HI GUYS i am new in iem 9.2 , can anybody suggest me how to configure relay affilation for subnet based network

Usage and Config Security
1

HI GUYS i am new in iem 9.2 , can anybody suggest me how to configure relay affilation for subnet based network.

2

I don’t have experience with dividing it by subnet but my implementation is done by domain root. Would something like that work?

3

How large is your network?

I manage an environment that supports systems across 3000+ subnets, and have been working on a set of Tasks to automate the assignment of Relay Affiliation groups and “Geographic Location” information.

If a system moves from one Subnet to another, the system will adjust the settings automatically via an open ended Task.

4

we have around 20 subnets & each subnet has more than 1000 client . i am looking for the steps so that i can merge my relays with subnet.

your earliest reply will be thankful.

5

yes please share me the steps

6

I think I should preface this posting with the statement “I am NOT an IBM Employee, I’m just someone who has used BigFix for a long time”.

I have not finished creating/testing the Tasks. When I finish them, I’ll post them to BigFix.me and update this thread.

The basic process will go something like this …

  1. An Excel file is created with three columns.
    a. Subnet
    b. Subnet description (we are using it as a Description of the Location)
    c. Relay Affiliation Groups
  2. The file is saved in the CSV format.
  3. The file is added to a Custom Site that All Computers are subscribed to.
  4. A Task is added to the Custom Site and deployed as an Open Ended Action (no End Date)

The first Task is the functional portion of the process. It is written to trigger only on Non-Relay systems when a Client Setting “LastSubnet” either “Does Not Exist” or “Is Different than the Current Subnet”. This implies that the Endpoint has been connected to a “new” subnet and needs to determine the Subnet Description and set the appropriate Affiliation Groups.

The Task will set the “LastSubnet” setting as well as “LocationDescription” and the “_BESClient_Register_Affiliation_SeekList” using the information from the CSV file distributed as part of the Custom Site subscription.

The second Task is intended to Automate the configuration of the Relays themselves. When a Relay determines that it is in a Subnet other than what is listed in “LastSubnet” it will find it’s current Subnet in the CSV file, then configure it’s “_BESRelay_Register_Affiliation_AdvertisementList” setting to the first Affiliation Group listed in the 3rd column of the CSV file.

Example CSV file …
“10.1.2.0”, “Main Office”, "Zone1;Zone2;Zone3"
“10.1.3.0”, “Server Room”, "Zone4"
“10.1.4.0”, “North Building”, "Zone1;Zone2;Zone3"
“10.1.5.0”, “Build Room”, "Zone3;Zone4"
“10.1.6.0”, “South Building”, "Zone2;Zone3;Zone1"
“10.1.7.0”, “Research Lab 1”, “Zone2;Zone3;Zone1”

1 Like