Aloha....
We recently deployed IPAM to keep an easier track on our address space and utilized the default settings for the scan. It looks like things work, but I always wonder if it could work better if we adjust some of the settings. I looked around for a best practice or suggested settings and do not see anything. Has anyone "played" around or tweaked the settings and found based on number of subnets/speed a sweet spot or algorithm?
Whats the deal with transient IPs?
I have daily scanning of several subents enabled. Sometimes, IPAM will populate the list fairly accurately (we may some some devices with ICMP and SNMP disabled).
But other times, the scan will come back and list every IP as transient.
A google search of "transient IPs" gives thousands of varied results.
So what gives? There have been no changes on these networks, but at scan at 10am will poplutae accuratly, and one a 3pm will result in 100% transient, and my scope utilization drops to 0%
User error?
We've reached our license limit on DHCP scope monitoring and I was wondering if deleting scopes within Orion will delete the actual DHCP scope on the server? The only reason I'm asking this is because I've had a similar problem happen with other tools that we have used. Thanks in advance!
I wanted to run this by here before trying to call support just in case it's something obvious. I feel as if some parts of IPAM are not working (or maybe just a few DHCP/DNS servers and not all)....
Background:
We are on IPAM 4.1 and ran into issues where servers were assigned static IP addresses (for a long time), but IPAM shows them as available. We also have some DNS servers that we've set to scan...but they won't scan (testing the account shows we have zones and the account works...but then nothing seems to happen when we hit "scan")...in short: IPAM is behaving as if it's not working properly.
- When I go to "IPAM Settings" -> "View Scan Job Status" I see 15 pages of scans in a "queued" state. (some are set to "next scan ASAP")...some have "Last Discovery" time as today/yesterday, but hundreds of them are set to last year.
- In IPAM "Manage SUbnets and IP Addresses", if I pick a folder (like "Discovered Subnets") a majority of my subnets on the right pane have "Last Discovery" as some time last year.
- I believe everything is set to scan every 4 hours. I didn't set this system up though (inherited it) so I'm not sure if someone made some low level config change (like manually turning everyhting off at a low level) or turned off a master flag somewhere.
- There are event entries under the "IPAM Summary" that indicate (some...all?) things are working ("xyz fields changed for DHCP client name zzz, etc. Status set to reserved")
Questions:
- Is there a way to clear all the "old" scan jobs? The only button I have next to each is "edit"...Are these actually queued (as mentioned above) or just junk or something has hung causing things to just queue up? Some way to force a "full scan on everything"?
- Is there a way to tell if the scans are working properly or at all? Any logs or places to go to tell if something is even attmepting to do any work? I've searched for logs in several IPAM folders on the filesystem and all I see are empty logs. I've run queries against the IPAM areas of the orion/NPM database and I got nothing useful.
If there is a way to "clear" out the job queues, then hit "scan" on something and go to a log/localtion/something and see "scan starting for xyz", and then see "scan completed for xyz"...etc...errors/success that would be enough.
Thanks in advance!
Hi, I just set up a demo version of Solarwinds IPAM software in an attempt to monitor our DHCP pools residing on multiple Bluecat Adonis 1000 boxes.
I can add the node but it doesn't seem to be compatible with the ISC method of monitoring DHCP, although I can see ISC is running on the box.
Anyone have success adding these?
Recently installed both and I just realized that most of my server (static addresses) are not in IPAM or NPM. Just to document how I got on this track is: I removed 2 devices from my network and the cable drops are to be removed, they were unmarked. So I thought, I'll just search IPAM to find the device, then locate the switch port using UDT. I can't find the device because the IP address is basically unknown to all of my SW products. Here's how my inherited network is setup. IP range 10.4.20.1/19. My missing IP's are in the exact range of 10.4.28.1-10.4.29.254. For the 10.4.20.1/19 subnet, DHCP is configured to handle 10.4.20.1-10.4.21.250. Is my problem due to the fact that my subnet is 10.4.20.1/19 but that entire scope is not within the DHCP range? If so, how should I go about fixing this? Should I enable the entire subnet for SHCP and then exclude the 10.4.28.1-10.4.29.250?
I discovered today that IPAM is not conducting any of its scans (Subnet, DNS Zones, etc.). When I took a look at the "IPAM Settings > Scan Job Status", all of the jobs reflected the following: Status "Next Scan: ASAP", Last Discovery "12/11/2012".
