Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Find Device - Firewall ARP Table

I'm noticing that any device that sits behind a routed-mode firewall Cirrus will not identify it in a search. The ARP table of the firewall has the IP addresses....not the router connected to the switch. Is there any way that Cirrus can poll those arp tables and be able to to coorleate the ARP table ont he firewall (to get the mac) and the mac-address-table on the switch to identify the port?

BB

Find more posts tagged with

Accepted answers

All comments

BryanBecker

Bump

Haley

As long as the firewall is added as a device within Cirrus, the ARP table information should be pulled from the firewall when determining device connectivity within the Find IP/Find MAC tool.

BryanBecker

These firewalls are in Cirrus and none of the devices who routes thru it are seen in the Find IP/MAC tool.

BB

Haley

It would be very helpful to find out more information about your network setup in order to help us determine why you are not seeing the information you are expecting using the Find IP/MAC tool. Can you please provide a diagram of your network which includes the firewall and switch connectivity? It will also be helpful to see which devices within the diagram are currently managed via SNMP within Cirrus and vendor and model information for the firewall and some of the connected switches.

BryanBecker

It's pretty simple actually. We have 2 Cisco 6506 switches with the Firewall Services Module in them. The FWSM is in routed mode so all servers on the these 2 switches route thru the FWSM as their default gateway. We have about 15 different vlans that are protected by this Firewall pair (in active/standby). The ARP table of the servers are seen in the firewall. For example :

Our Solarwinds Web server is seen on the firewall arp table :

entmgmt 10.162.222.12 0014.38bc.9bd9

Then the Solarwind Web server is seen on the switch mac-address-table :

sho mac-address-table address 0014.38bc.9bd9
Legend: * - primary entry
        age - seconds since last seen
        n/a - not available

vlan   mac address     type    learn     age              ports
------+----------------+--------+-----+----------+--------------------------
Supervisor:
* 222 0014.38bc.9bd9   dynamic Yes          0   Gi1/29