2.6. ON CMDB

The OpenNAC Enterprise CMDB (configuration management database) contains all relevant information about all the different components used and managed by OpenNAC Enterprise.

You can find the ON CMDB section on the left-side menu of the Administration Portal.

../../_images/overview.png


The ON CMDB module features the following assets:

  • Network Devices: Devices such as switches, WLC, APs, etc., from which we can receive events like authentications, SNMP events, etc. that contain information from user devices.

  • User Devices: Final devices such as computers, mobile devices, and printers.

  • Networks: List of registered networks in OpenNAC Enterprise.

  • VLANs: List of VLANs registered in OpenNAC Enterprise and used within the policies to perform segmentation among other uses.

  • Security Profile: Security access-list (ACLs) that can be assigned to any user ingress port during its network access.

  • LDAP/AD Filters: Filters to perform searches on an LDAP/AD directory to verify membership of groups and/or organizational units.

  • MAC Vendors: List of manufacturers according to the MAC identifier corresponding to the first 6 values of the MAC address.

  • User Data Sources: Allows to use identities in the authorization process, AD attributes are used to be part of the authorization process.

  • Security: Section where you define profiles and security objects such as users, roles, ACLs that allows us to define different user roles, configure the access permissions for the roles, manage the API Key, etc.

  • Tags: Section that administrates tags for different users and network devices. These tags allow us to collect information about the different devices and allow us to filter policies, profile devices, grouping by type, etc.

  • Custom Fields: Expand the different CMDB objects attributes, these custom fields could be used by the product to expand functionalities.