Monitoring LAN Ports

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

    Monitoring LAN Ports

    Hello,

    is it possible to monitor a change of connected device (or its MAC address) on a port?

    Thank you.

    #2
    Anybody? Thank you.

    Comment


      #3
      It's easy on most switches to monitor the change in port status, e.g. up/down.

      If you want to monitor whether a device connected to that point is up or down, why not monitor that device (not the connecting device's port).

      If you want to monitor whether a device is moving around, e.g. a given MAC address moves from port 1 to port 5 or some such... that's harder. Netdisco tracks that sort of thing, though I am not aware of any alerting that comes from it (it just keeps up with where last seen). While you can write custom scripts to monitor most anything in zabbix, nothing comes to mind about how to check for that, if that is indeed your question.

      Comment


        #4
        Thanks.

        We have hundreds of devices that are connected to our network. Sometimes people bring their own devices and connect them to ports instead of company computers and have an access to some network resources. We'd like to monitor this change. Change of a device on a port.

        Is it possible?

        Comment


        • wconstantinov
          wconstantinov commented
          Editing a comment
          como o colega comentou, seria segurança de redes isso, uma vez tinhamos diversos computadores e celulares conectados em nossa rede, pelo AP eu bloquiei tudo os que precisavam e usavam equipamentos da empresa voi liberado pelo MAC Adress da placa de rede, os que usavam equipamentos pessoais sem autorização nem vieram perguntar o que aconteceu.

        #5
        It's not a monitoring task. It's network security. If you set up a list of legitimate MACs on your switches, you can control the connection of new devices. The switch can send messages about new devices to the syslog server.

        Comment


          #6
          Thanks.
          So Zabbix cannot do this?

          Comment


            #7
            Originally posted by Hello There View Post
            Thanks.
            So Zabbix cannot do this?
            If exact MIB provides list of MAC addresses of course can do.
            http://uk.linkedin.com/pub/tomasz-k%...zko/6/940/430/
            https://kloczek.wordpress.com/
            zapish - Zabbix API SHell binding https://github.com/kloczek/zapish
            My zabbix templates https://github.com/kloczek/zabbix-templates

            Comment


              #8
              Yes, as kloczek implies, since you can write your own checks zabbix in theory can do almost anything. But is it the best tool for it may be a fair question. I agree with max.ch.88, what you are asking is more about network admission control than monitoring, and I think your tools there may be better.

              All that said I have not seen any templates or tools already written for zabbix to do it.

              Comment

              Announcement

              Collapse
              No announcement yet.
              Working...
              X