https://www.staffordnet.uk/ 2026-04-05T18:27:37+00:00 https://www.staffordnet.uk/ https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico text/html 2026-01-21T07:51:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:ansible&rev=1768981864&do=diff BloxOne Ansible Infoblox has an unofficial Ansible integration here. sudo apt update sudo apt install software-properties-common sudo add-apt-repository --yes --update ppa:ansible/ansible sudo apt install ansible // You need Ansible 2.10 or higher for the following command to work ansible-galaxy collection install git+https://github.com/infobloxopen/bloxone-ansible#ansible_collections/infoblox/b1ddi_modules text/html 2026-03-25T12:55:43+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:asset_insights&rev=1774443343&do=diff Asset Insights If the asset has not been seen for 7 days, we mark it as “soft deleted” so it doesn't show up and doesn't get included in asset calculation (not actually deleted but deleted as far as the user is concerned). We mark soft delete in the first scan that does not show it. Applies On-Prem as well and that is what it is really for. text/html 2026-03-24T21:46:27+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:aws&rev=1774388787&do=diff AWS Route 53 Both NIOS and BloxOne DDI integrate with AWS Route 53. Note that Route-53 Private Zones are only accessible to IP addresses located within the VPCs that are assigned to the Private Zones. This means you cannot query x.x.x.2 from on-prem. This is where NIOS integration comes in very handy. text/html 2026-01-21T07:50:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:azure&rev=1768981820&do=diff NIOS-X Azure Use the Azure CLI to find the latest image in Azure az vm image list --publisher Infoblox --all --offer "infoblox-bloxone-34" text/html 2026-01-21T07:50:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:data_connector&rev=1768981808&do=diff Data Connector For the Data Connector service on a BloxOne host, use the 750 GB VM version as the data connector requires more disk space if a destination is unavailable or if the on-prem host running Data Connector service is overloaded. It is 750Gb because we cannot predict Events-Per-Second or how fast a log destination will be able to accept messages/possible communication issues. By way of annecdote. a small lab with less than 10 VM's for 3 weeks had its data connector VM using only 38GB … text/html 2026-03-25T00:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:dhcp&rev=1774397344&do=diff NIOS-X DHCP If you set the DHCP servers at a subnet level, an subsequent ranges you create in the subnet will allow you to just inherit the associated OPH. However, any existing ranges in the subnet will not allow any “use subnet OPH” option. For any existing ranges in the subnet, you will need to recreate them if you want them to inherit the subnets OPH assignment values. text/html 2026-02-24T02:01:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:dns&rev=1771898494&do=diff NIOS-X DNS Forward Only The “Forward only” option in NIOS-X. You can only tick this if at lease one forwarder is set. If a forwarder is set and “Forward only” is ticked, then recursion will never be used. If the forward 'target' servers go down then you loose the ability to resolve text/html 2026-01-21T07:49:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:gcp&rev=1768981750&do=diff NIOS-X GCP Create service account text/html 2026-01-21T07:48:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:import_export_data&rev=1768981738&do=diff BloxOne Import/Export Data When importing DHCP ranges, you need to specify the ID of the dhcp_host. It won't inherit or detect a host set at the parent subnet level. When dealing with importing data, you need to set a name and key. The key is “custom_list/NAME_OF_LIST text/html 2026-01-21T07:48:41+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:logging&rev=1768981721&do=diff NIOS-X Logging * LEEF (Log Event Extended Format) — The LEEF event format is a proprietary event format, which allows hardware manufacturers and software product manufacturers to read and map device events specifically designed for IBM QRadar integration. text/html 2026-01-21T09:07:27+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:nios_grid_connector&rev=1768986447&do=diff NIOS Grid Connector For NIOS appliances that get OPHID generated with hash of serial number, if the serial number changes (e.g. RMA) then the OPHID remains the same if the entry already exists in the hostapp based on the physical_oid text/html 2026-03-07T02:47:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:nios_x_servers&rev=1772851665&do=diff NIOS-X Servers Supported Platforms for Hosts Default DNS server for NIOS-X servers is the Infoblox Threat Defense public anycast that can resolve all *.infoblox.com domains publically (52.119.41.100 or, formerly, 52.119.40.100) Datasheet for On-Prem Hosts is here. Note: B1-105 is EOS/ text/html 2026-02-18T20:34:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:nios_x_troubleshooting&rev=1771446852&do=diff Troubleshooting NIOS-X Virtual Hosts NIOS-X API Monitor You can monitor NIOS-X servers via API. SNMP is not supported. Docs here. SSH When you enable HTTPS on a host via CSP, you can log in and enable SSH. It will run on port tcp-2022 putty admin@192.168.1.53 -P 2022 text/html 2026-03-12T10:27:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:nios_x_xaas&rev=1773311269&do=diff NIOS-X as a Service Every “Access Location” is considered a “Connection”. Each “Access Location” can have two WAN IP addresses. Each WAN IP address can establish two VPN tunnels to the “Service Location”. So you can have four VPN tunnels that are considered one text/html 2026-01-21T07:47:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:notes&rev=1768981644&do=diff BloxOne Notes * If there is no DHCP traffic detected by a DHCP container service for more than ten minutes, the DHCP container service will restart. This is because of an edge case where the service may come up before the network and thus get stuck not being able to accept traffic. To allow for this, the service will restart automatically if it sees nothing for 10 minutes. This will generate an alert. text/html 2026-01-21T08:01:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:proxmox&rev=1768982513&do=diff NIOS-X and Proxmox You need to set the Serial Number because it is blank by default. * Under the Guest (NIOS-X host), go to Options > SMBIOS Settings (Type 1). * You will need to fill the Serial number value in. You could use the MAC address of the first network adapter. To get that, Exit and got to Hardware (two items above Options). Double click on the (net0) and copy that MAC addrsss. Go back tinto SMBIOS and past it into the Serial field. text/html 2026-01-21T07:46:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:rpz&rev=1768981580&do=diff NIOS-X RPZ NIOS-X RPZ log looks like this 28-Nov-2025 11:20:21.968 rpz: info: client @0x7feff7e5f168 192.168.1.5#51592 (rpztest.test.macware.net): view 1df1ad80-b53e-432a-b68u-5276db77ab88: rpz QNAME Local-Data rewrite rpztest.test.macware.net/A/IN via rpztest.test.macware.net.uddi-local-allow text/html 2026-01-21T07:46:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:sandbox&rev=1768981564&do=diff Infoblox NIOS-X Sandbox Licensed guardrails are sandbox specific Currently defined as 5.5M QPM text/html 2026-03-06T22:58:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:tokens&rev=1772837935&do=diff Universal DDI Tokens Documentation page for Universal DDI Licensing is here. Note. The Network Address and Broadcast address are marked as reservations and treated as Active IP addresses for Token calculations. e.g. if you create subnet 10.10.10.0/24, then 10.10.10.0 and 10.10.10.255 are created as reservations. The exception is /31 and /32 subnets. These do not include the reservations for network and broadcast. text/html 2026-01-21T07:44:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.staffordnet.uk/doku.php?id=infoblox_uddi:user_groups&rev=1768981493&do=diff BloxOne User Groups ib-td-admin (ib-td-user is read-only) * Can't see IPAM/DHCP * Can't see DNS * Can't Licenses * Can't see DDI logging/reporting ib-ddi-admin (ib-ddi-user is read-only) * Can't see Security policies * Can't Licenses