What are you using for "IP Address Management"?.....looking for some guidance!!

We are considering InfoBlox as well and have had a demo in our test lab for the last 30 days or so. Looks good for a DHCP/IPAM solution but it seems to lack two important DNS features: 1. GLBS to balance web traffic 2. DDOS protection We are now considering a hybrid, best of breed DNS/DHCP deployment using both F5 and IB. Anyone out there using something like this? http://www.f5.com/pdf/white-papers/infoblox-wp.pdf -Scott Scott Allen Deputy Director Network and Computing Systems Georgetown University Information Services 3300 Whitehaven Street, NW Suite 2018 Washington, DC 20007 scott@georgetown.edu 202-687-5643 - Office 202-309-5739 - Cell ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

We use Cisco GSS devices to accomplish DNS-based GSLB. (BTW, I don't recommend Cisco GSS. It works, but that is about it. And I wish our Cisco ACE appliances had this feature built-in.) We use the delegation architecture, where we have created a "l.weber.edu" domain that is delegated to the GSS devices. We then create CNAME records that point to the l.weber.edu domain. GSLB allows us to have automatic data center failure recovery (we use 15 minute TTLs on the DNS records). Tristan -- -- Tristan Rhodes Network Engineer Weber State University (801) 626-8549 >>> On 11/14/2011 at 10:43 AM, in message <017a01cca2f4$ea41ea10$bec5be30$@georgetown.edu>, Scott Allen wrote: > We are considering InfoBlox as well and have had a demo in our test lab for > the last 30 days or so. > Looks good for a DHCP/IPAM solution but it seems to lack two important DNS > features: > > 1. GLBS to balance web traffic > 2. DDOS protection > > We are now considering a hybrid, best of breed DNS/DHCP deployment using > both F5 and IB. > Anyone out there using something like this? > > http://www.f5.com/pdf/white-papers/infoblox-wp.pdf > > -Scott > > Scott Allen > Deputy Director Network and Computing Systems > Georgetown University Information Services > 3300 Whitehaven Street, NW Suite 2018 > Washington, DC 20007 > scott@georgetown.edu > 202-687-5643 - Office > 202-309-5739 - Cell > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Just refreshing this thread to get current feedback concerning integrated DHCP, DNS and IPAM (DDI) services. We are strongly considering either a BlueCat or Infoblox deployment this summer and would appreciate hearing any affirmations or consternations with either. Additionally, this looks like a two-horse race: are there any other integrated DDI solutions out there that have generated marked success? Thanks in advance... - Gerard Duguay, Seattle Pacific University > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Message from chris.piety@mtsu.edu

BT Diamond IP is worth a look. Chris

We have implemented BlueCat with great success and has been in operations for about a year with no real problems. Good luck ! Robert Ball Manager, Network Operations, IET Kwantlen Polytechnic University t 604.599.2404 f 604.599.2320 e Robert.Ball@kwantlen.ca www.kwantlen.ca This e-mail and any attachments may be confidential or legally privileged. If you received this message in error or are not the intended recipient, please destroy the e-mail message and any attachments or copies.

My vote goes to Infoblox. We have it deployed with a high availability pair and have been very pleased with the solution. Ken The Univ. of Texas of the Permian Basin On 3/22/2012 10:18 AM, Duguay, Gerard wrote: > Colleagues: > > Just refreshing this thread to get current feedback concerning integrated DHCP, DNS and IPAM (DDI) services. We are strongly considering either a BlueCat or Infoblox deployment this summer and would appreciate hearing any affirmations or consternations with either. Additionally, this looks like a two-horse race: are there any other integrated DDI solutions out there that have generated marked success? > > Thanks in advance... > > - Gerard Duguay, Seattle Pacific University > > >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found at http://www.educause.edu/groups/. > ********** > Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. > > ********** > Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

As a side question, we have InfoBlox which has great built-in IPAM function, then how can you or we motive spreadsheet folks moving into IPAM?
On Thu, 2012-03-22 at 15:18 +0000, Duguay, Gerard wrote:

Colleagues: Just refreshing this thread to get current feedback concerning integrated DHCP, DNS and IPAM (DDI) services. We are strongly considering either a BlueCat or Infoblox deployment this summer and would appreciate hearing any affirmations or consternations with either. Additionally, this looks like a two-horse race: are there any other integrated DDI solutions out there that have generated marked success? Thanks in advance... - Gerard Duguay, Seattle Pacific University > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

