2. Function, Operation

2-33

There are certain devices for which a large amount of connection history is stored in the "Terminal Connection History (Past)" list.

NetSkateKoban determines that a device has "Moved between network segments" (hereafter referred to as "device movement") when the same MAC address is detected in different network segments.

The specific conditions and results for determining "device movement" are as follows.

Condition 1	Condition 2	Result when Condition 2 occurs after Condition 1
A device is detected in Monitoring Network 1 with (MAC Address A – IP Address a)	A device is detected in Monitoring Network 2 with (MAC Address A – IP Address b)	The connection status of the detected device information (MAC Address A – IP Address a) is updated to "Terminated". The detected device information (MAC Address A – IP Address b) is newly added.

 

When multiple VLANs are used, routers, Layer 3 switches, or server machines may have interfaces where "the MAC addresses of the Layer 3 interfaces of each VLAN are the same" and "the IP addresses of the Layer 3 interfaces of each VLAN are different".

When these interfaces are detected, consecutive "device movement" determinations occur, resulting in a large number of records being stored in the device connection history.

By configuring the following settings in the NetSkateKoban Manager, you can prevent a large amount of device connection history from being stored.

1. Open "Terminal Connection History (Past)" by selecting "Tools > Koban Browser > Terminal Connection History (Past)".
2. From the displayed list, identify the MAC addresses of routers, Layer 3 switches, server machines, or other devices for which a large amount of connection history is being stored.
3. Open the settings screen by selecting "Settings > Manager Settings > Register Exception MAC Addresses".
4. Add the MAC addresses identified in step 2 to the "Exception MAC Address List".

※ MAC addresses added to the "Exception MAC Address List" are excluded from NetSkateKoban monitoring.