Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

HTML
<div id="google_translate_element"></div>
<script type="text/javascript">
function googleTranslateElementInit() {
  new google.translate.TranslateElement({pageLanguage: 'en'}, 'google_translate_element');
}
</script>
<script type="text/javascript" src="//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit"></script>

IP Block Management

Image RemovedImage Added

Managing IP Blocks

...

From either area, you can perform standard block-level actions such as assign, unassign, split, merge, edit attributes, track NAT associations, and more.

The primary difference between the two areas is that IPAM Manage shows all blocks (or all blocks under an aggregate), regardless of assignment or status, where the IPAM Gadget shows only the blocks assigned to the specific resource that you are currently viewing on the Resource Entry Page. However, the IPAM Gadget has more advanced assignment options and criteria available (Direct Assign, Smart Assign, Smart Browse).

...

Expand
titleIPAM Manage Details...

IPAM Manage Features

Image RemovedImage Added

IPAM Manage is accessed from: the IPAM Tab → Edit Aggregate / Aggregate CIDR; IPAM Tab →Advanced button; and most block CIDR Links in ProVision. Here, you can:

  • Sort, Filter, and Export the block list
  • Auto-Split and Clean-up templates available for aggregates
  • View all blocks (IPAM Advanced), or all blocks under an aggregate, regardless of assignment
  • Shows blocks from all statuses - available, in holding, assigned, subassignable
  • Perform Single and Multi-block assignments and edits

...

Expand
titleIPAM Gadget Details...

IPAM Gadget Features


The IPAM Gadget is accessed from the Resource Entry Page → IPAM Gadget, once it has been enabled for the section. Here, you can:

  • View only the blocks assigned/assigned-and-subassignable under the Resource that you are currently viewing.
  • Sort and Filter the block list
  • Advanced assignment functions - Direct Assign, Smart Assign, and Smart browse with additional field criteria criterial available.
  • Perform single and multi-block edit, and assign subassignable blocks.

Both IPAM Manage and the IPAM Gadget have customizable column names, order, and visibility, as well as options for user-defined meta columns (for details on setting up customization of the IPAM Manage / IPAM Gadget block list, see IPAM Parameters → Edit Columns).

...

Table of Contents

Working in IPAM Manage

Image RemovedImage Added

In IPAM Manage, you can manage aggregate level actions, such as Split , Clean Up, Alerts, and Export, as well as viewing and managing individual blocks. In IPAM Manage - Advanced, aggregate-level actions are not available.

...

The list will sort between ascending and descending order for that field. 

Image RemovedImage Added

Filter Blocks

Filter the block list in IPAM Manage by toggling the "Filter +" link in the top right corner of the aggregate header. 

A flyout will appear with filter criteria options. Type in or search for the term under your desired field, and hit "Apply". When done, click "clear". To hide the filter flyout, just click the "filter -" link again.

Image RemovedImage Added

Type in or search for the term under your desired field, and hit "Apply".

...

To view parent blocks / IP block hierarchy, click on "Switch to Parent View" at the top of the block list.

Image Removed

You may also enter Parent View  from in the "Filter" menu, by checking check the "Select All Masks" checkbox and clicking click "Apply".

Once all masks are enabled to view, the block list changes to include the "Parent" blocks, showing all masks throughout the assignment tree. 

A parent block with children will show "Has Children" in the column where assignment status is shown, its immediate child resource (if applicable) and the block CIDR will show as a clickable link.

Image RemovedImage Added

Clicking on the CIDR for a block that has children will open "Block Tree" view, showing the hierarchy of blocks and their assignments.

Image RemovedImage Added

Important Blocks

"Important" IP blocks display with a yellow background highlight. By default, any block that has been manually assigned, unassigned, or had other high-level manual interactions performed will be automatically marked as "Important". 

Image Removed

Blocks may be manually marked or unmarked as "Important" from either the "Edit Block" interface (by opening "Edit" for the block, then selecting the toggle for "Mark this block as important"), or from the API .