-- Leo Song, Senior Analyst & Cluster Lead Computing and Communication Services - Networking and Security University of Guelph (519) 824-4120 x 53181

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Message from jethro.binks@strath.ac.uk

On Thu, 22 Mar 2012, Duguay, Gerard wrote: > Just refreshing this thread to get current feedback concerning > integrated DHCP, DNS and IPAM (DDI) services. We are strongly > considering either a BlueCat or Infoblox deployment this summer and > would appreciate hearing any affirmations or consternations with either. > Additionally, this looks like a two-horse race: are there any other > integrated DDI solutions out there that have generated marked success? BT Diamond IP has been mentioned, also add Efficient IP to your two-horse list of four. No experience in any, but a great interest in doing something soon. Jethro. . . . . . . . . . . . . . . . . . . . . . . . . . Jethro R Binks, Network Manager, Information Services Directorate, University Of Strathclyde, Glasgow, UK The University of Strathclyde is a charitable body, registered in Scotland, number SC015263. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Men and Mice is in that race also. Cisco, Microsoft, EasyDNS, PowerDNS, OpenDNS are running different races. We are using a home-spun solution that pre-dates the buzzword. Not sure there is even a track for us. Randall Grimshaw rgrimsha@syr.edu ________________________________________

Hello Folks, I can chime in here with a brief overview of our DDI solution. We recently transitioned over to a set of 4 Infoblox 1852a appliances (December 2011). I feel we made a great choice with Infoblox. The product works well and has great flexibility to get information from the services, make updates to configurations and upgrade NIOS versions (Operating System). We are using the product for DNS (we support DDNS in MS AD environment), DHCPD failover configuration, NTP service & IPAM. Overall Infoblox provides the best customer service I have ever experienced. I also believe they are committed to similar goals and direction that the university environment is going. Some of the areas here are dynamic allocation of network resources and automated change management features/capabilities. The product offers a very good and well documented Perl API to get information as well as make changes. I would be happy to field questions off-line in regard to why we chose Infoblox, transition details, sizing the product or any other aspect of the product. Thank you, Scott K. stk unh . edu University of New Hampshire

We migrated from Bluecat (which we had for about 5 years) to Infoblox. I am much, much happier with Infoblox. No technical issues so far, built in IPAM, and nice Perl API for doing some dorm registration stuff. So far it's more flexible and just as reliable as the Bluecat architecture we replaced. On 3/22/2012 11:18 AM, Duguay, Gerard wrote: > Colleagues: > > Just refreshing this thread to get current feedback concerning integrated DHCP, DNS and IPAM (DDI) services. We are strongly considering either a BlueCat or Infoblox deployment this summer and would appreciate hearing any affirmations or consternations with either. Additionally, this looks like a two-horse race: are there any other integrated DDI solutions out there that have generated marked success? > > Thanks in advance... > > - Gerard Duguay, Seattle Pacific University > > >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found at http://www.educause.edu/groups/. > ********** > Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. > > ********** > Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

What has driven your need for a solution like this?  I know the spreadsheet method is not ideal for managing IPs but why incur the cost of implementation and maintenance for a service like this?  Where is the ROI?  

John Kaftan
Infrastructure Manager
Utica College

----- Reply message -----
From: "Vlade Ristevski" <vristevs@RAMAPO.EDU>
Date: Fri, Mar 23, 2012 10:46 pm
Subject: [NETMAN] What are you using for "IP Address Management"?.....looking for some guidance!!
To: <NETMAN@listserv.educause.edu>

We migrated from Bluecat (which we had for about 5 years) to Infoblox. I
am much, much happier with Infoblox. No technical issues so far, built
in IPAM, and nice Perl API for doing some dorm registration stuff. So
far it's more flexible and just as reliable as the Bluecat architecture
we replaced.

On 3/22/2012 11:18 AM, Duguay, Gerard wrote:
> Colleagues:
>
> Just refreshing this thread to get current feedback concerning integrated DHCP, DNS and IPAM (DDI) services. We are strongly considering either a BlueCat or Infoblox deployment this summer and would appreciate hearing any affirmations or consternations with either.  Additionally, this looks like a two-horse race: are there any other integrated DDI solutions out there that have generated marked success?
>
> Thanks in advance...
>
> - Gerard Duguay, Seattle Pacific University
>
>
>> **********
>> Participation and subscription information for this EDUCAUSE Constituent
>> Group discussion list can be found at http://www.educause.edu/groups/.
> **********
> Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
>
> **********
> Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

We are a fairly small shop.  We only have to edit DNS a few times a year.  We just use MS for DHCP and DNS and a spreadsheet for static IP address management.  For us I don't see the ROI but in a bigger shop like yours  I can see the value.  Thank you for taking the time to explain.


