We are working on the translation of the Pandora FMS documentation. Sorry for any inconvenience.
With the IPAM extension you can manage the IP addresses of the networks in charge, discover the hosts in a subnet and detect their changes in availability (whether they respond to ping command or not) or host name (obtained by DNS). Additionally, it can detect your operating system.
IP address management is independent of whether or not you have Software Agents installed on those machines or a Agent with remote monitors about that IP. You can optionally “associate” an Agent to the IP address and manage that IP address, but it does not affect the monitoring you are performing on it.
You can configure a network (using a network and a netmask) to perform address recognition from time to time or only do it manually. This mechanism uses the Recon Server (NetScan), but manages it automatically.
After being created in the IPAM control panel, the first time the network is detected Pandora FMS will search for the IP addresses of that network. If it detects that the IP address is operational, it will manage it. If it does not respond to the ping command, it will leave it as unmanaged. Any managed IP address that changes state (stops responding to ping) will generate an event in the system. You can manually manage those IP addresses you want, editing them to give them an alias or hostname, a description or even force your operating system.
It requires special mention that when IPAM detects an IP address that has a Software Agent installed and has that IP address assigned, it allows it to be explicitly identified.
Note that deleting a root site or subnode with another subnode(s) will break the entire related chain.
Management menu → Admin tools → IPAM → Sites tab.
It allows you to edit network sites (by clicking on name, Name column), delete with the corresponding trash icon and create new network sites with the Create button.
To create a new network location, type the name, by default the Parent field will be unselected, indicating that it is a root site. If it is a node, select either a root site or another node. Press the Create button again to save the new network site. The editing process is similar but uses the Update button.
If you repeat a name (case-insensitive) it will be duly indicated when saving or updating a record.
Management menu → Admin tools → IPAM → Network locations tab.
Allows you to edit network locations (click on name, Name column), delete with the corresponding trash icon (or multiple delete by selecting each line and then pressing the Delete button) and create new network locations with the Create. button
To create a new network location, type the name and press the Create button again. The editing process is similar but uses the Update button.
Management menu → Admin tools → IPAM → Operation view tab.
Allows you to view the created networks, view their IP addresses, modify or delete them.arlas.
By clicking on each of the elements in the first Network column or on its corresponding icon in the Action column you will be able to enter the Addresses view (Address view); To delete click on the trash icon located in the same column.
You can search by text in the Search field (by name, CIDR network address or description) and/or by network location (Location ) and/or by network site (Site) and/or by network virtual (Vlan) and then press the Search button to refine the results.
If you need to assign this task to a Satellite server, select the value None
.
Once you have created an IPAM network, using the Addresses view icon you will have access to the Edit view, Address view and Mass operations view.
Starting with version NG 758, this information can be imported from values files separated by commas ( .csv
format). The order is as follows:
network,network name,description,location(ID),group(ID),monitoring(0 or 1),lightweight mode(0 or 1),scan interval(days),recon server(ID)
The operation and management of subnet addresses are separated into two types of views: editing view and icon view.
With this view you get information about the subnet, including statistics on the percentage and number of addresses used (marked as managed). You can also export the list to a comma-separated (CSV) format that you can open with any spreadsheet program for editing. The IP addresses will be displayed in the form of an icon, and you can choose between two sizes: small (by default) and large.
Each IP address has a link at the bottom right to edit it, if you have sufficient privileges. If you click on the main icon, a modal window will open with all the information of the IP address, including Agent and associated operating system, configuration, etc. and you can also ping that address.
The ping is done from the machine where the Pandora FMS Console is installed.
If you have sufficient permissions you will be able to access the edit view, where the IP addresses will appear as a list. You can filter to show the desired addresses, make changes to them and update all at once.
Some fields are automatically populated by the recognition script, such as the hostname, the associated Pandora FMS Agent, and the operating system. You can define these fields as manual and edit them.
Fields marked as manual will not be updated by the recognition script.
Other fields that you can modify are:
Management menu → Admin tools → IPAM → Operation view tab → click on Addresses view of each item → Massive operations.
There is an option to manage IP addresses in bulk, helping the user to manage large groups of IP addresses.
In the Manage addresses and Addresses view views, Filter options option, you can sort by IP addresses, Hostname and by the last time they were checked.
It is also possible to filter by a free string which will search for substrings in the IP address, Hostname or Comments. Activating the checkbox next to the search box will perform an exact search by IP address.
IPAM includes a tool to calculate IPV4 and IPv6 subnets.
In this tool you can, from an IP address and the mask of the network to which it belongs, obtain information about said subnet:
These fields are given in address format (decimal for IPv4 and hexadecimal for IPv6) and in binary format.
The IPAM module uses the Net Scan system of Discovery server. The IPAM type tasks that you see in the Discovery Task Lists are created by the IPAM handshake task and you should not manually create or delete IPAM handshake tasks.
For more information on how to run a reconnaissance, see the Discovery section.
Management menu → Admin tools → IPAM → Vlan config tab → New Vlan.
To create a new VLAN, a unique name must be entered as a requirement and a description as an option.
For NG versions 758 to 760, this information can be imported from CSV files in this order:
VLAN network, VLAN description
From version NG 761 onwards:
VLAN network, VLAN description, VLAN custom ID
Once created, it can be consulted from the list of created VLANs, where the following information is shown:
Operations:
Delete VLAN: If a VLAN is deleted, a confirmation message will be displayed.
Statistics: Link to the VLAN statistics view.
A network can only belong to one VLAN.
To obtain information about a VLAN, there is a view that shows its statistics.
These statistics can be exported in CSV and XLS format.
Management menu → Admin tools → IPAM → Vlan wizard tab.
This view allows you to create a VLAN over SNMP. In order to execute the SNMP query, it is mandatory to enter address, community and version. Once entered, a list will be displayed with all the VLANs available for that address. If the VLAN has not been created, a check box will appear to select it for subsequent creation, adding data such as description, address and its interfaces.
Management menu → Admin tools → IPAM → Supernet config tab → New supernet.
Starting with version NG 758, this information can be imported from CSV files in this order:
name, description, address, mask, subnetting mask
Once created, it can be consulted from the list of created supernets, operations:
It is important to know that a network cannot belong to two different supernets.
Management menu → Admin tools → IPAM → Supernet map tab.
Networks and supernets will be represented as nodes. The difference between the two is that supernets have a thicker edge.
Interior of each node:
In the Setup of Pandora FMS, in the Enterprise part, the critical and warning thresholds can be configured, showing the nodes in red for critical and orange for warning.
Management menu → Admin tools → IPAM → Supernet Treeview tab.
The Supernet tree view shows all the supernets created in a simplified graphical way, clicking on the respective icon will show a pop-up window with additional information and the possibility of modifying said element in another tab of the web browser.
The new IPAM system allows the creation of reports, graphs, generation of alerts, etc. To do this, it will be necessary for the network you want to monitor to have the Monitoring option activated, as well as the group assignment option.
This will create an agent in Pandora FMS whose name will be IPAM_<network name>, whose Modules will have the following information:
The tool Pandora FMS IPAM DHCP provides DHCP Monitoring Modules for an MS Windows® DHCP server and complements the information displayed in the IPAM extension.
%ProgramFiles%\pandora_agent\collections\ipam\ipam_agent_tool.exe
After a while, the file will be transferred to the Agent and run, providing the following modules:
The information provided in the IPAM extension is not overwritten if the destination IP addresses are in “managed” state.