Holistic View of IP Address Resources
Organize Your IP Topology into a Hierarchy
Hierarchical Subnet Groups can be used to organize pools of address space and encourage good IP allocation policies in the organization. Subnet Groups at the top of the hierarchy will contain larger allocations. Those allocations are then subdivided into smaller aggregations and allocated down to child Subnet Groups. Policies can be specified to enable the allocation of IP space down the hierarchy automatically.
Facilitate a Customer Centric View of the IP Space
Track your IP assignments to business groups or tens of thousands of business customers by grouping them into entities. This produces a customer centric view that helps your customer service representatives to provide enhanced customer support. Ensure security by controlling the access rights of entity users and only give them management access to the IP resources owned by the entity. Through the user management service, you can access a centralized view where DNS resources managed by Name Commander and IP addresses managed by Address Commander are attached to one customer entity.
Manage Multiple Levels of Ownership of the IP Space
Eliminate the confusion of managing multiple levels of IP ownership by using Hierarchical Entities. While, Hierarchical Subnet Groups can be use to manage the IP allocation policy and service provider network topology, Hierarchical Entities can be used to manage separate networks and IP ownership at the edge of the service provider network. Hierarchical Entities also allow you to document, manage and secure IP assignments to different child entities. For example, the network connections between the head offices of a large enterprise customer and its child entities such as stores can be managed separately by users that have different access rights.
Tag Your IP Space to Document Purpose and Security
Using customizable tags that can be defined via Subnet Service Types, you can associate words or short phrases such as “infrastructure” or “business customers” with your IP space to define and organize the subnets. Once you have tagged your IP space, you can easily create reports and searches centered on these tags. Business rules such as Access Control Lists can be associated with Subnet Service Types so that only users in the “Business Services” group can make changes to the IP space tagged with the “Business Customers” Subnet Service Type.
Track and Report Your Address Space Usage
Easily generate customizable reports on-demand or at pre-scheduled intervals using built-in report definitions to capture information regarding the use and deployment of IP blocks, static IP, dynamic ranges, and MAC-to-IP addresses. View the reports and charts directly from the Web Management Console, or automatically email the reports in CSV, XML, or PDF format.
Ensure the Integrity of IP Administration
The role-based security system allows you to audit user sessions and assign security roles. You can use this feature to gather information about events in a session. It tracks each user-initiated session, including what, when, and by whom it occurred. With this, you can be notified of any problematic DHCP discovery and DNS resolving configurations. Furthermore, Address Commander helps you prevent duplicate assignments through the use of business rules and constraints.
Intelligent Network Discovery
Discover Your Entire Network
Obtain complete visibility over all IP configuration changes in your network with Address Commander Network Discovery Probe. This component automatically scans your network to discover all the IP configurations of interfaces, VLAN interfaces, subnets of both IPv4 and IPv6 addresses. Best of all, it discovers new routing elements and devices regardless of the make and model.
Address Commander uses SNMP, which unlike ICMP, is permitted to traverse your entire network because it is used as a secure management protocol. The scans are lightweight, which means millions of IP addresses can be scanned within hours, and allow both scalability and parallelism. Through a list of submitted SNMP community strings, Address Commander intelligently matches up the devices with their correct community string. To lighten the load on your network, once your large network-wide scans are done, you can run scans for known devices, specific IP ranges or regions for day-to-day operations. All scans can be scheduled or ran ad-hoc with no impact on other IPAM processes. The resulting information is compiled together to create the most up-to-date view of real-world deployment that you can reconcile with your IP plan.
Consult the ARP Tables of Routing Elements
For devices that you do not have SNMP access to or simply do not support SNMP, Address Commander can periodically scan the ARP tables on select routers and switches to collect information on the IP and MAC addresses of neighbouring devices. The discovered IP and MAC information can then be reviewed and incorporated into the IP plan.
