Create reconciliation policies - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

Use the following procedure to create a reconciliation policy:

  1. Select the Reconciliation policies tab.
  2. Select New policy.
  3. In the Create reconciliation policy window that appears, set the following parameters under General:
    Note: Parameters marked with an asterisk (*) in the UI are mandatory.
    • Name—enter a unique name for the reconciliation policy.
    • Discovery task—from the drop-down list, select a discovery task to be associated with the reconciliation policy.
    • Discovery result—select one of the following options for the discovery result that will be associated with the reconciliation policy:
      • Use result from the next run—to run the reconciliation policy with results from the next scheduled discovery task.
        Note: If a reconciliation policy is configured to use results from the next scheduled discovery task, you cannot run the reconciliation policy manually at the current time (on-demand) by using the Run now option because the results aren't available in the current time. Such reconciliation policies can only run at the scheduled time (that is, the schedule of the associated discovery task).
      • Select an existing discovery result—to run the reconciliation policy with results from a previously-run discovery task. If you select this option, a drop-down list appears from which you must select a discovery result associated with the selected discovery task.
  4. Under Reconciliation scope, set the following parameters:
    • Address Manager configuration—from the drop-down list, select an Address Manager configuration to which the reconciliation policy applies.
    • Address Manager view—from the drop-down list, select an Address Manager DNS view against which the reconciliation process will be performed. If you do not select a view, IP addresses will be reconciled against all DNS views.
    • Network boundaries—enter an IPv4/IPv6 range in CIDR notation, then select the add (+) button. Network boundaries define the ranges within which you want to search for devices. You can add multiple boundaries based on your existing network structure to minimize traffic and impact on the network.
      Note: BlueCat recommends that you avoid using 0.0.0.0/0 as a CIDR network boundary due to its overly broad scope and increased reconciliation time. Instead, use appropriate network boundaries for efficient reconciliation.
    • Override list—specify one or more addresses and ranges that the policy should ignore. Enter a single IP address, CIDR block (nnn.nnn.nnn.nnn/mm), or IP address range (nnn.nnn.nnn.nnn-nnn.nnn.nnn.nnn), then select the add (+) button.
  5. Under Acceptance criteria, set the following parameters:
    • Enable automated acceptance—select the checkbox to enable the automatic reconciliation process, which places any IP addresses found by the discovery process into the Address Manager database automatically.

      • If you do not select this option, you must perform reconciliation manually.

      • If you select this option, the following additional options are displayed; select one or more of the following options to reconcile or notify you of IP addresses older than your selected time::
        • Reconcile reclaimable addresses—select the checkbox to reconcile reclaimable IP addresses older than your selected time. If you select this option, you must also specify the Time interval and Unit (in Days, Hours, or Minutes).

          A reclaimable address is an address that exists in Address Manager, but isn't found on the physical network. This may represent a device that was turned off at the time of the discovery, or the address may no longer exist on the network.

        • Reconcile unknown addresses—select the checkbox to reconcile unknown IP addresses older than your selected time. If you select this option, you must also specify the Time interval and Unit (in Days, Hours, or Minutes).

          An unknown address is an address that exists on the physical network, but that's not in Address Manager. This likely represents an address that has been added to the network after the last discovery.

        • Reconcile mismatched addresses—select the checkbox to reconcile mismatched IP addresses older than your selected time. If you select this option, you must also specify the Time interval and Unit (in Days, Hours, or Minutes).

          A mismatched address is an address that exists in both Address Manager and on the network, but where the MAC address, DNS host name information, VLAN information or connected switch port doesn't match.

        Automatic reconciliation starts immediately after the discovery process returns all discovered IP addresses. If a Reconcile option is selected for the type of IP address, and the IP address is older than the time interval selected, the IP address is reconciled. If Reconcile options are not selected, the IP address isn't reconciled.

  6. Select Create to create the reconciliation policy and return to the Reconciliation policies table, which will now display the policy you created.
Attention: Reconciliation policies fail to execute after system time moves backward due to NTP updates. To prevent this issue, ensure that the NTP service is synchronized before enabling the Network Discovery & Visibility Feature Module. If you update (synchronize) the NTP service after enabling the Feature Module, you must restart the Network Discovery & Visibility Feature Module. After restart, the scheduled run times for all jobs are calculated from the beginning.