Image Removed

If multiple blocks are selected with mixed "important" statuses, then the toggle will display in the "Off" position. To update all selected blocks to flag as important, switch the toggle to "On", and save changes. To switch all to the "Off" position, you may either toggle all blocks to "On", save changes, then switch all blocks back to "Off" and re-save, or adjust your selection to only include the blocks that need the Important Flag removed. (Tip: Use the list filter to show only "important" blocks!)

Working with IP Blocks - Common Tasks

Individual Blocks may be managed from either IPAM Manage, or the IPAM Gadget.  (if assigned to a resource, and the IPAM Gadget is enabled on the Resource's Entry Page). 

In general, standard actions from the Action Menu will be performed the same in either area, with "Assign" being the exception.

IPAM Block Action Menu - Overview

Most actions performed with block managed are contained under the IPAM Manage - Action Menu. Open the Action Menu by left clicking on the Gear Icon, or right clicking anywhere on the block's row. The same Action Menu is also available to manage blocks via the IPAM Gadget.

...

width25%

Image Removed

Column
width75%

The Action Menu contains the following options:

  • Edit: Opens the blocks "Edit Attributes" page, used to add, change, or remove data associated with a block. Can also be opened by double clicking on a block's row.
  • Split: Splits the selected single block into two equal smaller blocks, of the next smallest mask, e.g. a /24 will be split into two /25s. The Split option is not available for blocks that are already of the smallest available size ( IPv4 /32s or IPv6 /128s), for blocks in "Holding", or for blocks that are already assigned and do not have subassignments enabled. If more than one level of splitting is needed, use "Templates - Auto Split" instead. 

  • Merge: The opposite of Split. Merge combines two blocks of equal size into the next largest mask, e.g., two /25s will be merged into one /24. Merge is only available for adjacent blocks of the same size that are "Available", in "Holding", or is subassignable.

  • Assign: Assigns the block to a ProVision Resource, making it unavailable for other assignment actions and certain block actions (unless edited to be subassignable).

  • Move: Moves IP Blocks from one resource to another without the need to pass through either the Holding or Available status.
  • Unassign: Unassigns the Resource from the current block, and moves the block into the Holding Tank. The block may then be eligible for certain actions such as direct assignment, merge, and split - but not for automated assignments until it is removed from Holding and regains the "Available" status. Unassigning a subassigned block will first place the block in "Holding", and then restore it to the parent assignment. (Tip: You can "Unassign" twice in a row to bypass "Holding", or select "Unassign, Skip Holding".)

  • Unassign, Skip Holding: Unassigns the Resource from the current block, and bypasses the Holding Tank, restoring the block to "Available" status (or to the parent assignment if the block was subassigned). 

  • RIR Integration: Provides SWIP/RPSL functions for ARIN and RIPE blocks through simple reassigns, sending the updated block assignment information back to the coordinating RIR (ARIN or RIPE). See LIR Management and Use and RIR Integration: SWIP/RPSL.

  • IP Rules: Create or Associate an IP Rule to the block to reserve portions of the block from assignment. See IPAM Rules.

  • Templates: Provides options to 'Auto-Split' a standard block (that is available for standard "split" functionality) down to a certain mask and limit, or "Clean Up"(Auto-merge) a Parent Block to a certain mask level. 

  • Logs: Shows recent log event actions associated with that block.

  • Configure NAT: Only displays for NAT'ed blocks. Configures the NAT'ed block to the selected router.
  • Email: If a Contact is associated with the Resource assigned to the block, an email form with display to email the Contact with the template options provided in Admin Settings

Split or Merge Blocks Manually

To split a block manually, click on the Action Menu (Gear icon), or right-click anywhere in the row for the available block you wish to modify.

In the menu that appears, select the "Split" function.

To aggregate blocks, select "Merge" from the same menu. 

Image Removed

The Split option is not available for blocks that are already of the smallest available size ( IPv4 /32s or IPv6 /128s), for blocks in "Holding", or for blocks that are already assigned and do not have subassignments enabled. If more than one level of splitting is needed, use "Templates - Auto Split" instead. 

Merge is only available for adjacent blocks of the same size that are "Available", in "Holding", or is subassignable.

