Welcome, Guest. Please login or register.

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - ascii

Pages: [1] 2 3 ... 5
1
Discovery / Re: Discovery ignoring netfilter?
« on: Today at 11:53:36 AM »
i'm not sure if you realy need to escape the dots.

i use these filter and it works perfect.

Code: [Select]
netfilter 10.68.255.23[3-8]|10.68.16.8$|10.68.18.100|10.68.52.{1,3}|10.68.53.{1,3}|10.68.84.22[5-6]|10.68.14[4-7].[5-9]$|10.68.144.10$|10.72.3.{1,3}|10.72.15.{1,3}|10.72.49.1[5-8]$|10.72.99.[2,3]|10.72.4.[4,7]$|10.81.105.1[1-9]$|10.81.105.1$|10.81.220.15[1-4]|10.81.223.229|10.81.223.230|10.81.223.24[3-6]|10.81.223.254|10.81.223.16[1-9]|10.82.23.254|10.82.23.7[0-9]|10.81.64.241|10.81.64.225|10.81.64.235|10.81.92.{1,3}|10.81.172.10$|10.81.175.{1,3}|10.81.175.1[3-5][0-9]|10.81.192.1|10.81.194.73|10.81.175.[6-9][0-9]|10.81.175.1[0-2][0-9]|10.80.146.254|10.81.132.[1-5]$|10.81.134.[6-9][0-9]|10.81.134.1[0-2][0-9]|10.81.179.[6-9][0-9]|10.81.179.1[0-2][0-9]|10.80.140.[1-5]$|10.80.142.[6-9][0-9]|10.80.142.1[0-2][0-9]|10.80.148.[1-5]$|10.80.150.[6-9][0-9]|10.80.150.1[0-2][0-9]|10.81.128.[1-5]$|10.81.130.[6-9][0-9]|10.81.130.1[0-2][0-9]|10.80.49.[1-5]$|10.80.51.[6-9][0-9]|10.80.51.1[0-2][0-9]|10.80.105.[6-9][0-9]|10.80.105.1[0-2][0-9]|10.81.177.5$|10.80.100.[1-5]$|10.80.102.[6-9][0-9]|10.80.102.1[0-2][0-9]|10.80.136.[1-5]$|10.80.138.[6-9][0-9]|10.80.138.1[0-2][0-9]|10.80.39.[1-5]$|10.80.41.[6-9][0-9]|10.80.41.1[0-2][0-9]|10.80.108.[1-5]$|10.80.110.[6-9][0-9]|10.81.116.[1-5]$|10.81.118.[6-9][0-9]|10.81.118.1[0-2][0-9]|10.80.60.[1-5]$|10.80.62.[6-9][0-9]|10.80.62.1[0-2][0-9]|10.81.111.[1-5]$|10.81.113.[6-9][0-9]|10.81.113.1[0-2][0-9]|10.81.121.[1-5]$|10.81.123.[6-9][0-9]|10.81.123.1[0-2][0-9]|10.80.54.[1-5]$|10.80.56.[60-99]|10.80.56.1[0-29]|10.240.16.62$|10.80.254.249|10.80.254.245|10.72.243.246|10.72.129.20$|10.80.99.121|10.80.23.19[3-9]|10.80.23.2[0-29]|10.80.3.190|10.80.3.13[0-9]|10.80.181.19[3-9]|10.80.181.20[0-9]|10.80.17.[1-9]$|10.80.17.1[0-9]$|10.81.215.254|10.96.1.[0-99]|10.96.1.1[0-27]|10.80.167.[0-99]|10.80.167.1[0-27]|10.80.159.[0-99]|10.80.159.1[0-27]|10.80.32.254|10.81.240.5$|10.81.240.9$|10.80.202.254|10.80.202.66|10.81.191.254|10.81.191.7[0-9]|10.80.47.66|10.80.47.254|10.34.60.20$|10.34.94.10$|149.216.32.176|10.80.27.254|10.80.15.17[1-4]|10.80.22.4$|10.80.15.206|10.80.98.254|10.80.97.254

2
Discovery / Re: Normal Poll fails, but Inventory Poll is successful
« on: January 04, 2018, 10:50:26 AM »
it might be a neighbour problem.
-p discovers the next neighbours
-A all discovers every device in the database

check if the missing devices have a neighbour

3
Discovery / Re: Across WAN discoveries
« on: August 04, 2017, 10:36:05 AM »
you could use a more detailed filter on the 3rd part.
i use this for example
10.80.108.[1-3]$|10.80.110.[6-9][0-9]
depening on who your network looks like it might help.

