Notification via SMTP when duplicated IP found on LAN

[debcu]

Hello,
I have question. Is there any way to receive notification from switch (via SMTP (e-mail)) when duplicated IP found on network. For example:
I'm using about 10 Cisco 2950 and 2 Cisco 3550 in my network. I'm using A class (10.39.220.0/22). I would like to receive notification via e-mail from switch when duplicate IP appear in network. The best way would be if in notification would be information on which switch duplicate IP appear and on what port.
Thanks a lot for your help.

 

[UnaBomber]

Not with a switch you cant.

Perhaps some 3rd party product could help.

I would hypothises that you would need to poll your Switches, Routers MIB tables, produces a report from the information contained within, then compare the results.

Your remit is very precise so I would suggest looking at some open source software

 

[nbowden]

If you have the CiscoWorks LMS software, you can get some duplicate IP address reports out of that if User Tracking.

Also, DFM in LMS may give some alerts.

But, the previous poster is right, I think that you need some external software to monitor this.

I'm not sure if the layer 3 switch would give you any sort of syslog message. I've had a look around on Google and it looks like some Cisco layer 3 devices (routers) will report a duplicate IP address. Maybe a solution might be to enable syslog from the router and put a duplicate device on the network to see if the router reports it.

If it does, then maybe set up a syslog server (e.g. Kiwi syslog server :

http://www.kiwisyslog.com/syslog-info.php)

which can generate emails from syslog messages.

HTH


HTH

Nigel Bowden

http://www.bowden-software.com