RabbieBurns Posted February 12, 2011 Posted February 12, 2011 i remotely manage a small network, and im looking for a way to be notified by email of a new device joining the network. DHCP is running on a 2008R2 server, so I guess simply being notified of new DHCP requests and/or acks would suffice. Is there such a service i can install on either the win or the linux servers on the network? Reason is its a very static network, which isnt meant to have any new devices, so Im just wanting to be on the lookout.. Im not wanting to block any new devices, because they may well add more, i just want to be informed when it happens, without having to RDP into the DHCP server and check the leases.. Cheers!
Ric_ Posted February 12, 2011 Posted February 12, 2011 I believe Packetfence will do the trick for you. Or if you want to stick to the world of Windows, Microsoft's NAP deployed alongside something like SCOM. Both solutions will also prevent additional devices being attached if you so desire. PacketFence: Open Source NAC (Network Access Control) Network Access Protection 2
RabbieBurns Posted February 12, 2011 Author Posted February 12, 2011 will give packetfence a look.. not sure if they have the resources for SCOM.. Thanks ric.
RabbieBurns Posted February 12, 2011 Author Posted February 12, 2011 PacketFence takes care of handling the operation of the following services: ❏ Web server ❏ DHCP server ❏ DNS server ❏ Snort (Network IDS)[/quoe] dhcp and dns are run on windows.. i wonder if that will matter..
CyberNerd Posted February 13, 2011 Posted February 13, 2011 you could easily move the DHCP to linux, but I'd be inclined to leave DNS on windows. AD is a bit fussy about DNS.
RabbieBurns Posted February 13, 2011 Author Posted February 13, 2011 I used to run the dhcp in failover mode on linux on the network, but I moved it to windows.
azc Posted February 17, 2011 Posted February 17, 2011 I'd suggest running WinARP Watch on a machine, you'll notice when new devices join the network from there. Although the original developer's homepage no longer exists, there are plenty of mirrors around.
RabbieBurns Posted February 17, 2011 Author Posted February 17, 2011 does it have the functionality to send an email?
RabbieBurns Posted February 17, 2011 Author Posted February 17, 2011 thanks, but I need somehting that emails, as I am 10000 miles away from any screen.
CyberNerd Posted February 17, 2011 Posted February 17, 2011 how about arpwatch? it can log to syslog that can email you 1
RabbieBurns Posted February 17, 2011 Author Posted February 17, 2011 looks exactly what im looking for!!! Just need to figure out how to change it from emailling root to emailing a proper address rather than root
CyberNerd Posted February 17, 2011 Posted February 17, 2011 looks exactly what im looking for!!! Just need to figure out how to change it from emailling root to emailing a proper address rather than root you can redirect root in your /etc/aliases file
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now