cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6796
Views
5
Helpful
7
Replies

How to search MAC or IP Address through network infraestructure?

gpinero
Level 1
Level 1

Hi all, I'm looking for a solution to search MAC or IP address through a network (all CISCO Infraestructure) and I have some doubts:

Is possible to do this with Cisco Prime Infraestructure 3... ¿API Rest? 

https://developer.cisco.com/site/prime-infrastructure/documents/api-reference/rest-api-v3-0/

https://prime_ip_addr/webacs/api/v1/data/Devices?ipAddress="192.168.1.1"

I do not get data ¿Prime track all clients through the infraestructure?

Any python script to search trhough all switches using CDP?

Someone has mounted something similar to perform searches

Any recommendations?

CCNP R&S, CCNP Security, CCNA CyberOps
1 Accepted Solution

Accepted Solutions

Have a look at the training video for "Monitoring Features Overview" here:

http://www.cisco.com/c/m/en_us/training-events/product-training/prime-training-infrastructure.html

Specifically, around 17:00 onwards they show you how to use "Monitor > Monitoring Tools > Clients and Users". Later in the viedo they cover data collection setup as well.

If your PI is collecting the data, you should be able to find users by MAC address. It uses the 2-byte : 2-byte etc. format you tried inn your second example above.

View solution in original post

7 Replies 7

Oleg Serstjuk
Level 1
Level 1

I think prime can do this, one of our customers uses this, but I cannot find the link or name of the plugin or app.

Its a small popup that runs in your windows tray down on the right, from there you can put it MAC address or IP or phone DN, it has a good few options and it will find the device, the switch its plugged into and all the details know about the device nearly down to last seen I think.

We used it for telephony and was great as ports shut down over port security and all the end user knew was their extension, so you could just type in the extensions and get the switch IP and clear the port security

Thanks Oleg, Can you find the name of this plugin, please?? More info about it

CCNP R&S, CCNP Security, CCNA CyberOps

I think Oleg may be remembering the old Prime LMS User Tracking system tray tool. It was quite handy for doing just that. Under the covers it was a lightweight client that queried the Prime LMS database directly.

Cisco has deprecated that and now favors using Prime Infrastructure.

If you do as M. suggests and look under the unified search tool (top right corner) in Prime Infrastructure 3.x it will indeed dop the job. That's assuming you have Prime Infrastucture setup properly. It will pull all the mac address tables, arp caches etc and correlate the data for you.

Thanks all, if i search MAC address in the dialog box at upper right corner I do not get any result.

I try it in two different formats:

b4b5.2fcd.bbaa

b4:b5:2f:cd:b5:88

I have CISCO PI v3.14 ¿How do I set up Cisco Prime to collect this data (ip arp, mac address tables, etc...)?

Thanks again.

CCNP R&S, CCNP Security, CCNA CyberOps

Have a look at the training video for "Monitoring Features Overview" here:

http://www.cisco.com/c/m/en_us/training-events/product-training/prime-training-infrastructure.html

Specifically, around 17:00 onwards they show you how to use "Monitor > Monitoring Tools > Clients and Users". Later in the viedo they cover data collection setup as well.

If your PI is collecting the data, you should be able to find users by MAC address. It uses the 2-byte : 2-byte etc. format you tried inn your second example above.

Yes! that's the one

marce1000
VIP
VIP

   - You can also, simply use the search field in Prime, to look for an ip or mac address.

M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !