FogLight NMS. 5.2 Administrator Guide

Transcription

1 FgLight NMS 5.2 Administratr Guide Quest Crpratin, 2010

2 Quest Crpratin, 2010 Table f Cntents Intrductin 3 Key Features 3 Cpyright Ntice 7 Trademarks 7 Cntacting Us 7 Getting Started 8 System Requirements 8 Adding a Custmer / Organizatin 9 Netwrk Discvery - Add New Device(s) 10 SNMP 13 Agent 15 SNMP Enablement Tl 16 Enabling WMI n Windws 16 Enabling SNMP n Windws Vista 18 Enabling SNMP n Windws XP 23 Enabling ptflw 29 Enabling sflw 30 Enabling JFlw 30 Enabling NetFlw 33 Upgrading 34 Setting Up Yur Netwrk 34 Dashbard 34 Cnfigure a Dashbard 35 Cnfigure a Gadget 35 Devices 55 Device Overview 55 Add Device Grups 56 Run Netwrk Discvery 57 Enable SNMP 58 Enable Traffic Analysis 59 Enable IP SLA Respnder 60 Enable IP SLA Call Path 60 Device Details 61 Netwrk Maps 62 Encrypted Credential Stre 63 Plicies 65 Mnitrs 67 Devices 71 Alerts 71 Scheduled Actins 72 Reprts 74 Run a Reprt 74 Change Reprt Type 75 Change Reprt Perid 75 Change Device fr Reprt 75 a Reprt 76 Exprt a Reprt 76 Scheduled Reprts 77 p2

3 Quest Crpratin, 2010 Patch Management 78 Ticketing 79 Administratin 79 Agent Migratin 80 Aut Patch Settings 80 Baseline Cnfiguratin 80 Branding Cnfiguratin 81 Check fr Updates 81 Credential Stre 81 Flw Cnfiguratin 84 License Update 84 Prt Management 84 Retentin Cnfiguratin 84 SMTP Settings 84 Studi Deplyment 85 User Management 85 Intrductin This sectin will give yu a brief intrductin t this sftware. Key Features This prgram prvides a cmprehensive and affrdable netwrk management and applicatin mnitring slutin fr single and multi-site netwrks. It slves the prblems assciated with bandwidth, perfrmance, and cnnectivity and allws yu t take back cntrl f yur netwrk. Panramic View: Prvides a 360 degree view f yur netwrk fr lcal and remte lcatins Real Time Perfrmance Mnitring: Mnitrs perfrmance cunters fr ruters, hubs, switches, applicatins, servers, and applicatins in real-time Multi-Site: Supprts single and multi-site netwrks and thusands f devices Advanced Alerting: Prvides advanced and SMS alerts fr devices, including servers, switches, hubs, ruters, and ther netwrk infrastructure gear Traffic Analysis: Supprts NetFlw, J-Flw and SFlw Feature At a Glance Alerts and Ntificatins Autmatically ntifies yu when netwrk perfrmance degrades, allwing yu t fix prblems befre any impact n user and custmer experience. Thrugh a simple wizard, yu can cnfigure alerts fr multiple cnditins that meet the needs f yur netwrk. It mnitrs netwrk events, traffic, and cnditins t create a perfrmance baseline which ensures that yu dn t get inundated with false-psitive alerts frm nrmal netwrk activity. Additinally, yu can autmatically escalate critical alerts until the prblem is reslved and can suppress alerts fr scheduled netwrk maintenance. Send alerts via and SMS when netwrk truble arises Cnfigure netwrk alerts fr interrelated events r cnditins Escalate netwrk alerts autmatically fr unreslved issues Ensure yu dn t receive unnecessary and false-psitive ntificatins Applicatin Mnitring Prvides in-depth visibility f running prcesses and perfrmance cunters fr missin-critical applicatins, netwrk services, and web applicatins. Applicatin failures are usually the mst cmmn p3