I verified in the Running Service Manager that all services are running.
I verified in License Manager that the Orion IP Address Manager was licensed.
I verified that the server running IPAM could communicate (ICMP) with the network.
I verified that there were no reported IPAM erros in the SolarWinds.Net Event Log under the Windows Applications and Services Logs. Are there any other IPAM specific logs I should check?
I deleted all DHCP & DNS Servers to isolate it to only the Subnet scanning.
The Server Polling Engine is active with a completion of 100%. At the bottom, I noticed IPAM.Dns.Polling and IPAM.Dhcp.Polling are both set to 0 (probably because I deleted the servers above.)
SNMP is working and tested satisfactory with other modules of Solarwinds.
Any suggestions or thoughts on how to progress with the trouble-shooting/resolution would be appreciated. Thanks, in advance!
Edit: I also scanned THWACK and found 2 other lack of scanning entries but neither seemed related to this situation.
I (now) manage IPAM but I did not set any of it up so my knowledge of how it works is minimal. I read read docs and couldn't find specifically what I wanted to know so...
Details: (We have IPAM 4.1)
We have several DNS Zones in IPAM that have an "Unreachable" status (because a domain has been removed), as well as some other zones that are not appearing to update (old "Last Zone Transfer" times, or "Dynamic Update" is set to "No Update"). These zones mostly have "Zone Type" set to Primary (some have Secondary) and the "Lookup Type" is either Forward or Reverse.
In the IPAM Summary page we have *many* red and yellow events about zone transfers being cancelled or "not responding".
Questions:
- I feel I can just select the zones that are marked "Unreachable" or "No Update" and delete them via the "Remove DNS Zones" button, but does this "talk back" or do *anything* to the associated DNS server these zones are attached to (like cause *any* changes on the DNS server side) or does all it do is clean up IPAM?
- I could delete them of the above manually (there aren't 100's of them) but is hitting "Scan" a better way to initiate a cleanup? I don't want to set up an entire non-prod Orion and configure IPAM just to play around.
Thanks in advance!
I just installed the eval version of IPAM and the subnets are not scanning. When I look at the demo front page it shows that there is an event where the subnet scan failed with an error. So how can I find what the error is nad what woudl be some good next steps to try and get the demo underway.
We have installed this on our Orion SLX V9.5 With SQL 2005 enterprise.
Hi all, does anybody knows if neighbor discovery or IP address scan is supported on Cisco ASA firewalls?
I bought this solution a year ago, and at that time after the deployment and confguration of the tool i've found that subnets routed on firewalls are not beeing scanned.
I read somewhere on the web that this is because the OID implementation on Cisco ASA firewalls does not have the ARP info.
I wounder if anybody has any experience over this scenario?
this has a solution already? or in the future?
thanks in advance and regards
Is anybody using IPAM to manage their NAT address assignments? I am curious as to the best way to do this. It would be really cool if you could establish a 1-to-1 relationship between the IP address and the NAT assigned to it and being able to see the NAT being active based on the status of the inside address. This would help us keep better tabs on our server bretheren who have a nasty habbit of retiring servers and not letting us know so we can delete the translation assignments.
Back in the day, the Solarwinds toolset had an application called DHCP Scope Monitor.
It used SNMP to pull the DHCP scope info and utilization from Windows DHCP servers.
Is this possible with IPAM, or can it only use WMI to retrieve this info?
Getting SNMP access is a cinch, but getting the Windows Admins to create a WMI account is a world of hurt.
We're considering implementing IPAM to replace IPPLAN and one big question has been brough up...... is there a migration tool or do we need to manually enter every subnet we have in IPPLAN? Any one out there convert from IPPLAN? If so, how did it go?
As the title, I've just installed IPAM3.1, everything seems ok but the process of subnet scanning doesn't work.
The status is always "Next scan : ASAP" & there is an event log : "IPAM Service [WIN-B8NLDV1SDNG] is unable to communicate with Job Engine. Network Scanning is offline.", even I replaced .sdf file and untick read-only box.
I installed IPAM 3.1 on Windows Server 2008 R2 Ent.
Thanks.