John Kaftan
Infrastructure Manager
Utica College

----- Reply message -----
From: "Chris Fabri" <fabric@NORTHWESTERN.EDU>
Date: Sat, Mar 24, 2012 10:18 am
Subject: [NETMAN] What are you using for "IP Address Management"?.....looking for some guidance!!
To: <NETMAN@listserv.educause.edu>

On 3/24/2012 7:10 PM, jkaftan@utica.edu wrote:

We are a fairly small shop.  We only have to edit DNS a few times a year.  We just use MS for DHCP and DNS and a spreadsheet for static IP address management.  For us I don't see the ROI but in a bigger shop like yours  I can see the value.  Thank you for taking the time to explain.

For DHCP, we have gone from Linux to Windows and back to Linux again.  The move back was to ISC DHCPD in a failover configuration, and we have since updated the members to be actual linux clusters - a real server and a VM secondary.

For DNS, we have remained unix, from Solaris to current Linux.  Not quite up to the cluster failover but it's on our roadmap.  We have multiple slaves and "spread the joy" by customizing the servers handed out in the various DHCP scopes.  We run separate internal and external servers (due to below) which is some extra effort for public-facing servers/names needing entries both places.

For IP address management, we use RFC1918 addressing :)  With that much space, you can make much clearer allocations of addressing without having to shape-to-fit whatever real IP blocks you may be trying to manage.  It still fits the spreadsheet model well :)

Jeff
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

They came in cheaper than the Bluecat replacement. Our staff is very limited as well so we can delegate some of the DHCP tasks to staff who don't have to be fluent in Unix/Bind/ISC . Whatever devices don't work with our Cisco NAC (PS3, XBOX, Smartphone etc) need to be added to our DHCP so they can be exempt from the NAC. The API makes this very reliable and easy. So the ROI in our case is that we don't have to hire an extra Unix guy since we're already short staffed in that area. They also have a built in NAC feature that might be an option for smaller schools. We might look into using this as well once our Cisco NAC nears EOL. We really haven't used the IPAM part of the solution yet. I really haven't had the time to look at that yet, but since it comes with the product I'll be looking into it over the summer. I'm sure with the API, we'll be able to make good use of it. Same goes for trialing their NetMRI product. It looks like it all comes together in a nice package. On 3/24/2012 9:51 AM, jkaftan@utica.edu wrote: > What has driven your need for a solution like this? I know the > spreadsheet method is not ideal for managing IPs but why incur the > cost of implementation and maintenance for a service like this? Where > is the ROI? > > John Kaftan > Infrastructure Manager > Utica College > > ----- Reply message ----- > From: "Vlade Ristevski" > Date: Fri, Mar 23, 2012 10:46 pm > Subject: [NETMAN] What are you using for "IP Address > Management"?.....looking for some guidance!! > To: > > We migrated from Bluecat (which we had for about 5 years) to Infoblox. I > am much, much happier with Infoblox. No technical issues so far, built > in IPAM, and nice Perl API for doing some dorm registration stuff. So > far it's more flexible and just as reliable as the Bluecat architecture > we replaced. > > On 3/22/2012 11:18 AM, Duguay, Gerard wrote: > > Colleagues: > > > > Just refreshing this thread to get current feedback concerning > integrated DHCP, DNS and IPAM (DDI) services. We are strongly > considering either a BlueCat or Infoblox deployment this summer and > would appreciate hearing any affirmations or consternations with > either. Additionally, this looks like a two-horse race: are there any > other integrated DDI solutions out there that have generated marked > success? > > > > Thanks in advance... > > > > - Gerard Duguay, Seattle Pacific University > > > > > >> ********** > >> Participation and subscription information for this EDUCAUSE > Constituent > >> Group discussion list can be found at http://www.educause.edu/groups/. > > ********** > > Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > > > ********** > > Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** > Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Looking forward Windows Server 8 is scheduled to have some IPAM functionality, depending on your environment and timetable it may be worth a look as it would be a significantly cheaper solution for most. ~Patrick -----Original Message----- From: The EDUCAUSE Network Management Constituent Group Listserv [mailto:NETMAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Fabri Sent: Sunday, March 25, 2012 11:10 AM To: NETMAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [NETMAN] What are you using for "IP Address Management"?.....looking for some guidance!!