This Question is Answered

1 "correct" answer available (20 pts)
15 Replies Last post: Oct 14, 2008 10:52 AM by Matt   1 2 Previous Next
Matt Rookie 27 posts since
Jan 22, 2008
Currently Being Moderated

Sep 23, 2008 11:20 AM

Unmanaged Device Discovery using ip range

Hello,

New 8.8 SP-2 installed on new core, with over 350 agents from previous 8.7 core

I  ran an unmanaged device discovery using 6 ip ranges to discover PC's

1. Why does the unmanaged discover list include devices that are not in the ranges I specified?

2. Why did I only pick up 1/2 of my PC's? in the All devices folder?

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
1. Sep 23, 2008 11:56 AM in response to: Matt
Re: Unmanaged Device Discovery using ip range

To be honest, I don't see why you would find ANY of the computers that appear in your All devices folder. By definition, devices in your all devices folder are in fact Managed.

And just a guess, but did you specify things other than IP? Like maybe LDAP or NT domain. If the NT Domain check box is checked it will go well beyond the IP's you set up.

I think this is a case of needing more information to give you a good answer.

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
3. Sep 23, 2008 12:21 PM in response to: Matt
Re: Unmanaged Device Discovery using ip range

Well, from my 32bit console, I have Standard LANDesk agent checked as well as PDS2 Discovery. Not sure from the console what the options are, but this is how I found my "managed: clients that were on my old core. I will runa  test and see if it still scans for me.

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
4. Sep 23, 2008 12:25 PM in response to: Matt
Re: Unmanaged Device Discovery using ip range

Yea, try checking Discover Devices with LANDesk CBA installed and the box under that PDS2 installed

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
6. Sep 23, 2008 12:37 PM in response to: Matt
Re: Unmanaged Device Discovery using ip range

CBA_anonymous is an account that is created by CBA8 when an anonymous connection to it is created.  It is a guest account.

And I think PDS2 stands for LAndesk "Ping Discovery Service" but don't quote me on that.

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
7. Sep 23, 2008 1:35 PM in response to: Matt
Re: Unmanaged Device Discovery using ip range

Did that fix it for you?

rhyous Expert 750 posts since
Nov 19, 2007
Currently Being Moderated
8. Sep 23, 2008 2:00 PM in response to: Dicipulus
Re: Unmanaged Device Discovery using ip range

When you do a scan for the CBA or PDS2 it is a directed broadcast packet, usually dropped by all routers these days when crossing subnets.

 

Might not do you any good.

 

 

Jack Coates Expert 796 posts since
Nov 16, 2007
Currently Being Moderated
10. Sep 23, 2008 3:27 PM in response to: Matt
Re: Unmanaged Device Discovery using ip range

Are you ever filtering out machines that aren't on the network any more? If not, the old 350 node number included everything that was ever seen, even once. With XDD turned on, that can get big fast. ldms_core cleans them out for you, among other things.

MarXtar Expert 724 posts since
Jul 2, 2008
Currently Being Moderated
12. Sep 24, 2008 3:27 AM in response to: Matt
Re: Unmanaged Device Discovery using ip range

Are you sure the following is covered:

 

  1. You are scanning all of the ip address ranges you need to scan

    1. A good way to find out is to create a dummy targeted multicast job for cache only and then see the subnets identified in the multcast console when the job starts since it breaks the job into the detected subnets in the inventory automatically

  2. All of the machines are definitely on at the time that you scan

    1. Your number appears to have increased against your first post so is it just that machines are coming back online over time?

  3. Your machines have their firewall configured correctly for communication

    1. Just because they had an 8.7 agent on them doesn't mean 100% that they were still contactable by ping

    2. Identify 'missing' machines on a target subnet and try this yourself when you know for certain they are online

If you are really confident that all 350 machines should be contactable at the time of your ping sweep then use your old 8.7 server and target them with a very simple script such as an inventory scan.  How many devices in that task report as being non-contactable?  if they all come back positive then there is something wrong with the ping sweep either in the settings or a bug.

 

In short, you suspect that the results are innacurate.  this is either incorrect configuration on the sweep, systems not responding, a bug in UDD, or incorrect expectations.  Using the above you should be able to work out which is the case.

 

Mark Star - MarXtar LANDesk Enhancements

Home of Power State Notifier & Wake-On-WAN for LANDesk

 

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
13. Sep 25, 2008 8:46 AM in response to: Matt
Re: Unmanaged Device Discovery using ip range

Not to sound daft, but if it were me.......

 

I would run an nMap scan of the IP ranges you have in unmanged discovery and see if the machines show up and show the correct ports open. Let's make sure they are able to be seen at all via something that is not LANdesk or Microsoft. After we confirm that they show up with nMap then we can figure out what is borking this process.

Jack has a great little integration for the core server that runs nMap to fingerprint machines, you might look into that as well.

It would seem to me if you can not use LANdesk unmanaged discovery to find them and plain old nMap doesnt see them then it is a firewall issue?  nMap can/does scan across sub-nets and get by routers just fine.   Zenmap is a nice GUI version that works well, I would suggest just out putting it to a file otherwise it can get unmanageable.

Dicipulus Rookie 38 posts since
Jan 3, 2008
Currently Being Moderated
14. Sep 30, 2008 1:22 PM in response to: Matt
Re: Unmanaged Device Discovery using ip range

It ever work out?

More Like This

  • Retrieving data ...
LANDesk Community powered by Jive Software's Clearspace ® Subscribe| Legal Notices| Investor Relations| Avocent| Privacy Policy © 2009 LANDesk Software