0

i have a huge task to do and i need your help.I am new to the whole networking world and I apologize if this is a re-post of a question. so what i wanted is to discover and mapping all my enterprise network on a web app using network standard commands and protocol but not using snmp. I have a huge network with devices from many vendor such as huawei NE40, Cicco, Juniper, fortinet ...

I directed this question to you experts cause i do not have the knowledge or know the keywords to search online on this subject matter.

  • Sounds like you want to screw without a screwdriver... – JFL Aug 29 '17 at 9:41
  • If you don't want to reinvent the wheel, there are several software solutions available that will map out the network topology. – John K. Aug 29 '17 at 11:51
  • @JohnK. is there some that are multi-vendor and don't rely on SNMP? (nor LLDP since it's not enabled as stated in a comment on Zac67 answer). – JFL Aug 29 '17 at 12:40
  • I don't actually see a question anywhere in your post. Question are sentences that end with question marks (?). If you are looking for a product or resource recommendation, those are explicitly off-topic here, as they are on most SE sites, except Software Recommendations and Hardware Recommendations. – Ron Maupin Aug 29 '17 at 14:03
  • OK. I am looking for an approach because i wanted to developp my own network discovery tools or start from an existing open source solution that i could customized for my company – billz_the_king Aug 29 '17 at 14:09
2

It depends on what layer you want to/can discover devices. At the link layer, LLDP comes to mind but it requires you to directly interface with the device and only gives just a few items.

In a layer 2 network, you can scan for MAC/IP addresses by ARP. The vendor specific part (OUI) of the MAC tells you the vendor. Reverse DNS possibly tells you the device name.

When it comes to applications, it gets hard. You'd need to do a port scan which takes quite a while and only tells you on which ports a device accepts connections. Port probing might reveal what is behind a port but requires to know what you're looking for.

SNMP is a standardized protocol for exactly this purpose and it allows you to efficiently collect a wide range of information. If you want to collect detailed info without SNMP you'd probably need to do it manually (ie. look at each config).

  • i use telnet to interface with the devices and CDP to sh their neighbours. it'is walk good only in the cisco devices. LLDP is not enable on my network. i am working on link layer! how could i work do use only one approach for all kind on devices? – billz_the_king Aug 29 '17 at 11:23
  • LLDP on the link layer (very limited data) and SNMP on L3 are probably the only non-proprietary choices you have. – Zac67 Aug 29 '17 at 12:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.