4
Discovery / Re: PROBLEM OF DISCOVERY IN BIG NETWORK
« on: July 07, 2017, 10:15:53 AM »
http://forum.nedi.ch/index.php?topic=1989.msg8060#msg8060
i also use paralell discovery.
i use the end of the IP Adress as a filter.
Also skipping most of the stuff during day.

During the night i discovery the whole network based on there location.
meaning paralell discovery for the locations.

Are all you 7000 devices are connected to each other?
if they are in different locations without CDP neighborship than you can start the discovery at the same time.

5
i had the same issues.

i added the diffie-hellman-group1-sha1 to my /etc/ssh/ssh_config config

6
Discovery / Re: No login on Device-Write
« on: May 23, 2017, 08:46:26 AM »
there is no vaild login for the switch in the Nedi Database.
it should look like in the screenshot below.

hit the red power button to reset the cli and than discover it again.

7
Discovery / Re: VLANS?
« on: February 17, 2017, 02:09:13 PM »
what kind of switches do you have?
is there a .def file for the type?

8
Discovery / Re: Config Backup of Cisco Nexus
« on: February 16, 2017, 08:08:45 AM »
my N5K with NXOS 7 works with nexus OS in the .def

libcli
Code: [Select]
$cmd{'NXOS'}{'ropr'} = '[\w+().-]+>\s?$';
$cmd{'NXOS'}{'enpr'} = '[\w+().-]+#\s?$';
$cmd{'NXOS'}{'enab'} = 'enable';
$cmd{'NXOS'}{'page'} = 'terminal length 0';
$cmd{'NXOS'}{'dfwd'} = 'sh mac address-table dyn';
$cmd{'NXOS'}{'shcf'} = 'show running-config';
$cmd{'NXOS'}{'cfst'} = '^begin|running-config';
$cmd{'NXOS'}{'arp'} = 'sh ip arp vrf all';

9
GUI / Re: NeDi 1.5 Device-status CDP Neigbohr port
« on: January 09, 2017, 01:13:04 PM »
ok i see.
i used to like.
we or shall i say my apprentice had the job of going thru the devices and correct the interface alias.
We are currently replacing a lot of switches and this was an easy and save way to change the description

10
GUI / NeDi 1.5 Device-status CDP Neigbohr port
« on: December 13, 2016, 12:14:38 PM »
i just saw the if a port is connected to a switch the neigbhor is shown but not the port.
these used to be different in 1.4

11
Installation / Re: Missing dependencies on "Install" instructions for Ubuntu
« on: September 21, 2016, 09:32:56 AM »
maybe you should/could mention that nedi 1.4 is not compatible with php7 which might be pushed from same distributions as default by now.

12
Discovery / Re: netfilter over multiple lines
« on: July 08, 2016, 08:50:37 AM »
so i did a little bit of scripting.
not nice but works at least on linux.

create 2 files in /var/nedi/inc

netfilter.sh
Code: [Select]
#!/bin/bash

# grep all location and paste at end without linefeed
grep netfilter netfilter-location.txt | tr -d '\n' >> netfilter-location.txt

# replace all netfilter word with the regex or |
sed -i -e '$s/netfilter /|/g' netfilter-location.txt

# insert keyword netfilter on first position on last line
sed -i -e '$s/^./netfilter /g' netfilter-location.txt

# variable for NeDi replace string
netfill=`tail -n 1 netfilter-location.txt`

# replace netfilter string in NeDi conf with new generated one
sed -i '/^netfilter /c\'"$netfill"'' /var/nedi/nedi.conf

# Delete temp inlput
sed -i '$ d' netfilter-location.txt

and the second one is netfilter-location.txt with your location like these
Code: [Select]
#Location A
netfilter 10.68.1.{1,3}|10.68.16.8$|10.68.18.100|10.68.52.{1,3}|10.68.53.{1,3}|10.68.84.22[5-6]
#Location A-1
netfilter 10.68.14[4-7].[5-9]$|10.68.144.10$

