# NeDi 1.0 configuration file (used by nedi.pl and the php UI).

#============================================================================
# Device Access
#============================================================================

# Snmp read communities (most frequent ones first).
comm		public

# The users for telnet and ssh access. Put most frequent ones first.
# Leave enable password empty, if the user is priviledged already.
# SSH cannot use enable pw, as only 1 command can be sent in a session.
# On HP Procurve configure 'console terminal none' for this to work!
#		user	pass	enablepass
usr		nedi	pa55	enpa55
usr		admin	enpa55

#============================================================================
# Discovery
#============================================================================

# If you have difficulties reaching certain devices, due to your setup or compatibility
# issues, you can map ip addresses [mapip] and telnet ports [maptp].
# If you mapip 0.0.0.0, the device will be ignored.
;mapip		192.168.0.1	0.0.0.0
;maptp		192.168.5.1	2323

# Only discover devices where ip address matches this regular expression. 
# This way NeDi won't send any login credentials to rogue/evil devices.
;netfilter	192.168.0|172.16
# To avoid networks
;netfilter       ^((?!192.168.1).)*$
netfilter	.

# Regular expression to match  devices which can be queried via http (like Cisco IP phones).
webdev		Phone

# Regular expression to match non-SNMP platforms (like Cisco IP phones or LW APs).
#leafdev	AIR-

# Define OUI vendor strings which NeDi should try to discover on MAC based discovery.
# Make sure you don't include CDP devices here, if you are using CDP discovery as well.
ouidev		bay|nortel|netics|xylogics|foundry|XYLAN|Netgear|Hewlett|RUBY

# Don't discover devices containing these strings in the description (e.g. Printers etc.)
;descfilter 	LaserJet|JETDIRECT|HP-UX|Linux

# You can specify a pattern to match CDPid's or MAC addresses (for oui discovery) where
#  the discovery should stop.
;border	WAN-router

#============================================================================
# Backend & Libraries
#============================================================================

# DB params
dbname		nedi
dbuser		nedi
dbpass		dbpa55
dbhost		localhost

# Set backend to MSQ for MySQL (others not implemented yet).
backend		MSQ
;backend	PSQ
;backend	ORC

# CLI library to use (only netssh implemented yet).
clilib		NetSSH
;clilib		NetApp
;clilib		DIS

#============================================================================
# Messaging & Monitoring
#============================================================================

# Generate messages during discovery related to:
# d	discovery	(discovery issues)
# c	configuration	(detected changes)
# n	node		(stolen tracking)
# t	traffic		(IF utilisation, see below)
# s	system	(system and environment based messages, see below)
notify		dcnts

# Thresholds for monitored values
# uptime specifies how many polls need to be lost to trigger alert
# mem is bytes availabe (only absolute due to design), cpu and traffic in %
# (errors alert when > 1/s or warn when > 1/min)
# temp in degrees Celsius (or whatever the variable is (ab)used for)
uptime-alert	2
cpu-alert	50
mem-alert	900000
temp-alert	35
traf-alert	66
traf-warn	33

# Time in secondes between monitoring polls (and refresh of Monitoring GUI)
pause		120

# Smtpserver to send notification emails to
smtpserver	smtp.yourdomain

# Address where notification emails are sent from
mailfrom	nedi@nedihost

#============================================================================
# Misc & Nodes Related Stuff
#============================================================================

# Read dynamic MAC address tables on IOS devices via CLI (d) or even get 
# Port Security entries (s) as well. Comment out to use SNMP only (former -s option).
getfwd		d

# A regular expression matching the vlans which shouldn't be checked for nodes.
# If you're unsure leave the default '^100[0-5]$' or set it to 'someweirdstring'
# but don't comment it out as this will cause errors.
ignoredvlans	^10[01][0-9]$

# Remove nodes (force IP, DNS and IF update) if inactive longer than this many days
retire		30

# Uncomment and specify path, if you want to use arpwatch for address resolution
# (If you can't use a router for your network, this can be of use).
;arpwatch	/var/arpwatch/arp.dat

# Timeout while using SNMP and telnet connections. An extra value will be added
# for reading configs due to the build time.
timeout		5

# This value needs to be set to the discovery interval in seconds. Make sure it
# corresponds to the NeDi's crontab entry (e.g. hourly "1 * * * *" => 3600).
rrdstep		3600

#============================================================================
# GUI Settings
#============================================================================

# Define the modules you wish to include in the menu and
# assign groups if you want.
#	Section		Module			Icon	Group
module	Devices		List			dev	net
module	Devices		Modules			cog	net
module	Devices		Interfaces		dumy	net
module	Devices		Vlans			stat	net
module	Devices		Status			hwif	net
module	Devices		Config			cfg2	net
module	Devices		Write			wrte	adm
module	Devices		Graph			dlog	net
module	Devices		Stock			pkg	net

module	Topology	Routes			rout	net
module	Topology	Multicast		cam	net
module	Topology	Spanningtree		traf	net
module	Topology	Map			paint	net
module	Topology	Table			tabi	net
module	Topology	Linked			wglb	adm
module	Topology	Loced			home	adm

module	Nodes		List			cubs	dsk
module	Nodes		Status			ngrn	dsk
module	Nodes		Toolbox			glof	dsk
module	Nodes		Stolen			fiqu	dsk

module	Reports		Networks		dnet	mgr
module	Reports		Devices			dtap	mgr
module	Reports		Modules			dcog	mgr
module	Reports		Interfaces		ddum	mgr
module	Reports		Nodes			dcub	mgr
module	Reports		Monitoring		dpie	mgr
module	Reports		Incidents		dbmb	mgr
module	Reports		Wlan			dmobi	mgr

module	Monitoring	Health			neth	mon
module	Monitoring	Messages		say	mon
module	Monitoring	Timeline		dprt	mon
module	Monitoring	Incidents		bomb	mon
module	Monitoring	Setup			sys	adm

module	User		Accounts		user	adm
module	User		Profile			smil
module	User		Logout			exit

module	Other		Info			say	oth
module	Other		Calculator		calc
module	Other		Defgen			tab	net
module	Other		Export			flop	adm
module	Other		Plot			3d	oth

# SNMP locations need to be formatted like this now (default separator (locsep) is ;)
# Region;City/Campus;Building;Floor;[Room;][Place within room;][Whatever additional info you want]
locsep		.

# Pattern to match for buildings to be marked red (e.g. HQ|Main). Will also be 
# used to raise alerts to critical in monitoring
redbuild	HQ|Main

# Authentication for GUI users can be set to MySQL or by PAM
# n	None!
# p	PAM (requires PHP support for PAM)
# i	current username will be used for device access (e.g. in Devices-Write)
;guiauth	i

# Disclaimer or what ever you want people to see upon login. The default is my statement to every NeDi user:
disc		NeDi hasn't caused any damage yet! I won't take any responsibility, if you mess up your network with NeDi!