Split or Merge Blocks Using Templates

Templates for a block are available under the Action Menu (wrench icon or right-click) for that block. Templates are only usable from IPAM Manage.

Image Removed

There are two templates available: Cleanup (Only available for parent blocks) which auto-aggregates the block, and Auto-split. 

Select the available template action, the mask, and the limit. When done, click the "Apply" button.

Image Removed

You can also use the "Templates" option from the Action Menu on the IPAM Manage screen for the specific block. 

Edit IP Block Attributes

You may edit a block / multiple blocks from either IPAM Manage or the IPAM Gadget, with the same options available.

Select the "Edit" option from the Action Menu (or double click on the block row) for a given block to get the Edit Attributes menu. 

Image Removed

To edit multiple blocks at a time, shift-click each block you wish to edit - they will highlight in blue. Once selected, right-click on any highlighted block to open the multi-edit attributes screen.

Image Removed

Once selected, right-click on any highlighted block to open the multi-edit attributes screen.

From here you can set a variety of attributes for a given block. These values are also customizable from the Admin screen - see IPAM Administration and IPAM Parameters to customize, enable, or disable the available parameters. 

Tip

If a field that you know is supported in ProVision appears to be 'missing' from the IPAM Mange, IPAM Manage filters, or Edit Attributes screens, check the following:

Have an Admin verify that the field is set to "enabled" in Admin → IPAM Admin → Edit Columns. Any field disabled here will be hidden throughout ProVision, and some functions are dependent on certain fields being enabled - for example, filtering by Mask in IPAM Manage requires the "Host" field to be enabled.

In IPAM manage, verify that the column widths of each field are set wide enough to display the column header

Check for a scroll bar - when all attributes are enabled, many screens will require scrolling down or to the right in order to see all of the available data.

After editing the desired attributes for the block, simply hit "Save". 

Image Removed

Edit Attributes Overview:

RIR: The RIR associated with the aggregate / block.

LIR: If LIRs are set up in IPAM Admin for the associated RIR, they will be selectable in this dropdown. See LIR Management and Use.

Domain: The VLAN Domain to associate with the block.  To set up domains in ProVision,  see VLAN - Working with Domains.

VLAN: VLAN information for the block, must have domain selected to view available VLANs.

Generic: This is a customizable text field that can be used to track information specific to your needs. It can be filtered in the IPAM Manage screen. The header, display, and enable/disable settings for this field are set under IPAM Configuration in the IPAM Administration section. 

ASN: The ASN to associate with the block. ProVision auto-generates AS-Resources when an ASN is provided for the field in standard ASN format.

Region: Select the region from the drop down menu. Regions can be added and customized in the IPAM Admin section of ProVision - see IPAM Administration and IPAM Parameters

...

Working with IP Blocks - Common Tasks

Individual Blocks may be managed from either IPAM Manage, or the IPAM Gadget.  (if assigned to a resource, and the IPAM Gadget is enabled on the Resource's Entry Page). 

In general, standard actions from the Action Menu will be performed the same in either area, with "Assign" being the exception.

IPAM Block Action Menu - Overview

Most actions performed with block managed are contained under the IPAM Manage - Action Menu. Open the Action Menu by left clicking on the Gear Icon, or right clicking anywhere on the block's row. The same Action Menu is also available to manage blocks via the IPAM Gadget.

Image Added

The Action Menu contains the following options:

  • Edit: Opens the blocks "Edit Attributes" page, used to add, change, or remove data associated with a block. Can also be opened by double clicking on a block's row.
  • Split: Splits the selected single block into two equal smaller blocks, of the next smallest mask, e.g. a /24 will be split into two /25s. The Split option is not available for blocks that are already of the smallest available size ( IPv4 /32s or IPv6 /128s), for blocks in "Holding", or for blocks that are already assigned and do not have subassignments enabled. If more than one level of splitting is needed, use "Templates - Auto Split" instead. 

  • Merge: The opposite of Split. Merge combines two blocks of equal size into the next largest mask, e.g., two /25s will be merged into one /24. Merge is only available for adjacent blocks of the same size that are "Available", in "Holding", or is subassignable.

