netbox-ip-permissions-synchronization 0.0.9

Syncing permissions on IP Addresses with those from their corresponding Prefix in NetBox

netbox-ip-permissions-synchronization

Overview

This plugin allows you to compare and synchronize IP address permissions (tenant assignments and custom permission fields) with their parent prefix in NetBox. It's useful for ensuring consistent permission and tenant assignments across all IP addresses within a prefix.

Features

• Compare IP address permissions against their parent prefix
• View tenant and permission field assignments at a glance
• Synchronize all IP addresses with prefix permissions
• Automatic detection of mismatched permissions
• User-friendly interface with color-coded status indicators

Compatibility

Tested with NetBox versions 4.3.7.

Installation

If your NetBox installation uses virtualenv, activate it like this:

source /opt/netbox/venv/bin/activate

Install the plugin from PyPI:

pip install netbox-ip-permissions-synchronization

Or clone this repository, then go to the folder with it and install the plugin:

pip install .

To enable the plugin, add the plugin's name to the PLUGINS list in configuration.py (it's usually located in /opt/netbox/netbox/netbox/) like so:

PLUGINS = [
    'netbox_ip_permissions_synchronization'
]

Don't forget to restart NetBox:

sudo systemctl restart netbox netbox-rq

Usage

Navigate to any Prefix in NetBox and look for the "Sync IP Permissions" button at the top of the page:

The synchronization page will show:

• Prefix information including tenant and permission assignments
• IP addresses that need synchronization (highlighted in yellow)
• IP addresses that are already synchronized (highlighted in green)

Select the IP addresses you want to synchronize using the checkboxes, then click:

• "Sync All IPs" - Synchronize all IP addresses in the prefix

Custom Fields Required

This plugin requires the following custom fields to be created in NetBox:

1. tenant_permissions - Multiple objects (Tenant) field to store read-write permission assignments
2. tenant_permissions_ro - Multiple objects (Tenant) field to store read-only permission assignments

These fields should be applied to both:

• IPAM > Prefix
• IPAM > IP Address

How It Works

1. When you access the sync page for a prefix, the plugin fetches all IP addresses within that prefix
2. It compares each IP address's tenant and permission fields with the parent prefix
3. IP addresses with mismatched values are marked for synchronization
4. You can selectively sync individual IPs or all IPs at once
5. The sync operation updates:
   • Tenant assignment (if the prefix has a tenant set)
   • tenant_permissions custom field
   • tenant_permissions_ro custom field

Plugin Settings

If you want to override the default values, configure the PLUGINS_CONFIG in your configuration.py:

PLUGINS_CONFIG = {
    'netbox_ip_permissions_synchronization': {
        # Add any future configuration options here
    }
}

Currently, there are no required configuration options. All settings are managed through the NetBox UI.

Permissions Required

To use this plugin, users need the following permissions:

• ipam.view_ipaddress - View IP addresses
• ipam.change_ipaddress - Modify IP addresses
• ipam.view_prefix - View prefixes

Troubleshooting

Custom fields not syncing

• Ensure that the tenant_permissions and tenant_permissions_ro custom fields exist in NetBox
• Verify that these custom fields are assigned to both Prefix and IP Address models
• Check that the field names match exactly (case-sensitive)

No IP addresses found

• Make sure the prefix status is not "container" (container prefixes are skipped)
• Verify that IP addresses exist within the prefix range
• Check that you have permission to view the IP addresses

Permission denied errors

• Ensure your user account has the required permissions listed above
• Contact your NetBox administrator if you lack necessary permissions

Support

For issues, feature requests, or contributions, please visit the project repository.

License

GNU General Public License v3.0 - See LICENSE file for details.

Acknowledgements

This project was inspired in part by the work done in the netbox-interface-synchronization plugin by NetTech2001. Their approach to interface synchronization in NetBox provided valuable guidance when designing the permission-sync logic for IP addresses. A big thanks to them for sharing their project with the community!