downstream speed, errors, packets etc they all would be stored in a OID number.

For example I have a new router with SNMP enabled and I wish to graph the downstream SNR (Signal To Noise) margin over a set period of time into Cacti. How would I accomplish this without having any specific templates or knowledge about my router? Well there is a tool out there called “GetIf”, and what this tool does it allows you to probe your network device and it scans for all the OID values of the modem.

So for example in my below screenshot I have just scanned my router for values and I got a report, and then I looked through the values it found and then I tried locating the SNR value and what was matching to the modem.

In the program “GetIf” the mbrowser tab is used to scan for OID values. As in my case I have managed to find the downstream SNR OID value as .1.3.6.1.2.1.10.94.1.1.3.1.4.4, and this OID number we can then use on our cacti/mrtg template to graph this over time.

However this is not the only thing the program can do..

“GetIf is  much more than an SNMP browser however, with the ability to graph OID values over time, display the device’s interface information, routing and ARP tables, as well as do basic port scans, Traceroutes, NSLookups, and IP Scans”

For more info please visit the website: http://www.wtcs.org/snmp4tpc/getif.htm

[ad#googleadd1]

Leave a Comment

Cisco 877 Config [Internode] [PPPoA]

Here is a sample 877 config for ISP Internode in Australia which I use. It may work with other providers as well, the only items you need to modify is the hostname, password sections, timezone, and possible your IP addressing/subnets etc

version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec show-timezone
service timestamps log uptime
service password-encryption
service internal
!
hostname cisco877
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 16000
logging console critical
enable secret yourpasswordhere
!
!setup timezone below default set to South Australia
no aaa new-model
clock timezone ACST 9 30
clock summer-time ACST recurring last Sun Oct 2:00 1 Sun Apr 3:00

!
!
dot11 syslog
no ip source-route
!
!
ip cef
no ip bootp server
ip name-server 192.231.203.132
ip name-server 192.231.203.3
!
!
!
!
!sets up a username of root with a password
username root privilege 15 password yourrouterpasswordhere
!
!
!
archive
log config
hidekeys
!
!
interface ATM0
description — Internode ADSL —
no ip address
no atm ilmi-keepalive
pvc 8/35
tx-ring-limit 3
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
dsl bitswap both
!
interface FastEthernet0
no shut
!
interface FastEthernet1
no shut
!
interface FastEthernet2
no shut
!
interface FastEthernet3
no shut
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1420
hold-queue 100 out
!
interface Dialer1
description connection to ISP PPPoE 8/35 MUX
ip address negotiated
ip access-group 101 in
no ip unreachables
ip mtu 1492
ip nat outside
ip virtual-reassembly max-reassemblies 64
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer-group 1
no cdp enable
ppp chap hostname [email protected]
ppp chap password (yourpassword)

!
interface Dialer0
no ip address
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
no ip http secure-server
!
ip dns server
ip nat inside source list 102 interface Dialer1 overload
!
access-list 1 remark Permit our private network through the list
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 remark Just deny everything else
access-list 1 deny   any
access-list 101 deny   icmp any any echo
access-list 101 permit ip any any
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
dialer-list 1 protocol ip permit
!allow snmp below if required
snmp-server community public RO 1
!
!
!
!
control-plane
!
!
line con 0
password yourconsolepasshere
login
no modem enable
transport preferred none
stopbits 1
line aux 0
line vty 0 4
session-timeout 240
access-class 102 in
password yourtelnetpasswordhere
login
transport preferred none
!
scheduler max-task-time 5000
sntp server 129.127.40.3
end

1 Comment