  • Assign: Assigns the block to a ProVision Resource, making it unavailable for other assignment actions and certain block actions (unless edited to be subassignable).

  • Unassign: Unassigns the Resource from the current block, and moves the block into the Holding Tank. The block may then be eligible for certain actions such as direct assignment, merge, and split - but not for automated assignments until it is removed from Holding and regains the "Available" status. Unassigning a subassigned block will first place the block in "Holding", and then restore it to the parent assignment. (Tip: You can "Unassign" twice in a row to bypass "Holding", or select "Unassign, Skip Holding".)

  • Unassign, Skip Holding: Unassigns the Resource from the current block, and bypasses the Holding Tank, restoring the block to "Available" status (or to the parent assignment if the block was subassigned). 

  • RIR Integration: Provides SWIP/RPSL functions for ARIN and RIPE blocks through simple reassigns, sending the updated block assignment information back to the coordinating RIR (ARIN or RIPE). See LIR Management and Use and RIR Integration: SWIP/RPSL.

  • IP Rules: Create or Associate an IP Rule to the block to reserve portions of the block from assignment. See IPAM Rules.

  • Templates: Provides options to 'Auto-Split' a standard block (that is available for standard "split" functionality) down to a certain mask and limit, or "Clean Up"(Auto-merge) a Parent Block to a certain mask level. 

  • Logs: Shows recent log event actions associated with that block.

  • Email: If a Contact is associated with the Resource assigned to the block, an email form with display to email the Contact with the template options provided in Admin Settings

Split or Merge Blocks Manually

To split a block manually, click on the Action Menu (Gear icon), or right-click anywhere in the row for the available block you wish to modify.

In the menu that appears, select the "Split" function.

To aggregate blocks, select "Merge" from the same menu. 

Image Added

The Split option is not available for blocks that are already of the smallest available size ( IPv4 /32s or IPv6 /128s), for blocks in "Holding", or for blocks that are already assigned and do not have subassignments enabled. If more than one level of splitting is needed, use "Templates - Auto Split" instead. 

Merge is only available for adjacent blocks of the same size that are "Available", in "Holding", or is subassignable.

Split or Merge Blocks Using Templates

Templates for a block are available under the Action Menu (wrench icon or right-click) for that block. Templates are only usable from IPAM Manage.

Image Added

There are two templates available: Cleanup (Only available for parent blocks) which auto-aggregates the block, and Auto-split. 

Select the available template action, the mask, and the limit. When done, click the "Apply" button.

Image Added

You can also use the "Templates" option from the Action Menu on the IPAM Manage screen for the specific block. 

Edit IP Block Attributes

You may edit a block / multiple blocks from either IPAM Manage or the IPAM Gadget, with the same options available.

Select the "Edit" option from the Action Menu (or double click on the block row) for a given block to get the Edit Attributes menu. 


Image Added

To edit multiple blocks at a time, shift-click each block you wish to edit - they will highlight in blue. Once selected, right-click on any highlighted block to open the multi-edit attributes screen.

Image Added

Once selected, right-click on any highlighted block to open the multi-edit attributes screen.

From here you can set a variety of attributes for a given block. These values are also customizable from the Admin screen - see IPAM Administration and IPAM Parameters to customize, enable, or disable the available parameters. 

Tip

If a field that you know is supported in ProVision appears to be 'missing' from the IPAM Mange, IPAM Manage filters, or Edit Attributes screens, check the following:

Have an Admin verify that the field is set to "enabled" in Admin → IPAM Admin → Edit Columns. Any field disabled here will be hidden throughout ProVision, and some functions are dependent on certain fields being enabled - for example, filtering by Mask in IPAM Manage requires the "Host" field to be enabled.

In IPAM manage, verify that the column widths of each field are set wide enough to display the column header

Check for a scroll bar - when all attributes are enabled, many screens will require scrolling down or to the right in order to see all of the available data.


After editing the desired attributes for the block, simply hit "Save". 

Image Added

Edit Attributes Overview:

RIR: The RIR associated with the aggregate / block.

