Infoblox IPAM and DHCP

Infoblox IPAM and DHCP is a platform that provides automated IP address management and Dynamic Host Configuration Protocol services.

Use Cases the Adapter Solves

• IP Address Management Visibility: Surface devices from Infoblox DHCP host records and IP address assignments alongside data from other adapters in Axonius, providing a comprehensive view of network-managed assets.
• Network Device Discovery: Identify devices tracked in Infoblox IPAM — including IP space, server, and MAC address — to close gaps between your IP management platform and endpoint management tools.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Application Settings

Data Retrieved through the Adapter

Devices - fields such as: Name, IP Address, MAC Address, Last Seen

Application Settings - fields such as: DDNS Enabled, DDNS Send Updates, DDNS Use Conflict Resolution,

Before You Begin

Required Ports

Axonius must be able to communicate with the value supplied in Host Name or IP Address via the following ports:

• TCP port 80/443

Authentication Methods

The Infoblox IPAM and DHCP adapter authenticates using an API Key associated with a user account.

APIs

Axonius uses the Infoblox IP Address Management API, using the following endpoints:

Devices

• GET /api/ddi/v1/dhcp/host — Fetch DHCP hosts (devices); offset-based pagination, 200 per page
• GET /api/ddi/v1/dhcp/mac_address_item — Fetch MAC address data; enriches device records
• GET /api/ddi/v1/ipam/address — Fetch IP address data; enriches device records

Application Settings, Axonius uses the following endpoint:

• api/ddi/v1/dhcp/global

Required Permissions

The Infoblox user account requires a limited-access admin group with API access and read-only permissions on the following resource types. This is the minimum permission set needed to connect the adapter.

Setting Up a Limited-Access Admin Group in Infoblox

To create a limited-access admin group with the minimum required permissions:

1. In Infoblox Grid Manager, go to Administration > Administrators > Groups, then click the Add icon.
2. Enter a Name for the admin group, then click Next.
3. Clear the Superusers checkbox.
4. Under Allowed Interfaces, select API, then select API (WAPI/PAPI only).
5. Click Save.

Assigning Read Permissions

After creating the group, assign READ permission to each of the following resource types:

Note: By default, Infoblox denies access to all resources for limited-access admin groups. You must explicitly assign READ permission to each resource type listed above. Permissions assigned to a network apply to all its associated DNS and DHCP resources.

To assign permissions by using the WAPI, send a POST request to /wapi/v<version>/permission with the following structure for each resource type:

{
  "group": "<your-admin-group-name>",
  "permission": "READ",
  "resource_type": "<RESOURCE_TYPE>"
}

Supported From Version

Supported from Axonius version 6.1.45.0

Connecting the Adapter in Axonius

1. Navigate to the Adapter Catalog, search for Infoblox IPAM and DHCP, and select the adapter.
2. Click Add Connection.
3. Provide the following parameters.

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Infoblox IPAM and DHCP server that Axonius can communicate with via the Required Ports.

2. API Key (required) - An API Key associated with a user account that has permissions to fetch assets.

3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.