4 Quest Crpratin, 2010 prblems that ccur in IT infrastructure. These pwerful mnitrs help IT Admins and netwrk engineers prevent applicatin failures and identify degradatins early. Easily identify the rt cause f applicatin perfrmance issues acrss Windws, UNIX, and Linux devices Deep supprt fr MS Exchange, SQL, Active Directry specific cunters Mnitr Prt availability, DNS, POP3, SMTP, HTML pages and much mre Run histrical reprts and view in yur dashbard Autmated Remediatin Autmatically take actins t restre services when a failure ccurs, including restarting applicatins and windws services, r rebting servers. Netwrk administratrs can fcus mre time n revenue-generating initiatives by autmating remediatin. Trigger self-healing scripts when specific netwrk cnditins exist Inventry f scripts fr Windws and Linux devices Set scheduled actins fr rutine device and netwrk maintenance Lad and G Deplyment Installs and mre imprtantly cnfigures in 15 minutes thrugh a simple 3 step prcess. After installatin, it perfrms a fast and cmprehensive scan f the entire netwrk t discver all devices. Leveraging varius discvery techniques, it prvides a cmplete set f attributes fr each device that has been discvered. Each device is then assigned t a Smart Plicy with recmmended mnitrs t cmplete the deplyment prcess. Simple 3 step prcess that lads the system and immediately begins mnitring the netwrk in 15 minutes Leverage Smart Plicies t assign recmmended mnitrs and settings Intuitive, easy t use right ut f the bx Lg File Management Using lg mnitring and management capabilities, it has the ability t cllect, analyze, alert, reprt, and archive Event Lg frm Windws hsts, SysLg frm distributed UNIX hsts, Ruters, Switches, and ther SysLg devices, and Applicatin lgs frm IIS web server, IIS FTP server, and MS SQL server. It helps system administratrs t trublesht, perfrmance prblems n hsts, select applicatins, and the netwrk. Real-time display f lg messages n yur mnitring dashbard and in individual device details Send alert ntificatins when an event matching specific criteria is generated Archives all event lgs and syslgs cllected fr frensic analysis and determining perfrmance and usage statistics fr a hst Trend reprts t analyze the perfrmance f hsts ver a perid f time Mnitring Dashbards Prvides unparalleled visibility int netwrk perfrmance, fault management, and device availability acrss any size f netwrk. The iggle like Dashbard is a netwrk management dashbard with a summary display f key perfrmance indicatrs (KPIs) like CPU lad, netwrk interface traffic, latency, packet lss and event lgs, expsing trubled devices and areas f the netwrk. With supprt fr drag and drp, it s easy t custmize each dashbard by simply adding and remving gadgets. Nw managers and peratins staff can cntinuusly mnitr key assets f the cmpany t ensure that yur netwrk is always running at peak perfrmance. Mnitr availability, CPU lad, memry, disk space utilizatin, netwrk interface traffic, netwrk latency, and packet lss Perfrm advanced mnitring f running services, prcess availability, and perfrmance cunters fr MS Exchange, SQL, Active Directry Inventry f gadgets include charts, gauges, lists, text, and web links p4

5 Quest Crpratin, 2010 Drag and drp mnitring gadgets t create a custm view Netwrk Traffic Analysis Netwrk Traffic Flw prvides in-depth visibility int traffic netwrk patterns and usage t determine hw traffic impacts the verall health f the netwrk. Drill dwn int applicatins, cnversatins, and devices t identify the exact surces f spikes and bursts t take prper actins. Flws are stred fr histrical reprting that prves invaluable fr netwrk capacity planning. Captures packets fr any device n the netwrk - ruters, switches, servers, desktps See traffic frm the perspective f each device fr easier trubleshting Supprts flw data fr Cisc NetFlw v1, 3, 5, 7 and 9, Juniper J-Flw, and sflw View applicatins, cnversatins, devices, endpints, and prtcls in graphical charts Prvides histrical trends fr all flws fr netwrk capacity planning ptflw Traffic Analysis Mdule ptflw is a packet capture and filtering engine that allws users t gather traffic infrmatin frm nn-flw supprt devices. ptflw capture flws by sniffing netwrk traffic n active netwrk adapters n a device. User selects list f interface(s). Supprts TCP, UDP & ICMP (IPv4) traffic. IPv6 cming sn. Supprts 32bit and 64bit platfrms. View applicatins, cnversatins, devices, endpints, and prtcls in graphical charts Prvides histrical trends fr all flws fr netwrk capacity planning See traffic frm the perspective f each device fr easier trubleshting Perfrmance Baseline Perfrmance Baseline autmatically analyzes cllected data t identify changes in netwrk behavir and establishes a baseline that represents the regular and expected activity f a device and netwrk. The established baseline accurately reflects yur rganizatin s use f the IT infrastructure by taking int accunt patterns and variatins in usage fr example, increased prcessr utilizatin n Mnday mrnings at 9:00am. Perfrmance Baseline cntinuusly lgs subsequent activity f a device and cmpares it t baseline. Once irregular behavir is detected, the prgram prduces a qualified alert that cntains details t be used as a starting pint t help guide the trubleshting and remediatin prcess. Reprts mre accurately n the device mnitrs that vary during a business cycle Identifies abnrmal increases and decreases in netwrk utilizatin, perfrmance, and quality t shrten mean time t repair Eliminates false psitive alerts caused by nrmal behavir n the netwrk Reduces manual cnfiguratin fr administering setting and threshlds Remte Office / Multi-Site Netwrks Designed fr rganizatins with multi-site netwrks, this sftware prvides secure cnnectivity between IT headquarters and any number f remte sites. The remte agent ensures that all key netwrk perfrmance data is cllected and sent t the specified hst server, prviding visibility int the entire IT infrastructure. Taking cmmands frm the hst server, the remte agent can als enfrce plicies and execute actins. Optimize netwrk mnitring cnfiguratins with best practice settings Eliminate typical bttlenecks that plague distributed netwrks Accmmdate netwrk grwth and changing netwrk perfrmance management needs Reprts Generate reprts fr all cllected netwrk data. Any reprt can instantly be printed, ed, and saved. Yu can drill dwn int specific time perids r events r change chart type with a single click a feature that is particularly useful when trubleshting issues. Leveraging the reprt scheduler, reprts n a daily, weekly r mnthly basis t clleagues and executive management. p5

6 Quest Crpratin, 2010 Delivers critical infrmatin n mnitrs devices in an easy t read frmat One click cnfiguratin f time perids and data type fr any device Schedule autmatic reprts fr staff and executive management Plan future resurce requirements leveraging histrical trends reprts Rle-based User Access Gives yu cntrl ver what users can and cannt d n the system. User accunts are cnfigured fr which type f infrmatin is displayed in the lcal and web studis fr an individual user r grup f peple. In additin user accunts have address fr integratin t alert ntificatins and scheduled reprts. This layer f security ensures that the right peple have access t the right infrmatin. Gives yu cmplete cntrl ver what authrized users can and cannt d Allws users t have custm dashbards with infrmatin relevant t them Maintains level f security required by yur cmpany Ruter Cnfiguratin Backup Ability t autmatically backup cnfiguratins files fr yur Cisc, Juniper, and HP ruters and switches. Cnfiguratin backups can be scheduled t run as needed and are stred in the database. Cnfig files can be viewed and cmpared all in the same interface. In additin yu can be immediately alerted when any cnfiguratin has been changed. Yu can custmize the backup settings t meet yur particular needs. Schedule cnfiguratin backups acrss multiple Cisc, Juniper, and HP ruters and switches Easily view and cmpare cnfiguratin histrical cnfiguratin backups Detect changes that ccur t cnfiguratins files and receive an alert ntificatin Smart Plicies Leveraging device prfiling intelligence, this sftware recmmends mnitrs and data gathering intervals fr all devices discvered in yur netwrk. Smart Plicies encmpass devices, mnitrs, alerts and scheduled task, s any cnfiguratin changes ccur frm ne central lcatin. This intuitive design saves yu time and dramatically imprves ease f use. Out-f-the-bx smart mnitring fr the entire netwrk Dramatic reduces time spent n cnfiguring yur NMS Lets IT departments fcus n pririties items SNMP Enablement Autmatically enable and cnfigure SNMP n devices fr mnitring: Cisc HP PrCurve Windws Server 00, 03, 08 Windws XP, Vista Linux Debian 2.6 Fedra 9 Ubuntu 8, 9 SuSE 2. VIP and IP SLA Mnitring Cllect and analyze VIP perfrmance statistics, including MOS, jitter, netwrk latency, packet lss. Slve VIP prblems faster by islating surces t specific lcatins, equipment, r transmissin types. Autmatically cnfigure IP SLA n Cisc ruters Mnitr call manager settings, status, active calls Evaluate histrical call activity and plan fr future updates p6

7 Quest Crpratin, 2010 Web Brwser Supprt Use the web interface t view all yur critical netwrk data, traffic bttle necks, and alert warning abut ptential prblems. In additin, see yur system settings t ensure yu are cllecting the right infrmatin at the right time. Secure lg in fr each user f the system View dashbards, plicies, and admin settings Supprts IE, Firefx, and ther ppular Wireless Infrastrcuture Mnitring Ability t mnitr yur wireless netwrks. As wireless becme a mre integrated in tday s netwrk, it is imprtant that IT managers maintain visibility int wireless access pints, clients and sessins. The wireless mnitring feature centralizes the management f distributed wireless netwrks with cnfiguratin in Smart Plicies and mnitring in Dashbards. Understand hw well yur wireless netwrk is perfrming and detect rgue users. Mnitr key variables n access pints, including signal strength and quality View client statistics fr Cisc devices Run reprts n key perfrmance data acrss all wireless devices Cpyright Ntice 2010 All rights reserved. Under the cpyright laws, this manual r the sftware described within, can nt be cpied, in whle r part, withut the written cnsent f the manufacturer, except in the nrmal use f the sftware t make a backup cpy. The same prprietary and cpyright ntices must be affixed t any permitted cpies as were affixed t the riginal. This exceptin des nt allw cpies t be made fr thers, whether r nt sld, but all f the material purchased (with all backup cpies) can be sld, given, r laned t anther persn. Under the law, cpying includes translating int anther language r frmat. Specificatins and descriptins subject t change withut ntice. Trademarks The name Quest Sftware, the sftware, the prduct name Quest Sftware PT360 Tl Suite, and the Quest Sftware lg are registered trademarks f Quest Sftware. Quest Sftware is cpyright 2010 by Quest Sftware. All rights are reserved. Micrsft Windws 98, Windws NT, Windws 2000, Windws XP, Windws Server 2003, Vista, Windws 7, Internet Explrer, and Active Directry are trademarks r registered trademarks f Micrsft Crpratin. Adbe, Acrbat, and Acrbat Reader are either registered trademarks r trademarks f Adbe Systems Incrprated in the U.S. and/r ther cuntries. Firefx is a trademark f the Mzilla Fundatin. Other prduct and cmpany names mentined herein may be trademarks and/r registered trademarks f their respective cmpanies and are the sle prperty f their respective manufacturers. Cntacting Us Yu can cntact PacketTrap Netwrks in multiple ways: Cntact Infrmatin p7

8 Quest Crpratin, 2010 Sales Supprt x Getting Started This sectin will help yu install and mre imprtantly cnfigure yur system in a matter f minutes. In additin there are useful resurce guides f hw t enable SNMP r WMI n yur devices, cnfiguring yur encrypted credential stre, and updating the sftware when required. Learn mre: System Requirements Installatin and Registratin Netwrk Discvery System Requirements Server Sizing This sftware is a cmprehensive device, applicatin, and traffic mnitring and trubleshting slutin. It is capable f mnitring single and multi-site netwrks f all sizes, frm small crprate LANs t large enterprises r highly distributed envirnments. Mst installatins perfrm well n Pentium-class 2GHz systems with 1GB f RAM using the default mnitr settings within the Smart Plicies. Hwever, when mnitring larger netwrks r using the Traffic Netwrk Flw mdule, yu need t give additinal cnsideratin t the hardware and system cnfiguratin used. Scalability is affected in multiple ways. The first variable is the number f devices that yu will be mnitring. Perfrmance tuning may be required when there are mre than 1,000 device mnitrs. The secnd variable is the amunt f perfrmance data yu cllect fr each device. Adjusting the Smart filters culd cause a large spike in the amunt f data cllected. The third variable t cnsider is the mnitring time intervals. Fr example, if yu set yur mnitr time intervals t cllect perfrmance statistics every five minutes instead f the default time intervals, the system requirements will increase. Finally, the number f simultaneus Studis accessing the system will have a direct impact n the perfrmance f the system. When planning yur installatin, keep in mind CPU, memry, data mnitr setting, and Traffic Flw mnitring. In situatins where traffic flw is being cllected frm multiple ruters/switches, has a large amunt f 'traffic cnversatins', r 1,000 r mre devices are being mnitred, it is recmmended t use a dedicated, faster perfrmance server. This slutin ffers several perfrmance advantages, as the server des nt have t share resurces with ther applicatins. Hst Server Sftware / Hardware Operating System devices devices Unlimited and MSP Versin 32-bit r 64-bit perating system: 32-bit r 64-bit perating system: 64-bit perating system: Windws 2003 SP1 r later Windws 2003 SP1 r later Windws 2003 SP1 r later Windws XP SP2 r later Windws 2008 Windws 2008 Windws Vista SP1 p8

9 Quest Crpratin, 2010 (all versins) CPU 2.0 GHz 2.4 GHz 3.0 GHz Memry 2 GB r mre 4 GB r mre 8 GB r mre Hard Drive Space 10 GB r mre 50 GB r mre 100 GB r mre.net Framewrk Firewall Exceptins - Allwed Prgrams Prts 2.0 r higher Autmatically cnfigured during installatin: ptserverservice ptservercnfig ptagentservice ptagentcnfig ptstudi 5053 (TCP) = (Encrypted Hst Server prt) 5055 (TCP) = (Encrypted Remte Cntrl Tunnel Hst Server prt) * Nte: Pre-existing MSP installatins may still be using 5054 (TCP) = (Hst Server prt) 69 (UDP) - TFTP Server 514 (UDP) - Syslg Server 2055 (UDP) - Netflw 6343 (UDP) - SFLOW 9555 (UDP) - Netflw Alternative prt # (UDP) - Netflw Alternative prt #3 NOTE: The minimum server requirements listed abve assume default cnfiguratins. Significantly increasing the mnitring intervals and traffic flw cllectins culd result in additinl lad n the server, which may require a larger CPU r additinal memry. Studi Sftware / Hardware Studi Operating System.Net Framewrk 32-bit r 64-bit perating system: Windws 2003 SP1 r later Windws XP SP2 r later Windws Vista SP1 (all versins) 2.0 r higher Adding a Custmer / Organizatin Adding a new custmer r a remte ffice fr a distributed netwrk is a simple prcess. Step 1: Select New Custmer r New Organizatin buttn in the upper left hand crner f the Devices sectin. Step 2: Enter the infrmatin that is unique t the site r custmer. General Infrmatin Hw the custmer r rganizatin will be displayed Name Enter a name that will be displayed in the system. Fr example, ACME Crpratin r Lndn Office p9

10 Quest Crpratin, 2010 Descriptin Give a friendly descriptin t the custmer r rganizatin. Agent Authrizatin Criteria Criteria that must be met fr an agent t cnnect. While nt required, it prvides an extra layer f security t yur system. Internet Gateway Enter the internet gateway fr the rganizatin / custmer's site Windws Dmain Enter the windws dmain fr the rganizatin / custmer's site Agent Cnnectin Hst The hst that the agent will cnnect t. Hstname We recmmend using the DNS name f yur hst, but IP Address can als be used. Step 3: Click Save Step 4: Select Add New Device(s) buttn in the upper left hand crner f the Devices sectin. Step 5: Select the new Organizatin / Custmer in the drp dwn bx. Step 6: Select Cpy URL r URL and distribute the link t the machine where the ptagent will be installed at the custmer's r remte site. Step 7: Once the agent is installed, it is time t discver devices n the netwrk. Check here fr Netwrk Discvery. Netwrk Discvery - Add New Device(s) Netwrk Discvery Overview After installatin, the sftware perfrms a fast and cmprehensive scan f the entire netwrk t discver all devices. Leveraging varius discvery techniques, it prvides a cmplete set f attributes fr each device that has been discvered. Each device is then assigned t a Smart Plicy with recmmended mnitrs t cmplete the deplyment prcess. Simple 3 step prcess that lads the system and immediately begins mnitring the netwrk in 15 minutes Leverage Smart Plicies t assign recmmended mnitrs and settings Intuitive, easy t use right ut f the bx Run Netwrk Discvery Step 1: Select Add New Device(s) buttn in the upper left hand crner f the Devices sectin. Step 2: Chse an Agent t run device discvery with. Lcal and remte agents will appear fr selectin. p10

11 Quest Crpratin, 2010 Step 3: Select t add devices via SNMP netwrk discvery r by deplying Agents. Nte: Agents runs n Windws XP, Vista, and Server 03 machines. Click t learn mre abut the SNMP Enablement Tl Step 4: Click Next. Step 5: Enter CIDR, DNS, IP/SubnetMask r Range f IP Addresses int the Target field. Step 6: Select Netwrk Discvery Techniques Exclude Devices in Database Select if yu want t nt include previus discvered devices that are in the device database in yur new search. This is speed up future discveries n the same netwrk. Ping Uses ICMP t get respnding status f a device. See belw fr Advanced Settings. MAC Reslutin Uses MAC Address t discver a device n the netwrk. Step 7: Chse Device Credentials yu want t use t discver each device. SNMP V1/2c Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. SNMP V3 Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. WMI Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. Telnet Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. Step 8: Click Next t discver the devices in yur target field. Step 9: Select the devices yu want t d a deep discvery n. Filters available fr all, SNMP respnding r WMI Respnding ndes Step 10: Click Next. Step 11: Netwrk Discvery Cmplete. Smart Plicy Assignment Optins. Apply Smart Plicy Assignments (Recmmended) Applies "Smart Plicy" assignments t discvered devices based n the device type and details gathered during the discvery prcess. This prcess chses the best fit plicy fr each device. Apply t Default Plicy Applies the standard Default Plicy t all the devices selected frm the discvery prcess. The Default Plicy attributes will be applies t all the devices selected. Pending Device Updates Lists the cunt f devices t be updated by the fllwing criteria: Ttal devices selected, New p11

12 Quest Crpratin, 2010 devices discvered, and Devices fr agent reassignment. Step 12: Click Finish t prceed t the Device Viewer. Devices will appear in the apprpriate Custmer / Organizatin. Cnfigure Advanced Settings Ping settings allw yu t turn n r ff which reslutins are displayed. T cnfigure click Settings buttn in the tl. Ping Ping Timeut (ms) Designates the maximum amunt f time in millisecnds that Ping will wait fr a respnse frm the target. If the target des nt respnd within the number f millisecnds set, Ping will assume it is dwn. Ping Packet TTL (Time-T-Live) Designates the number f hps alng the way t the specified address. With a setting f 32, yur Ping Scan culd pass thrugh up t 32 different ruters n the way t the remte address befre being thrwn away by the netwrk. Pings Per Nde Allws yu t cntrl the number f Ping attempts t send each address during a scan. When scanning netwrks cntaining Cisc ruters, set this number abve tw (2). If the target IP address is nt in the ARP cache f a Cisc ruter, the ruter discards the ICMP query (Ping) while it requests the MAC address f the target IP. The first Ping will never arrive at the subnet f the target IP address. In this situatin, the Cisc ruter respnds t the secnd Ping. Delay Between Pings Designates the time in millisecnds between each successive Ping t the target address. Setting this value very lw will send a cnstant stream f Pings t the target IP address. TCP Prts Timeut (ms) Designates the maximum amunt f time in millisecnds that Prt scan will wait fr a respnse frm the target. If the target des nt respnd within the number f millisecnds set, Prt scan will assume it is dwn. Select Pre-laded Prts Simply add r delete any listed prt and click n k. Add Custm Prts Simply enter the Prt number in the field seperating the numbers with a cmma. View Device Detail Infrmatin The Device Viewer sectin prvides the ability t drill int each discvered device. Shw Details Overview p12