LIR: If LIRs are set up in IPAM Admin for the associated RIR, they will be selectable in this dropdown. See LIR Management and Use.

Domain: The VLAN Domain to associate with the block.  To set up domains in ProVision,  see VLAN Administration.

VLAN: VLAN information for the block, must have domain selected to view available VLANs.

Generic: This is a customizable text field that can be used to track information specific to your needs. It can be filtered in the IPAM Manage screen. The header, display, and enable/disable settings for this field are set under IPAM Configuration in the IPAM Administration section. 

ASN: The ASN to associate with the block.

Region: Select the region from the drop down menu. Regions can be added and customized in the IPAM Admin section of ProVision - see IPAM Administration and IPAM Parameters

Tags: Tags can be set under Edit Tags in the IPAM Administration section. 

Notes: Freeform text field for additional information you wish to capture. 

Resource: The resource assigned to the block.NAT: The corresponding public or private block CIDR that is associated with the current block Click "Create and assign" to create a new resource to assign the block to if desired.

Metadata1 - Metadata 10:  User-defined text fields,  as set in IPAM Administration Edit Columns.

Allow Sub-assignmentsSubassignments: When editing a block that has been assigned, toggling this setting to "On" allows for further subassignments, indicated by a blue arrow next to the assignment in the Manage screen. Note: Subassign status cannot be changed if a block has children. 

...

To view parent blocks, and which children would be affected, ensure that top level or all masks are selected in the Filter menu in the IPAM Manage screen. See Working with IP View Parent Blocks for more information.

Info
Note: The VLAN of a child cannot be different from that of its parent, so for multimutil-level situations (Parent -> Child -> Grandchild), VLAN should be updated at the top tier parent level.

Assign IP Space

IPAM Auto AS-Resource

ProVision automatically creates an AS resource for ASN's entered into IPAM Manage (formatted as "AS1234" or "1234").

Image Removed

An ASN in IPAM Manage will link to the created resource, which will display all IP Blocks in ProVision with that ASN value. SystemAS resources may not be edited, however they may be deleted by an admin if desired. 

Image Removed

Assign IP Space

There are two areas where you can assign IP Space: in the IPAM Gadget for the particular Resource, or through IPAM Manage for manually assigning a block to a resource.

The IPAM Gadget allows for more detailed assignment options including Direct Assign, Smart Browse, and Smart Assign with advanced options, and is the primary tool for space assignment. 

Assign Space from the IPAMv2 Gadget

The IPAM Gadget is accessed from a Resource Entry page, once enabled for the Section (to add Gadgets, see Customizing Sections and There are two areas where you can assign IP Space: in the IPAM Gadget for the particular Resource, or through IPAM Manage for manually assigning a block to a resource.

The IPAM Gadget allows for more detailed assignment options including Direct Assign, Smart Browse, and Smart Assign with advanced options, and is the primary tool for space assignment. 

Assign Space from the IPAMv2 Gadget

The IPAM Gadget is accessed from a Resource Entry page, once enabled for the Section (to add Gadgets, see Customizing Sections and Add Gadgets to your Section).

For additional details on the IPAMv2 Gadget, see Gadgets.

...

With Smart Assign, you enter criteria such as IP Type, Size, RIR, Region, and Tag information, then ProVision's automation will automatically assign a block meeting that criteriacritieria, if any exist. Smart Browse uses the same criteria, but provides a browsable list of blocks meeting that criteria for you to select from. 

...

You can also assign blocks manually using the "Assign" function from the IPAM Manager screen (accessible from the IPAM Tab). Open the Action Menu for a block, then select "Assign".

Image Modified

Assignments may also be performed for multiple blocks at a time, by shift-clicking the desired blocks, and right-clicking on any highlighted row to open the multi-block menu (choose "Assign Selected Blocks") :

Image RemovedImage Added


Then, search for / select the Resource to assign the block. A filter tool is provided to narrow the list to a particular Section type. 

...

After assigning, you can further edit the block attributes or subassign space.  

