The Discovery tab is first step to identifying network resources to add to your inventory. Here, you can use configuration files, paste text configs, or use automated scanning options to identify devices to use for discovery.
The Discovery tab allows the user to gather IP topography data via the following methods, organized as sub-tabs: DHCP, DNS, Firewall, Generic Config, mDNS, Load Balancer, Ping Scan, RIR, Router Configs, SNMP, ARP, and SSDP.
RIR
RIR discovery establishes a baseline of public space. From here, NetAudit will use the current user’s IP / provided IP, and then query the WHOIS system to find its ASN. From there, it queries again in order to discover allocations.
Router Configs
The Router Config page allows the user to either paste full router configs, upload a single config file, or provide an archive of files. NetAudit parses these configs for configured networks.
Currently supported router configs include the following:
Cisco IOS
Cisco IOS-XR
Juniper
Arista
Direct from Router (WHERE/HOW?)
You may also provide credentials for a router, connect via SSH, and then pull the config + ARP table in order to acquire router configs.
Firewall
Connects to Firewall configs (Palo Alto, Fortinet).
Load Balancer
Connects to Load Balancer configs (F5).
ARP
……
DNS
Connects to DNS servers to ………..?
Ping Scan
DHCP
Connects to DHCP usage logs. NetAudit uses this to determine whether allocated DHCP subnets can be shrunk. Currently supports ISC DHCP, though Microsoft support is expected in a future release.
SSH ARP
…..
Next Steps
Once one or more of the available Discovery modules has been processed, all found space will be loaded into the Inventory tab for display and auditing.