Intelligently Deal with VRRP and HSRP
Shared IPs used by Hot Standby Redundancy Protocol (HSRP) and Virtual Router Redundancy Protocol (VRRP) will automatically be detected and excluded from any IP conflict detection in Address Commander. If for any reason a redundant virtual IP cannot be detected, you can manually flag it in Address Commander so that it too will be excluded from any IP conflict detection. Regardless of whether they are manually flagged or automatically detected, you can easily search for these shared IPs to take inventory.
Address IP Conflicts and Inconsistencies
After a scan, potential IP conflicts and inconsistencies are summarized in reports and to-do lists that help you manage your workflow. Address Commander can also dispatch system alerts or email notifications when IP conflicts are found. You’ll have the full details to help you quickly resolve identified issues or you can forward the information as well as the recommended resolution onto the operations team with just one click. The system will automatically ignore non-unique addresses such as IPv6 link local addresses, IPv4 multicast addresses, and loopback addresses. In addition, users can choose to ignore any conflicts that are valid exceptions indefinitely or for a period of time.
The to-do list will automatically update at the next scan and resolved issues will be removed from the list. For items that cannot be dealt with immediately, you can de-clutter your to-do list by setting reminders which will hide the items until the denoted time frame is up.
Identify Stale IP Addresses
Address Commander can pinpoint a list of stale IPs that are no longer in use. The Network Discovery Probe will continuously scan known routing elements and specified IP ranges in the back ground. When devices stop answering to SNMP or no longer report a specific IP as configured on an interface, these IPs are clearly listed in the searchable Stale IP list. They can be easily returned to the free pool and reassigned without worry.
Flexible Reports for Proactive Planning and Increased Compliance
Tailored Reports for Your IP Address Reporting Requirements
Address Commander features fully customizable reporting, which lets you customize the columns, sort and filter criteria, as well as group options. Additionally, you can ensure it reaches the right people by specifying the recipients of the report. On top of helping you maintain a holistic view of your resources, these reports also help you comply with law enforcement agencies.
Customizable Parameterized Report Templates
Quickly and easily generate reports using predefined report definitions. To track IP address usage and plan proactively, you need tailored reports that answer specific questions about your IP address resources. Report, alert and chart definitions allow you to specify base report types that include specific fields, filter criteria, grouping and sorting functionalities. Once a report definition has been set by a power user, other users can quickly generate a report based on those definitions. Report definitions can be further parameterized with criterion such as IP address or tag. Each time a user runs the report definition, they will be asked for the parameters the report should be based on.
Receive Automatic Alerts When Thresholds are Met
Easily set alerts to notify you whenever the network reaches pre-determined IP usage thresholds. Any canned report can be converted into an alert with the click of a check box. When the canned report identifies any data matching the condition stated, an alert is automatically emailed to the user who requested it. This eliminates the time consuming task of constantly monitoring the system.
Scheduled Usage Snapshots and Customizable Graphs for Trending
Get a complete picture of usage trends by taking snapshots of your IP usage. With this information, you can trend IP address usage over time and consolidate it into charts. The trending can be done based on any grouping or filter so you can trend geographically, based on service provided, or any other concept in the product.
Comprehensive Integration with Regional Internet Registries (RIR)
Canned Reports for Regional Internet Registries
Easily create RIR reports with Address Commander’s reporting module. The predefined reports include all the fields requested by each specific Regional Internet Registry and use all necessary business rules when calculating the utilization summaries.
Create RIPE/ ARIN Email Notifications
Using a built-in ARIN or RIPE module, you can generate Regional Internet Registries updates through Address Commander. The information will then be relayed to the appropriate WHOIS system with SWIP email updates.
Simplified and Centralized IP Address Management (IPAM)
Access Network Information and Manage Your IP Space Anytime Anywhere
Using the Web Management Console, you can remotely and securely view your configuration, entities, subnets, devices, DHCP services, and reports from a user-friendly interface. All inter-service communication is encrypted over SSL, ensuring the security of your data. The multi-user system allows widespread, concurrent access to the IP repository and is capable of handling multiple simultaneous updates.
