How to setup scan-agent for RHEL?

[dwnocturnal]

I see the instructions on the site for setting up the scan-agent, but I feel like I am missing something? Is that all that needs to be done (setup linux, install PHP, install the phpipam-agent)? Do I need to do a full blown install of phpipam? How will I tell it to look at the db on the actual master phpipam server instead of locally?

I have phpipam setup on RHEL and plan on doing 2-3 scan-agents on RHEL as well.
I tried looking for a topic on this already and couldn't find one...apologies if there is one already.

[baijuw]

I am at a loss too with respect to the subnet ping scan. I have always used RHEL or Centos and have never had this feature working. I have followed the instructions on how to get it enabled. But it never works.

[anyunpu]

check ping path

[baijuw]

I have verified the path for both ping and fping. Everything seems to be correct. The results are the same, it's unable to pick up a single node on that subnet although I know that there are many active nodes in this range.

```[root@ipam ~]# which ping
/bin/ping
[root@ipam ~]# which fping
/sbin/fping
```

[dwnocturnal]

This seems to be getting off my original topic. If you have a separate question, please open a new issue.

[GaryAllan]

Hello

Common ping issues are selinux policies https://phpipam.net/news/selinux-policy-for-icmp-checks/

Also check fping permissions for non-root users...

getcap /path/to/your/fping
/usr/bin/fping = cap_net_raw+ep

If cap_net_raw+ep isn't set, enable it with...

sudo setcap 'CAP_NET_RAW+ep' /path/to/your/fping

Hello!

I too am also running into problems setting up a scan-agent.

I was able to get the Agent installed on a separate server and communicating back to the main IPAM Server that contains the Database. When I run the "php index.php discover" and "php index.php update" from command line or crontab, it does publish the results to the DB and I am able to see them.

The issue I run into is when I go into the GUI and select the "Scan Subnet for New Host" button and select Discovery Scans: Ping Scan I get no alive host found for newly added hosts. When I select Status Update Scans: Ping Scan I get the list of IP's already in the table with "Offline" in every Status.

I would like to be able to use the 2nd scanner to actually do the scan through the GUI in addition to the "Discover & Update" index.php method. I also have the wording "autodiscovered" in the description that I would like to get rid of during the initial scan.

I can confirm the following:
Agent can connect and write to DB.
No Firewalls running on ether server.
No SELinux running on either server.
Master IPAM and Agent on different subnets but able to communicate on all ports without issues.
Both running CentOS (Master = 7.7.1908, Agent = 7.7.1908)
Both running PHP v. 5.4.16

My workaround is to convert the "Agent" into a 2nd Master and scan my subnet's that way. It's not ideal but willing to go through the work. Any help would greatly be appreciated.