Real-Time Location
The real-time location function searches the MAC address learning tables of all managed switches in the system by IP address or MAC address to locate a device in the network topology and also obtain the access device and access interface of the device. This function applies to the following scenarios:
- Locates the access location of an attacker according to the source IP address or MAC address so that administrators can take proper actions (such as shut down the access interface) to block subsequent attacks from that device.
- Locates the access devices and access interfaces of terminal devices (including PCs, servers, printers, and IP phones).
- Bydefault, the real-time location function searches the Layer 2 information inreal-time to locate the access location of an endpoint device. This processmight take a while if the system manages a large number of network devices. Youcan enable fast location to allow the system to search the Layer 2 informationin its cache to improve location efficiency. However, the improved efficiencycomes at the cost of accuracy, so use this feature with caution. To enable fastlocation, open the qvdm.conf file in the \server\conf directoryof the system installation path, and then set the value of l2topo_RTLS_Search_Memto 1.
Operation Procedure
- Click the Resource tab, and then click the Real-Time Location link to enter the real-time location page.
- Type the IP address or MAC address you want to locate.
- Click OK.
Precautions
- The real-time location process may take a while if the system is busy or the numbers of network devices and ports are large. In this case, wait for a while or try again later.
- By default, the real-time location function is available only on UNIS and Intelbras devices. To support third-party devices, enable Enable Realtime Location Extension in the system parameter settings. Enabling real-time location extension requires high performance on the Layer 2 topology network. Perform this operation with caution.
- Only wired network endpoints are supported.
- If the real-time location process produces only one result entry, it indicates that INC has located the access device to which the selected endpoint is connected for network access. If the process produces multiple result entries, it indicates that INC cannot pinpoint the access device and the result lists all the devices (switches or routers) that have learned the endpoint's MAC address.