Managing IP Requests and Reclaims
To save on manual labour and eliminate errors, Address Commander helps you automate the entire IP request process. Once blocks of IPs have been allocated for different categories such as region, service type, address type, and DHCP, Address Commander will automatically assign IP addresses based on the specified criteria whenever an IP request is made. In one transaction, the address is taken out of the appropriate free pool, marked as assigned, and associated to the device interface or customer. Block requests can also be automated.
Subnets that are no longer configured on the network can be automatically reclaimed and placed on hold during a grace period. Once the grace period has expired, the IP block is placed back into the free pool and marked as available. This capability allows for automation but does so in a way that allows mistakes to be identified before the IP space is given out to satisfy another request.
Customizable IP Request
Customize IP requests criteria for each network type such as voice, loopbacks, or business ethernet on the network. The administrator or IP planner can associate an address type (IPv4 or IPv6), default prefixes (eg. /24) , prefix ranges (e.g /24 to /26) and other business rules with each network type. Depending on the complexity of your network you can have anywhere from 10 to over a hundred network types.
When an engineer requires an additional network, they simply navigate to the region or device interface and request a new subnet. The user will be forwarded to a “Request Subnet Assignment” flow and where they can select the network type from a dropdown list. From there, the system intelligently identifies free space that is local to that area of the network and meets all the criteria associated with that network type. If necessary, Address Commander can subdivide the IP space to meet requirements.
This concept is available for assignments of all types including business customer, DHCP, device interface or regionally based assignments. In addition, this same logic can be accessed through APIs and incorporated into other applications or GUI flows on your network.
Built-in Flows to Increase Productivity
Built-in workflows eliminate complicated steps for performing common tasks such as:
- Requesting an allocation or assignment from an Entity, Regional Subnet Group, Device Interface or DHCP
- Moving subnets from an edge device that is being decommissioned to a new device
- Planning out free space or re-planning existing space in bulk
- Creating reverse DNS zones
Customize Interface Views for Different User Roles
Based on the settings of each user role, Address Commander presents the most simplified view possible. You can establish roles so that certain options and areas of the product can be hidden from users who do not have access rights or do not need to view that information.
User Definable Attributes for Tailored Searches and Assignment Requests
Define attributes specific to your needs and have them at hand every time you make an edit, run a customized report, or search for the information. The user definable attributes are integrated with the system fields and can be easily audited and redefined.
Customer Portal for No Hassle Self-Provisioning
Maximize efficiency by building customer portals using the out-of-box API and give your customers the ability to self-provision domains and IP space as well as review their own network information.
Flexible Deployment Strategies
Deploy IP address management (IPAM) services in an à-la-carte manner, based on your project and departmental needs. Address Commander components such as Regional Internet Registry Integration, DNS Management, Device Discovery and DHCP Discovery can be deployed and used at any time.
Extensive APIs For Customized Automation
By integrating Address Commander with your operations support system, you can centralize your process architecture to support processes such as inventory maintenance, static address provisioning, and network component configuration. Address Commander comes out of box with a well documented and easy to use Java API that has access to all product functionalities. It also provides a SOAP API to all common integration points.
Bidirectional Integration with Third Party Systems via Event Call Backs
Enable workflows by configuring Address Commander to send automatic restful messages to third-party OSS systems when IP assignments or other key changes occur. Restful messages could contain information such as IP blocks being assigned or deployed to a customer or device. The systems receiving the message can then implement customized workflow, notify other OSS systems and/or make calls back to Address Commander via APIs.
High Availability Configurations for Linux
Lay the Groundwork for IPv6 Deployment
With Address Commander, you get complete support for both IPv4 and IPv6 address management. On top of easing IPv6 planning, assignment, and tracking, Address Commander also easily generates meaningful HD-ratio usage reports specific to IPv6 requirements (RFC 3194).
