Extend the platform,
empower your team.
Scan through your subnets and build an inventory of SNMP-enabled network devices
ExtensionThis ActiveGate extension takes subnets and ranges of IP addresses along with SNMP credentials and scans through them to discover SNMP-enabled network devices. The devices are then reported as entities acting as an entry point to specialized extension configurations.
This is intended for users who:
This extension enables you to:
After adding the extension to your environment, create a monitoring configuration.
Configuration parameters:
10.0.0.0-10.0.2.0
)10.0.20.0/24
)
192.168.0.48/32
)entities.read
scope, to reduce the scanner load once devices become fully monitoredOnce configured, the extension executes a simple snmpget
request to any configured address and aims to extract 4 simple OIDs (sysName, sysDescr, sysObjectId, sysContact, sysLocation) which it then ingests as a log record.
In addition, the extension packages a topology and metrics model that brings together all network devices and maps them to available extensions that can get deeper insights into the health and performance of that specific technology.
This extension ingests 1 log record per detected device every 10 minutes, which is subject to license consumption.
ActiveGates can be configured with several levels of resource utilization limits, called performance profiles. By default, more restrictive limits are applied. Whenever you plan to scan over more than 1000 IP addresses, it is recommended that you configure your ActiveGate to use the High limits profile. With particularly large setups, the Dedicated profile allows the extension to leverage even more of the ActiveGate's resources.
To enable the High limits profile on an ActiveGate, navigate to Deployment Status. From there, find your ActiveGate, expand the row, and click on Settings. On the Extension Execution Controller tab, the dropdown allows you to select a different profile.
To enable the Dedicated profile, please follow the instructions here. Note: when following the instructions, please leave the restInterface
option enabled.
In addition, you should adjust the scan parameters accordingly (see the below answer).
The frequency and number of threads should be adjusted based on ActiveGate resources and the size of scanned subnets. As the main consumed resource on the ActiveGate is CPU, load tests were ran simulating the load through unresponsive IPs (keeping the CPU blocked and active).
The following tables show an example of how to adjust these parameters based on load and recommended ActiveGate sizing (labelled S (c7i.large), M (c7i.xlarge), and L (c7i.2xlarge)):
High limits profile:
| Load (IPs) | Threads (S) | Threads (M) | Threads (L) | Time (S) | Time (M) | Time (L) |
| ---------- | ----------- | ----------- | ----------- | -------- | -------- | -------- |
| 800 | 5 | 8 | 20 | 3 min | 2.5 min | 2 min |
| 1,600 | 3 | 8 | 20 | 9.6 min | 3.6 min | 2.9 min |
| 3,000 | 3 | 6 | 20 | 19 min | 9.4 min | 5.4 min |
| 5,000 | 3 | 6 | 20 | 30 min | 15 min | 8.8 min |
| 10,000 | 3 | 6 | 20 | 1 hr | 31 min | 18 min |
Dedicated limits profile:
| Load | Threads (S) | Threads (M) | Threads (L) | Time (S) | Time (M) | Time (L) |
| ------ | ----------- | ----------- | ----------- | --------- | -------- | -------- |
| 1,000 | 20 | 20 | 40 | 1.5 min. | 1 min. | < 1 min. |
| 3,000 | 7 | 15 | 30 | 8 min. | 5.1 min. | 4 min. |
| 5,000 | 7 | 15 | 30 | 13.4 min. | 8 min. | 8 min. |
| 10,000 | 7 | 15 | 20 | 24 min. | 18 min. | 18 min. |
To reduce the load on the scanner, but also allow monitored data to take priority, the extension requires an API Token. Please ensure the token has 'Read entities' permission. Also, ensure that the API routing module (restInterface
) is enabled on the ActiveGate (even on a Dedicated profile).
Our specialized extensions are being updated to adopt the new network entity model. Currently, only devices monitored by the following extensions will be part of the topology:
Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual feature sets can be activated and deactivated by your administrator during configuration.
Metric name | Metric key | Description | Unit |
---|---|---|---|
Devices OK | sfm.snmp_autodiscovery.devices_ok | The amount of addresses that responded to the scanner query as part of a given configuration. | Count |
Devices scanned | sfm.snmp_autodiscovery.devices_scanned | The total amount of addresses that were scanned by the extension as part of a given configuration. | Count |
Scan duration | sfm.snmp_autodiscovery.scan_duration | The time the extension took to scan through all addresses that are part of a given configuration. | NanoSecond |
self-monitoring
feature set, which includes 3 diagnostic metrics:
First public release.