Tip
title'Reserving' IP Space

If you need to create a 'reserved' pool from which to assign blocks, you can achieve this by creating a "Reserved" Section. Create a Section called "Reserved", add the IPAM gadget to it, then create an Entry with that Section to be the address group. From there, use the IPAM gadget and the IPAM Manage page to assign and unassign IP space from that pool.

For more details, see the FAQ entry: "How do I 'reserve' IP Space?"

Sub Assigning IP Space

To allow sub assignments, just toggle the "Allow sub assignments" button to "On" under Edit block.  

Once the allow sub assignments box is checked, the block may be further split and assigned to other resources.  

Split blocks may also be re-claimed to the originally assigned resource and re-aggregated.  When "allow sub assignments" is checked, the block is counted as allocated, but not assigned - various statistics in IPAM, on the dashboard, and reporting will reflect this.

 Sub assignments can be useful for tracking IPs assigned to a customer with multiple subsidiaries, or locations.

Image Removed

If a block is subassignable, a blue arrow will display in the "Assigned To" field in IPAM Manage.

Image Removed

In the IPAM gadget, subassignable blocks display a blue arrow in the 'Address' field.

Image Removed

Unassign IP Space

When a block is assigned, you will have the option of unassigning the block from the resource and returning it to the Holding Tank.

To unassign the block, simply open on the Action Menu for the block in either IPAM manage or the IPAM Gadget,  and select "Unassign".

You may also chose "Unassign, Skip Hold", which unassigns the block and immediately returns it to available, bypassing the holding tank. 

Another option is "Move", which moves the block from one resource directly to another without passing it through either available or holding status.

Image Removed

After unassigning blocks / skipping holding, newly available blocks will be merged upon next page refresh. Blocks which had been subassigned will revet back to the parent resource.

To return IP space in the Holding Tank to the Available Pool, process the Holding Tank via the Admin screen under IPAM Admin (this will only process blocks that were present for the specified number of days).

Image Removed

For more information on the Holding Tank, see Holding Tank Management.

Tip

For a fast method of unassigning all blocks from a particular resource, you may also bulk-unassign IPs from the Resource List! See Working with Entries

Working with NAT Blocks 

Track IP NAT Associations

Track NAT associations between public and private (1918) blocks via the IPAM "NAT" Field.

The "NAT" field accepts a single IPv4 CIDR to associate with the current block, and automatically updates the corresponding block with the NAT association.  

Image Removed

Note

Working with NAT'ed Blocks

Use caution when managing NAT'ed blocks or aggregates - major actions that change either block's assignment or size (assign, unassign, split, merge, autosplit/cleanup) removes the NAT association. 

In this case, complete the necessary high-level block tasks, and then re-save the NAT CIDR association to either block. 

Enable NAT 

Enable the NAT field by navigating to IPAM Admin → Edit IPAM Columns.

Expand

From there, ensure that the NAT column is checked (enabled), and customize the column location if desired. Be sure to click "Update" to save any changes.

Image Removed

Create NAT Association

Ensure that the two appropriate IP Aggregates (one public, one 1918 private space) containing the desired blocks to NAT have been added into ProVision. (See: Working with IP Aggregates)

After verifying the aggregates and blocks, you may add the NAT association:

...

Open IPAM Manage for either aggregate, then open "Edit Block" for the specific block you wish to NAT. (See:Working with IP Blocks)

Image Removed

In the Edit Block dialog, enter the IPv4 CIDR of the corresponding NAT block. When complete, click "Save".

Image Removed

Once the NAT field has been saved, the association will display in the NAT Column. 

Image Removed

The corresponding block (here, the private 1918 space block) will automatically have the NAT associated applied.

Image Removed

Configure NAT to Router(s)

To push the NAT association to a router, go to the IPAM Manage Action Menu, and select "Configure NAT" for the NAT'ed block(s) (For information on adding a router to ProVision, see Peering Routers).

...

titleConfigure NAT...

Open the Action Menu for the NAT'ed block(s) and select "Configure NAT".

Image Removed

Then, select the router. Add the custom configuration /  interface information for the router and click "Configure".

...