View IPv4 Alongside IPv6 Address Ranges
When you view the subnets associated to a device, device interface, DHCP service, or entity, the IPv4, IPv6 and private blocks are conveniently listed in one table. Moreover, you can focus on specific IP address ranges by using filters. A tree-based view of your IPv4 and IPv6 address space is also available.
Automatically Generate Unique IPv6 Addresses
The range of available IP addresses in a /64 subnet is in the billions of trillions. Here, Address Commander gives you the option to generate addresses based on a random algorithm or an associated device’s MAC address. These options are available during common tasks, such as assigning a node or setting up a device interface.
Enable Sparse Allocation Algorithm When Appropriate
The scarcity of IPv4 calls for best-fit allocation practices to ensure optimal assignment of the smallest available free address block. The abundance of IPv6 addresses now makes it possible to employ sparse allocation practices when appropriate. Address Commander’s support for the sparse allocation algorithm allows the system to automatically select assignments and allocations that keep your IP space consistently fragmented. The administrator can control how large the allocations are by configuring an HD ratio and object sizes. The HD ratio configuration can be different for /32 pools and /40 pools.
Create Reports for IPv6 Address Space
You can create usage reports specifically for IPv6 addresses. These reports use host density ratio for the “In-use” calculations instead of standard usage calculations. Host density ratio measurements provide you with a more meaningful assessment of IPv6 space usage, and ease IPv6 planning tasks.
DNS, DHCP, IPAM (DDI) Solution for Service Providers
DNS Integration Via Name Commander
Address Commander can be integrated with Name Commander to provide a complete DNS, DHCP and IPAM (DDI) solution for service providers or IT departments in a global organization. This integration can be limited to only areas of the DNS space that are managed authoritatively by Name Commander. This provides a mixed mode deployments that is necessary for a service provider.
Automatically Create and View IPv4 and IPv6 Host Names on DNS Servers
Integration with Name Commander allows you to automatically create host names in your DNS system when a node is created in Address Commander. This is especially important with IPv6 addresses, as their complexity makes human readable host names and reverse lookups more important than ever.
Address Commander supports IPv6 reverse DNS. PTR and IPv6 AAAA DNS records are automatically synchronized and you have easy access to wizards that set up reverse IPv6 DNS. This gives you the ability to quickly link from an IPv6 node to a host name in DNS and to its PTR record as well.
Maintain a Global View of your Dynamic Scopes across all Incognito DHCP Servers
Save manual effort and generate reports easily using intelligent the DHCP discovery process. Address Commander automatically discovers the giaddr and type of service or device that a scope services.
DHCP configurations of routing elements and adjacent networks are gathered and represented automatically. Scopes and subnets are associated to the routing element using giaddr information. Scopes are also classified by service through user defined logic.
This automatic routing element discovery and service class classification result in significant reduction in manual configurations and allow the creation of important usage reports.
Integration with device provisioning for better management and tracking.
Vendor-agnostic DHCP integration
While Address Commander supports CNR and microsoft DHCP out of the box, connectors can be created for any DHCP vendor. The process is simple and involves creating two scripts that generate a standardize XML file. This can be performed in-house or with the assistance of the Incognito services team.
Schedule Automatic Capture of DHCP Usage
Address Commander calculates the usage of each discovered DHCP scope and aggregates the information to align with subnets. This allows your organization to report on the utilization of address space, whether it is being used in a static assignment or a dynamic scope.
Automatically Detect Problematic DHCP Configurations
Address Commander automatically detects problematic configurations, records the DHCP problem along with its source, and recommends a possible solution. For example, if all or part of a dynamic range was given to two different DHCP deployments, a diagnostic problem will be reported, declaring the scope and the two DHCP servers in question. The administrator can then review the problem detected and take the necessary action.
With full DHCP integration, you can automatically assign static IP addresses from one central interface.