Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Address Status

Does IPAM have the ability to determine if a IP address that it discovers during a scan has been set statically or via DHCP and set the status appropriately? If not, is this a planned feature for the future? If it can make that determination, is there a way to send an alert if a static ip address has been discovered?

Thanks,

Find more posts tagged with

Accepted answers

martin.susil

Hello,

this should be possible by adding advanced alert for objects 'IPAM Nodes' with conditions

'Status' is equal to 'Used'

Lease Expiration is empty OR Lease Expiration is '' (empty string)

Type equals to 'Dynamic'

Please note, that this will generate SQL statement, which will scan table with IPs, which can contains lot of rows and might result in your SQL server under heavy load if executed too frequently. I recommend to set alert evaluation frequency to reasonable value like 30 minutes.

Also if IPs were created in previous version of IPAM, then their type is 'Dynamic' by default. You want to change type of non-DHCP managed IPs to 'Static' to prevent false alarms.

If you have any problems with visibility of 'IPAM Nodes' object in Alert Manager or with creation of the alert, please open a support ticket and reference this thread.

All comments

martin.susil

Hello,

when a subnet has a DHCP scope associated with it, it's not easy to tell whether IP is used because it responded to scan (statically assigned) or because DHCP server has lease for it. Leased IPs should however have property 'Lease Expiration' set to something.

What are you trying to achieve? You would like to get notification when there is a 'rogue' IP (illegal use of static IP) within DHCP scope? Or when any static address is discovered no matter if it's within the DHCP scope or not?

bshopp

When we pull IP's from a MSFT DHCP server, we can determine if it is DHCP or static.

Via a scan of ICMP/SNMP this is not as easy for us to programatically determine if it is static or dynamic. I am curious as to the answer of the question Martin asked, what are you looking to accomplish?

svail

Hello, Thanks for the quick reply.

You are correct. I would like to know when someone self assigns themselves a static IP address that overlaps with one of our provisioned IP ranges, rather than allowing their machine to use DHCP. Is this possible?

martin.susil

Hello,

this should be possible by adding advanced alert for objects 'IPAM Nodes' with conditions

'Status' is equal to 'Used'

Lease Expiration is empty OR Lease Expiration is '' (empty string)

Type equals to 'Dynamic'

Also if IPs were created in previous version of IPAM, then their type is 'Dynamic' by default. You want to change type of non-DHCP managed IPs to 'Static' to prevent false alarms.

If you have any problems with visibility of 'IPAM Nodes' object in Alert Manager or with creation of the alert, please open a support ticket and reference this thread.

dporod

I'm confused as to where I find "IPAM Nodes". I am at the Edit Alert screen.

martin.susil

Please open a support ticket for that and reference this thread.

IPAM Nodes are hidden by default to prevent users from getting SQL server under high load by mistake (IPAM Nodes correspond to database table, which might contain millions of rows)

Support will tell you how to enable them.