Mismatched MAC Address

jameslindsay

I've done some searching with no luck to see if there is a way to generate an alert when a MAC address is plugged into a port and that address is not the same as the MAC address that was previously plugged into it. This alert would be specific to Meraki switches. I've looked at a lot of the canned alerts and don't really find anything that would do this and/or they apply to the User Device Tracking module which I do not have deployed.

mesverrum

Without UDT Orion doesn't track historical MAC's in the db as far as I can think of, so it doesn't really "know" when the value has changed.  You could probably cook up a sql database trigger so that any time the value changes it generates an event that you can alert/report on but short of getting into the db itself I'm not sure there's a way to monitor for those values to change.