3.1.10.2.10. ipdiscover

This plugin is responsible for searching if there is any IP in the ARP tables of the network devices, which matches the different MACs which do not yet have an IP and have an active status.

Warning

Only enable the ipddiscover plugin if it is absolutely necessary and also consider the frequency the plugin is executed. Using this plugin in environments with multiple networks can potentially lead to complications.

To configure the plugin, you need to set the execution TTL:

• Execution TTL: No further executions are carried out on the same client during this time period (minutes).

The following diagram shows the ipdiscover plugin flow:

3.1.10.2.10.1. Requirements

For the correct behavior of this plugin, it is necessary to meet certain requirements:

3.1.10.2.10.1.1. OpenNAC Enterprise Configuration

• The ipdiscover plugin must be active on Configuration -> Plugins

  

  
  

• We must select the plugin on the policy on ON NAC -> Policies -> Postconditions -> Plugins

  

  
  

• The Network must be defined with the default gateway.

• The default gateway must be defined on the Network Devices (ONCMDB -> Network Devices).

• The default gateway Network Device must have the SNMP correctly configured in order to get the ARP table.

3.1.10.2.10.1.2. Network Configuration

• The SNMP Traps must be active on the switches.

• The SNMP flows between OpenNAC Enterprise and the default gateway must be enabled.