IP Block Management

Managing IP Blocks

IP Blocks are edited and managed in either IPAM Manage or the IPAM Gadget.

From either area, you can perform standard block-level actions such as assign, unassign, split, merge, edit attributes, track NAT associations, and more.

The primary difference between the two areas is that IPAM Manage shows all blocks (or all blocks under an aggregate), regardless of assignment or status, where the IPAM Gadget shows only the blocks assigned to the specific resource that you are currently viewing on the Resource Entry Page. However, the IPAM Gadget has more advanced assignment options and criteria available (Direct Assign, Smart Assign, Smart Browse).

Aggregate-Level Actions

Some aggregate-level actions are performed in IPAM Manage, such as setting IPAM alerts and using Aggregate Templates.

These actions are detailed on the IPAM Tab page under Working with IPAM Aggregates. This page will focus primarily on block-level actions and management. 

Working in IPAM Manage

In IPAM Manage, you can manage aggregate level actions, such as Split , Clean Up, Alerts, and Export, as well as viewing and managing individual blocks. In IPAM Manage - Advanced, aggregate-level actions are not available.

Open IPAM Manage for a specific Aggregate

Open the IPAM Manage screen for a block or aggregate by:

• Searching for the block in the Global search, and clicking on the resulting CIDR

• View the parent aggregate for a Global search / IPAM search result by right clicking to open the action menu for the block, then select "View Parent Aggregate".

  

• Clicking the "Open" link in the aggregate blocks list from the IPAM tab.
  
• Clicking on the CIDR header of the Aggregate Block Host Utilization module, or selecting "Manage Aggregate" from the module's Gear Icon from the IPAM tab.
  
• Clicking on the CIDR displayed in the IPAM Map - Aggregates view.
  

Open IPAM Manage for all Aggregates/Blocks

Open IPAM Manage for all blocks under all aggregates by clicking the "Advanced" button at the top of the IPAM tab. 

This will open IPAM Manage for all blocks in ProVision, with all the same filters, block edit functions, and search capabilities as in 'standard' IPAM Manage for an aggregate, but with no aggregate-level actions available. 

IPAM Manage Views

There are multiple view options in IPAM Manage to view and/or edit blocks: Block View, Parent View, and Netblock Tree. 

Block View (Default)

Block View is the default IPAM Manage Aggregate screen. Block View displays only the lowest level leaf nodes of aggregates / blocks that exist in ProVision. In this view, all blocks displayed are ProVision objects able to be edited or managed. 

Parent View / Blocks Tree

Parent View shows both low level child blocks and the parent blocks that contain them. 

While in Manage aggregate, view parent blocks / IP block hierarchy, click on "Switch to Parent View" at the top of the block list. 

You may also enter Parent View via the "Filter" menu, by checking the "Select All Masks" checkbox and clicking "Apply", to show all masks and parent blocks.

Parent Blocks are distinguished by having a CIDR address link, and displaying a blue bar denoting "Has Children" under the "Assigned to" column. 

Both Parent and Child blocks may be edited in this view.

Clicking on the Parent Block blue CIDR link will display the Parent View Blocks Tree, providing a simplified hierarchy view.

To search blocks by CIDR use the searchbox at upper right. This will highlight the specific block. For larger trees, you can limit the view to search results only by enabling the checkbox for "show results only".

Netblock Tree

Netblock Tree View displays the hierarchy organization of Parent / Child blocks under a Top Level Aggregate, but eliminates intermediate "bookkeeping" / allocated blocks, and prioritizes masks with assigned blocks. This provides a more effective view at the specific hierarchy levels used for assignments and management.

The Netblock Tree view detects which subnet masks have changes in assignments applied, and then automatically builds branches or displays individual addresses at those levels. This view includes the display of theoretical blocks which do not currently exist as ProVision objects, providing a more holistic working overview of the netblock structure.

While in Netblock Tree View, click on the expansion caret to expand / close a hierarchy branch parent block. Only blocks which exist in ProVision will be able to be edited or expanded.

Netblock Tree Logic:

• The top level at which an assignment exists denotes the top starting mask of the Netblock Tree View
•  Proceeding down the tree, if one of the following conditions are detected, a new branch is created showing all blocks with a prefix at that level - regardless of of whether they exist as editable ProVision block objects.
  • A change in assignment is detected (a block is assigned to a different resource than its parent )
  • A manual split has been performed at the assignment level of a sibling/cousin block
• If no more changes in assignment are detected down the block tree, the lowest branch will display as containing individual addresses (/32s or /128s). The addresses may be both theoretical and those existing in ProVision.
• Expandable branches display with blue arrows, and denote that the block with that prefix also exists in ProVision → Block View
• Blocks and addresses which exist in ProVision will be editable in Netblock Tree View, but theoretical blocks at any level are not editable unless created in ProVision. 

Example Walkthrough: 

Working in IPAM Manage Views

Sort Blocks

Sort the IPAM Manage blocks list by clicking on any column name the in list with the up-down arrows icon (↓↑).

The list will sort between ascending and descending order for that field. 

Filter / Search Blocks

Filter the block list in IPAM Manage by toggling the "Filter +" link in the top right corner of the aggregate header. 

A flyout will appear with filter criteria options. Select or type the option under your desired field, and hit "Apply". A red filter flag indicates the number of filters applied to the list. When done, click "clear". To hide the filter flyout, just click the "filter -" link again.

Once a filter(s) has been applied, click on "Make Default" and the filtered block list will be saved as the default view for that aggregate. When a filtered view is saved as the default the filter flag will continue to display.

You may also search for a specific block entering a full or partial CIDR, assigned resource name, or other search term into the search box at the top of the list.

Important Blocks

"Important" IP blocks display with a yellow background highlight. By default, any block that has been manually assigned, unassigned, or had other high-level manual interactions performed will be automatically marked as "Important". 

Blocks may be manually marked or unmarked as "Important" from either the "Edit Block" interface or from the API.

To edit the important flag, open Edit block, then select / deselect the toggle for "Mark this block as important", and save your changes.

If multiple blocks are selected with mixed "important" statuses, then the toggle will display in the "Off" position.

To update all selected blocks to flag as important, switch the toggle to "On", and save changes. To switch all to the "Off" position, you may either toggle all blocks to "On", save changes, then switch all blocks back to "Off" and re-save, or adjust your selection to only include the blocks that need the Important Flag removed. (Tip: Use the list filter to show only "important" blocks!)

Working with IP Blocks - Common Tasks

Individual Blocks may be managed from either IPAM Manage, or the IPAM Gadget.  (if assigned to a resource, and the IPAM Gadget is enabled on the Resource's Entry Page). 

In general, standard actions from the Action Menu will be performed the same in either area, with "Assign" being the exception.

For details on some common tasks to perform with IP Blocks, see the next section: Working with IP Blocks - Common Tasks:

Additional Information

For additional information on working with the IPAM system, see the following areas:

• IPAM Gadgets 
• Working with IP Rules
• IPAM Administration
• Working with NAT Blocks