kind off "ARP" test

menno · Joined: 21 May 2010 Posts: 149

I like to see a test method that respond to MAC address changes.

we authorized all our phones & tablets via MAC address filter so we know EVERY mac address of our devices in the building

for example we have several mobile phones/tablets running in and out of the building.
It is nice to see if that mobile device ( phone or tablet ) is in the building.
Because you can not ping android or windows mobile phones and we do not know the ip address we still want to see if the device is in the building.

if the mac address is not available ...there is a possibility that this device is not in the building. Thats all we need

if the mac address is available we can test if the hostname is correct via the MAC address.

i hope you will understand my question,.
many thanks in advance
Menno

KS-Soft · Joined: 03 Apr 2002 Posts: 12148 Location: USA

Not sure how this can be done.
Inverse ARP requests? Will it work in your network? I think normally routers do not pass ARP traffic so you can get result only if cell phones connected to the same network segment as HostMonitor.

Regards
Alex

menno · Joined: 21 May 2010 Posts: 149

KS-Soft · Joined: 03 Apr 2002 Posts: 12148 Location: USA

Then I think you may setup such check using SNMP Table test method
- host: IP address of your router
- Table OID: 1.3.6.1.2.1.4.22.1.2
- Alert when any item = <MACaddress> (e.g. %71%2A%34%2C%62%3E)

Some routers allow to specify how long entries remain in the ARP cache
(e.g. arp timeout command, CISCO IOS).
E.g. if you setup HostMonitor to perform test every 5 min, you may set arp timeout to 150 sec

Regards
Alex