This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Get Database entry of specific MAC-Address in a VLAN (IPAM, SQL-Query)

Hi,
can anyone help me with following situation?

Scenario:
IPAM --> Manage Subnets & IP Addresses --> different VLAN-Subnets.

Now my Question:
In this section I can select an IP-address of a VLAN which is available and ready to use. I can mark the checkbox to edit the IP-Address entry. In the edit menu i can enter a MAC address of the device.

Is it possible to get the MAC Address of a specific VLAN with a SQL query?

Thanks for helping.

Parents
  • Are you trying to get the MAC of some random IP on a VLAN, or of the VLAN interface itself?  Not quite sure what you're asking.

    But, the answer to pretty much any question like that is "yes", it just depends on exactly what you're looking for as to how you get it?   If I was looking for the MAC address associated with the interface of a given VLAN, I would probably look in NPM under that interface.   UDT makes it easy to search for a given MAC address when you query it with an IP or even username if set up correctly, however the UDT module wasn't mentioned.

    IPAM I believe can get some MAC address info via the DHCP portion of the product, when you integrate it with a DHCP server, or you an manually enter the MAC information as you mentioned.  You can search for a MAC from the main page under the "Search for IP Address", but make sure you drop down the "Search in:" box and add in MAC address.

    You could also write your own resource using SWQL to search for it in the IPAM.IPNode table, looking for the MAC entry, although it appears to be stored in a format that's a bit odd compared to UDT and NPM, so be careful about that.  ie: instead of '6C9CED4EDBC1" its stored like "6c:9c:ed:4e:db:c1".    SQL would be similar, using IP_Node instead of IPAM.IPNode.

    If you're looking for a more specific query, maybe knowing what information you want to query by would help?   An IP address?  A VLAN interface name?  Something else?   Based on that info I could get more specific?

Reply
  • Are you trying to get the MAC of some random IP on a VLAN, or of the VLAN interface itself?  Not quite sure what you're asking.

    But, the answer to pretty much any question like that is "yes", it just depends on exactly what you're looking for as to how you get it?   If I was looking for the MAC address associated with the interface of a given VLAN, I would probably look in NPM under that interface.   UDT makes it easy to search for a given MAC address when you query it with an IP or even username if set up correctly, however the UDT module wasn't mentioned.

    IPAM I believe can get some MAC address info via the DHCP portion of the product, when you integrate it with a DHCP server, or you an manually enter the MAC information as you mentioned.  You can search for a MAC from the main page under the "Search for IP Address", but make sure you drop down the "Search in:" box and add in MAC address.

    You could also write your own resource using SWQL to search for it in the IPAM.IPNode table, looking for the MAC entry, although it appears to be stored in a format that's a bit odd compared to UDT and NPM, so be careful about that.  ie: instead of '6C9CED4EDBC1" its stored like "6c:9c:ed:4e:db:c1".    SQL would be similar, using IP_Node instead of IPAM.IPNode.

    If you're looking for a more specific query, maybe knowing what information you want to query by would help?   An IP address?  A VLAN interface name?  Something else?   Based on that info I could get more specific?

Children
  • Thanks for your reply.

    My intention is to use IPAM combined with MAC authentication bypass.
    Exactly I wanna use IPAM as an "MAC Directory" in combination with ISE as Authentication Server.
    Now, I wanna try to combine both systems. I thought about a periodic request from ISE to IPAM which checks new MAC entries.

    If the MAC address is entered for the IP in this VLAN --> ISE should say YES and give the device access to the network.