topic DFM2.0.4: Avoid duplicate IP address alert in Network Security

DFM2.0.4: Avoid duplicate IP address alert

qlgendrano — Fri, 21 Feb 2020 09:12:07 GMT

How to avoid duplicate IP address alerts from devices with HSRP and virtual IP configuration?

Re: DFM2.0.4: Avoid duplicate IP address alert

David Stanford — Fri, 29 Sep 2006 13:29:14 GMT

Here are a few things you can do:

Option 1: Unmanage the IP address. "

You can manage devices at the port level. Look at the next link:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/dfm/dfm20/ug/

useaad.htm#wp1283054

Or you can go to DFM -> Device Management -> Device Details -> Known devices,

select one and hit View. Then click on the device name and select unmanage for the

interfaces related to HSRP.

Option 2 Also you can create a view to stop the messages from that interface to DFM:

HSRP addresses

10.80.44.1

10.80.44.2

10.80.44.3

1. Unmanage the device in DFM

2. Create an SNMP view on one of the devices

snmp-server view dup internet included

snmp-server view dup ipAddrEntry.*.80.44.1 excluded

snmp-server view dup ipAddrEntry. *.80.44.2 excluded

snmp-server view dup ipAddrEntry. *.80.44.3 excluded

snmp-server community view dup RO

Re: DFM2.0.4: Avoid duplicate IP address alert

qlgendrano — Mon, 02 Oct 2006 15:19:01 GMT

Thanks for the reply. Originally, the ports which are switched vlan interfaces, are all unmanage. However, DFM still detects the IP address configure on it. I've opened a case about this long time ago but it was never resolved, rather they gave me the instructions to purge the alert manually through EPM.

Thanks anyway, I'm hoping that there will be other solution for these, because these duplicate IP alerts are giving our network monitoring team lots of false alert.