#133 Discovery module

[Anonymous]

Discovery tool would be handy. Currently all IPAM solution provide that feature. For example you could use nmap for ICMP discovery for new subnet. I have personally integrated it within our IPAM tool in company. At the creation of a subnet you have possibility to choose whether to discover hosts and check every hour with ICMP if they are still alive. There is a column for each host describing when was last successful ping and another one describing whether host was reachable today,this week,month or year.

[Miha Petkovsek]

Hi, ICMP discovery is implemented in latest devel release, will add option for telnet/snmp/nmap, currently under evaluation.

Also cron-scheduled script is available to periodically check for statuses of hosts for checked subnets (functions/scripts/pingCheck.php).

[Anonymous]

When I navigate through the browser to pingCheck.php it displays the message "Threads not supported". Not sure if it is an apache or php "thing". How can I enable threads (I'm on Debian).
Thank you!

[Miha Petkovsek]

Hi, threading is supported on php cli only, so it seems you need php5-cli
http://packages.debian.org/sid/php5-cgi

[Anonymous]

Hi, is it possible to have a distributed discovery with agent deployed on other machine?

For example, if 2 subnet are overlaped hiden by a firewalls and NAT, put a machine in each overlaped subnet to do the discovery of unNATed IPs and push the data to the main phpipam.

Thanks.

[Miha Petkovsek]

Hi, good idea, with some modifications it is possible I believe.

Generally it should work like this:

• extract phpipam to different server
• set proper server and permissions in config.php and permit access in mysql
• delete all but config.php and functions directory

You should also do some minor modifications to make sure that only proper subnets are being scanned / pinged, otherwise all subnets will be queried on all agents which doesnt make sense.

If I include this to main release I should also set agents definitions and per-subnet
agent selection.

brm

[Anonymous]

Hello,

I've do what you tell, and each phpipam instance can scan its own network.
But now, how can I push theses informations automaticaly to the Master PhpIpam?

[Miha Petkovsek]

Jut set the same database in each.

[Anonymous]

Hum .. Ok, but when I change the DB settings in /phpipam/config.php, I set the remote DB address en let the same user/pass and db name.

But when I try to open the phpipam on the "slave" server, the first install page apear.

Do you have already try to do this type of setup ?

[Miha Petkovsek]

no, but it should work. Do you have permissions to access server from specified host ? Try opening SQL connection directly form cli

mysql -h myserver -u myphpipamuser -p

if it doesn't work:
cant connect : server only listens on localhost, change listen port based on your distro
invalid user/pass: you need to add permissions for that user/host to access phpipam database

brm

[Anonymous]

Nice, now I can connect to the remote DB, I've miss to create the user on the remote DB ...

mysql> CREATE USER 'monty'@'localhost' IDENTIFIED BY 'some_pass';
mysql> GRANT ALL PRIVILEGES ON *.* TO 'monty'@'localhost' WITH GRANT OPTION;
mysql> CREATE USER 'monty'@'%' IDENTIFIED BY 'some_pass';
mysql> GRANT ALL PRIVILEGES ON *.* TO 'monty'@'%' WITH GRANT OPTION;

But, it seem to be not possible to set specific right to "remote collector" for the spécific table because all subnet are put in the same table. I've right?

Thnaks,

[Miha Petkovsek]

This will be available in next release with phpipam agents. You will select to which agent the subnet belongs to.

[Anonymous]

Nice :) At the moment, can I deploy a phpipam into each subnet/network and just turn off the automatic discovery and only do it manualy from the right phpipam (able to ping/nmap range) ?

In theory it will work but will it be compatible with the next release?

Do you have an idea of its release date?