Report or FlexView to find ports with more than 3 MAC addresses

[Yves_Haslimann]

Hello everybody

I'm searching for all switchports with more than 3 MAC addresses. The goal is to find unmanaged switches in my network. I tried to do it with a FlexView, but I couldn't find a matching MIB. Does anybody solved this problem already?

Thank you very much. Yves

[Yves_Haslimann]

Thank you for your answer. Since my SQL skills are limited, I will probably go the conventional way. . But if I find time, I'll check this. Thanks.

[Kurt_Semba]

Well, then you could create a custom report for XMC that implements an SQL query against the NAC end-system database. That query could select all unique switchport names (would need to combine the switch IP with the port name) and then count the occurances. That should give you the number of end-systems seen per port. Then filter for those which have a count larger than 3.

Haven't tried to solve this specific use case but with SQL it should be doable.

But this requires some knowledge of the DB and the XML report.

Unfortunately, not as easy as a FlexView...

[Yves_Haslimann]

Hi Kurt, yes I have.

[Kurt_Semba]

Do you have NAC rolled out?