Changing IPAM Policy

You can also manually allow or deny from Node List and Matrix View.

the following IPAM options are available when selecting nodes from the node view or IP's from the matrix view

Changing the New Node Policy on Network Sensors

(The IP management policy can be changed in the settings of each sensor)

  1. Go to the System tab at the top menu.
  2. From the left panel under System, navigate to System > Sensor.
  3. Click the IP Address of the desired sensor.
  4. Click the Node tasks tab, then select Sensor Settings.
  5. In the IPAM section, find the New Node Policy menu and change the application mode.
  6. Click the Update button to save the changes.

To Allow or Deny IPAM from Node List

  1. Go to Management > Node in the top panel
  2. Click Checkbox of the desired node in the Node window
  3. Click Tasks > IP/MAC Policy
  4. Select the desired options:
  • Deny IP
  • Allow IP: Allow an IP Address, but do not reserve the IP address.
  • Allow IP for Specific MACs: Allow an IP Address, and reserve it to a specific MAC address. (Additional MACs may be added by selecting the node, and editing under the IP Policy section.)
  • Enable Hostname Policy for IP (Require host name to meet the Hostname Policy defined in the node policy. See: Managing Nodes )
  • Remove Hostname Policy for IP
  • Time Restriction for IP: Set allowed time period for IP.
  • Edit IPAM New Node Policy for Reserved IP: (Choose: Allow MAC, Enable Conflict Prevention, Enable Change Prevention, or Enable Conflict Prevention/Change Prevention)
  • Edit IP Purpose (Choose: Dynamic, Static, or Temporary IP Address)
  • Deny MAC
  • Allow MAC: Allow an IP Address, but do not mandate an IP address.
  • Allow MAC - Current IP for Current Sensor: Allow a MAC Address, and mandate a specific IP address on a specific sensor managed network.
  • Allow MAC - Current IP for All Sensors: allows the MAC to use only the specified IP of the node.(All IP bands can only use the specified IP within the entire NAC management scope.)
  • Time Restriction for MAC: Set allowed time period for MAC.
  • Deny IP/MAC: Deny an IP and MAC Address
  • Allow IP and MAC: Allow an IP and MAC
  • Enable Conflict/Change Prevention: Enable IP Change and conflict Prevention for a node’s IP/MAC

To Allow or Deny IPAM from Matrix View

  1. Go to Management > IP Address in the top panel
  2. Click on the desired Sensor’s Name
  3. Find IP Address Square and click to highlight square
  4. Click Tasks
  5. Select the desired options:
  • Add Node
  • Remove Node
  • Deny IP
  • Allow IP: Allow an IP Address, but do not reserve the IP address.
  • Allow IP for Specific MACs: Allow an IP Address, and reserve it to a specific MAC address.
  • Enable Conflict/Change Prevention: Enable IP Change and conflict Prevention for a node’s IP/MAC
  • Edit IPAM New Node Policy for New Node Settings (Choose: Allow MAC, Enable Conflict Prevention, Enable Change Prevention, or Enable Conflict Prevention/Change Prevention)
  • IP Time Allowance
  • Assign User IP Ownership
  • Assign Department IP Ownership:Set the IP ownership department. (IP ownership department setting can be used as a condition item for node groups.)
  • Define IP Purpose (Choose: Dynamic, Static, or Temporary IP Address)

Note

Denied IP/MAC Addresses are highlighted in light red with the text of the IP Address having a strikethrough