NAT Rotate Dynamic IPs

NAT'ed block assignments may be automatically rotated to other available IPs via the "Rotate Dynamic IPs" scheduler task available in the  Admin → Scheduler tab 

"Rotate Dynamic IPs" reassigns single IPv4 NAT addresses (/32s) after 'x' days (since last config push) to an available address denoted by blocks associated with the Dynamic_Available tags.

Prior to using this task, two blocks (one public, one private) must be NAT'ed in IPAM, the NAT Config pushed to a router, and appropriate blocks tagged with "Dynamic_Base" and "Dynamic_Available". 

Enter a number for the days to wait (since last configure) until rotation. 

Image Removed

Enter scheduled start / end dates, repeat settings, and click "Save" when complete. 

The scheduled task will look for NAT'ed, /32 "Dynamic_Base" blocks that have last configuration times older than the provided day count, and rotate those IPs to "Dynamic_Available" blocks. Dynamic_Available blocks larger than than the Dynamic_Base block will be automatically split

space from that pool.

For more details, see the FAQ entry: "How do I 'reserve' IP Space?"

Expand
titleSet up NAT Dynamic Rotation...

Before you Begin

Before setting up NAT Dynamic IP Block Rotation, ensure the follow has been completed:

  • The public/private IP blocks exist in ProVision (as /32s) and have been set up with NAT Metadata and matching IP Tags
  • The NAT'ed blocks have been configured with a router
  • The Aggregate(s)/IP's exist in ProVision with sufficient "Available" space to use for Rotating the NAT'ed block(s)
  • IPAM Tags match between the NAT'ed blocks and intended available blocks

Add Dynamic Tags to Blocks

After NAT blocks and aggregates have been set up in ProVision with sufficient size, matching IPAM tags, and NAT metadata, you can identify which blocks to use for dynamic rotation by adding the "Dynamic_Base" and "Dynamic_Available" tags.

Expand
titleAdd Dynamic Tags...

Go to IPAM Manage and: 

  • Add the IPAM tag "Dynamic_Base" to the /32 block(s) currently NAT'ed. 
  • Add the IPAM tag "Dynamic_Available to the aggregate or blocks which match the NAT'ed blocks, and are available for rotation use. If used on a block larger than the Dynamic_Base block, the available block will be automatically split.

Image Removed

Set up Scheduler Task

Go to  Admin → Scheduler, Add the scheduler task "IPAM - Rotate Dynamic IPs". 

Expand
titleAdd Rotate Dynamic IPs Scheduled Task...


Sub Assigning IP Space

To allow sub assignments, just toggle the "Allow sub assignments" button to "On" under Edit block.  

Once the allow sub assignments box is checked, the block may be further split and assigned to other resources.  

Split blocks may also be re-claimed to the originally assigned resource and re-aggregated.  When "allow sub assignments" is checked, the block is counted as allocated, but not assigned - various statistics in IPAM, on the dashboard, and reporting will reflect this.

 Sub assignments can be useful for tracking IPs assigned to a customer with multiple subsidiaries, or locations.

Image Added

If a block is subassignable, a blue arrow will display in the "Assigned To" field in IPAM Manage.

Image Added

In the IPAM gadget, subassignable blocks display a blue arrow in the 'Address' field.

Image Added


Unassign IP Space

When a block is assigned, you will have the option of unassigning the block from the resource and returning it to the Holding Tank.

To unassign the block, simply open on the Action Menu for the block in either IPAM manage or the IPAM Gadget,  and select "Unassign".

You may also chose "Unassign, Skip Hold", which unassigns the block and immediately returns it to available, bypassing the holding tank. 

Image Added

After unassigning blocks / skipping holding, newly available blocks will be merged upon next page refresh. Blocks which had been subassigned will revet back to the parent resource.

To return IP space in the Holding Tank to the Available Pool, process the Holding Tank via the Admin screen under IPAM Admin (this will only process blocks that were present for the specified number of days).

Image Added

For more information on the Holding Tank, see Holding Tank Management.

Additional Information

For additional information on working with the IPAM system in ProVision, see the following areas:

...