Hi everybod
I just need to ask - am I the only who has this problem bellow?
when I create an A record and choose auto creation of PTR, IPAM creates unusable format adding forward zone addr as prefix to PTR
example should be more clear
In case auto creating PTR for 10.64.72.199
IPAM allways creates 10.64.72.199.72.64.10.in-addr.arpa, instead of correct format 199.72.64.10.in-addr.arpa.
Am I overlooking something in config or is it a bug?
Thank you
-pp-
Hi,
I just spend a long time searching the forum and documentation. How do you disable AD login?
I want to keep only local account as the AD auth is causing massive slowness and the tool is next to useless
Could someone please link me to a document?
Is there a way to export and import subnets with description and custom fields?
I know I can bulk import subnets however they will be in same description, location, VLAN, scanning, etc...
Is the current version of IPAM able to monitor Red Hat DNS?
Hello!
My name is Mathew, I am a systems administrator at an enterprise company in Australia. In the past year I have been implementing SolarWinds and learning the ropes. Since it's inception however, IPAM has been registering some Mac Addresses on the network as FFFFFFFF. However in DHCP, these addresses have the correct address associated with them.
This seems to be limited to certain makes or models of printers. (Samsung printers seem to be a big culprit) UPS devices for instance are showing up with a Mac address of 00000000.
Is there a module I have to load for IPAM to be able to manage Samsung printers? Any help would be greatly appreciated.
Hi All,
Hi, I am newbie, who is partially managing the Orion.
On the IPAM , the DHCP leases are not working. When I look at the logs,
ERROR SolarWinds.IPAM.ScanningEngine.JobProcessor.JobProcessorBase`1 (null) - Error occurred when processing DHCP results - serverGroupId: 2497, serverNodeId: 4022
System.Data.SqlClient.SqlException (0x80131904): Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
The statement has been terminated.
at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning()
at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
at System.Data.SqlClient.SqlCommand.RunExecuteNonQueryTds(String methodName, Boolean async)
at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
at SolarWinds.IPAM.Storage.DAL.ConflictDAL.PurgeConflictData()
at SolarWinds.IPAM.Storage.DAL.ConflictDAL.StoreDhcpConflicts(Int32 scopeId, List`1 conflicts, Boolean updateConflictData)
at SolarWinds.IPAM.ScanMerge.DhcpDiscoveryMerger.UpdateScope(Int32 serverId, Int32 scopeId, Int32 groupId, String scopeAddress, Boolean includingGroupTable, DhcpServerType serverType)
at SolarWinds.IPAM.ScanMerge.DhcpDiscoveryMerger.UpdateScopesState(Int32 serverId, Int32 groupId, Boolean addAutomaticallyNewScopes)
at SolarWinds.IPAM.ScanningEngine.JobProcessor.JobProcessorOneTimeDhcpServerSync.SubmitResults(UIJob job)
ClientConnectionId:e4634d91-5859-4b86-90d4-0bcf39d4f0ad
I am not getting any idea on this and my knowledge is limited. I was pointed to SQL DB performance by few, but SQL Data is on SSDs and storage system is healthy.
If I manually run a scan, it throws the same error.
Also from the IPAM.Jobs_x file
SolarWinds.IPAM.DHCP.Microsoft.DhcpException: The RPC server is unavailable
at SolarWinds.IPAM.DHCP.Microsoft.DhcpViewer.ThrowException(UInt32 errorcode)
at SolarWinds.IPAM.DHCP.Microsoft.DhcpViewer.GetDhcpStatistics()
System.IndexOutOfRangeException: Index was outside the bounds of the array.
at SolarWinds.IPAM.DNS.DnsServerManagement.GetIncrementalZoneTransfer(String ipamServerAddress, String zone, Int64& serialNo, Boolean& incrementalResults, Boolean& zoneNotFound)
at SolarWinds.IPAM.Jobs.DnsZoneTransferJob.DoDnsZoneTransfer(Object param)
2014-11-05 12:56:38,501 [STP SmartThreadPool Thread #216] ERROR SolarWinds.IPAM.Jobs.DHCP.Factory.WindowsDhcpFactorySubJob - GetSubnetInfo
2014-11-05 12:30:04,356 [STP SmartThreadPool Thread #217] ERROR SolarWinds.IPAM.Jobs.DHCP.Factory.WindowsDhcpFactorySubJob - GetSubnetInfo(10.18.16.5,10.18.16.0,...) FAIL => code 1722
Any leads would be helpful.
Regards,
kw