#Location B
netfilter 10.72.3.{1,3}|10.72.15.{1,3}|10.72.99.[2,3]|

#Location C
netfilter 10.81.105.1[1-9]$|10.81.105.1$

#Location D
netfilter 10.81.220.15[1-4]|10.81.223.229|10.81.223.230|10.81.223.24[3-6]|10.81.223.254

#Location E
netfilter 10.83.126.2$|10.83.126.20$

#Location F
netfilter 10.81.64.241|10.81.92.{1,3}|10.81.172.10$
#Location F-1
netfilter 10.81.175.[129-158]

#Location G
netfilter 10.81.192.1|10.81.194.73|10.81.175.[65-99]

and so on

than edit the netfilter-location.txt to your need.
once done call the netfilter.sh

it will replace the netfilter string in your nedi.conf
always backup your nedi.conf
test it before you use it.

the downside is, that if you edit your netfilter in the nedi conf directly without the netfilter-location.txt it will be replaced once you generate the new string

13
Discovery / netfilter over multiple lines
« on: July 05, 2016, 09:55:35 AM »
Hello together,

i was wondering if it is possible to write the netfilter over multiple lines.
I have multiple location (20+) in my nedi.

my netfilter statement is getting really long and messy.

i is possible to have multiple netfilter statements in the config?

like
Code: [Select]
#location A
netfilter a.b.c.d

#location b
netfilter e.f.g.h

location c
netfilter i.j.k.l

and so on

14
Discovery / Re: Log in to switch every hour
« on: June 08, 2016, 08:56:30 AM »
i don't think it will effect the health monitor.

fwd ist forwarding database
it's more ore less the table with all the MAC Adresses on the network. so the switch knows where to send the packet

my crontab looks like these
Code: [Select]
#  over the day
15,45 1-23 * * *    perl /var/nedi/nedi.pl -Smv -P 2 -r -u /var/nedi/seedlist.core > /tmp/nedi-seedlist.core.log 2>&1

0,30 1-23 * * *         perl /var/nedi/nedi.pl -Smv -A 'RIGHT(INET_NTOA(devip), 1) IN (1, 5)'  > /tmp/nedi-seedlist.ip.1u5.log 2>&1
1,31 1-23 * * *         perl /var/nedi/nedi.pl -Smv -A 'RIGHT(INET_NTOA(devip), 1) IN (0, 6)'  > /tmp/nedi-seedlist.ip.0u6.log 2>&1
2,32 1-23 * * *         perl /var/nedi/nedi.pl -Smv -A 'RIGHT(INET_NTOA(devip), 1) IN (2, 7)'  > /tmp/nedi-seedlist.ip.2u7.log 2>&1
3,33 1-23 * * *         perl /var/nedi/nedi.pl -Smv -A 'RIGHT(INET_NTOA(devip), 1) IN (3, 8)'  > /tmp/nedi-seedlist.ip.3u8.log 2>&1
4,34 1-23 * * *         perl /var/nedi/nedi.pl -Smv -A 'RIGHT(INET_NTOA(devip), 1) IN (4, 9)'  > /tmp/nedi-seedlist.ip.4u9.log 2>&1

#nightly
5 0 * * *   perl /var/nedi/nedi.pl -SAF -p -u /var/nedi/seedlist.kre > /tmp/nedi-seedlist.night.kre.log  2>&1
10 0 * * *   perl /var/nedi/nedi.pl -SAF -p -u /var/nedi/seedlist.ess > /tmp/nedi-seedlist.night.ess.log 2>&1
54 0 * * *      perl /var/nedi/nedi.pl -SafsgmijtedbpowAO -b -A 'devos ="IOS-asa"' > /tmp/nedi-logfile-backup-fws
56 0 * * *      perl /var/nedi/nedi.pl -SafsgmijtedbpowAO -b -A 'devos ="NXOS"'  > /tmp/nedi-logfile-backup
45 0 * * *      perl /var/nedi/nedi.pl -SafsgmijtedbpowAO -b -A 'devos ="IOS"' >> /tmp/nedi-logfile-backup

0 6 * * 1      perl /var/nedi/stati.pl

15
Discovery / Re: Log in to switch every hour
« on: June 07, 2016, 10:40:40 AM »
how does your cronjob looks like?

Pages: [1] 2 3 ... 5