13 Quest Crpratin, 2010 Displays a detailed verview f a device including status, DNS, and prcessr, disk, memry, and netwrk interface usage. Prcesses Prvides all the prcesses names and paths fr a given device. Sftware Gathers all the sftware installed n each device. Adding Devices via SNMP Adding Devices using SNMP Netwrk Discvery Step 1: Select Add New Device(s) buttn in the upper left hand crner f the Devices sectin. Step 2: Chse an Agent t run device discvery with. Lcal and remte agents will appear fr selectin. Step 3: Select t add devices via SNMP netwrk discvery. Nte: Click t learn mre abut the SNMP Enablement Tl Step 4: Click Next. Step 5: Enter CIDR, DNS, IP/SubnetMask r Range f IP Addresses int the Target field. Step 6: Select Netwrk Discvery Techniques Exclude Devices in Database Select if yu want t nt include previus discvered devices that are in the device database in yur new search. This is speed up future discveries n the same netwrk. Ping Uses ICMP t get respnding status f a device. See belw fr Advanced Settings. MAC Reslutin Uses MAC Address t discver a device n the netwrk. Step 7: Chse Device Credentials yu want t use t discver each device. SNMP V1/2c Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. SNMP V3 Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. WMI Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. Telnet Credential p13

14 Quest Crpratin, 2010 Set the prper credential stre fr the netwrk f the device yu are ging t mnitr with the CPU Gauge. T cnfigure the credential stre, please see the sectin titled Encrypted Credential Stre. Step 8: Click Next t discver the devices in yur target field. Step 9: Select the devices yu want t d a deep discvery n. Filters available fr all, SNMP respnding r WMI Respnding ndes Step 10: Click Next. Step 11: Netwrk Discvery Cmplete. Smart Plicy Assignment Optins. Apply Smart Plicy Assignments (Recmmended) Applies "Smart Plicy" assignments t discvered devices based n the device type and details gathered during the discvery prcess. This prcess chses the best fit plicy fr each device. Apply t Default Plicy Applies the standard Default Plicy t all the devices selected frm the discvery prcess. The Default Plicy attributes will be applies t all the devices selected. Pending Device Updates Lists the cunt f devices t be updated by the fllwing criteria: Ttal devices selected, New devices discvered, and Devices fr agent reassignment. Step 12: Click Finish t prceed t the Device Viewer. Devices will appear in the apprpriate Custmer / Organizatin. Cnfigure Advanced Settings Ping settings allw yu t turn n r ff which reslutins are displayed. T cnfigure click Settings buttn in the tl. Ping Ping Timeut (ms) Designates the maximum amunt f time in millisecnds that Ping will wait fr a respnse frm the target. If the target des nt respnd within the number f millisecnds set, Ping will assume it is dwn. Ping Packet TTL (Time-T-Live) Designates the number f hps alng the way t the specified address. With a setting f 32, yur Ping Scan culd pass thrugh up t 32 different ruters n the way t the remte address befre being thrwn away by the netwrk. Pings Per Nde Allws yu t cntrl the number f Ping attempts t send each address during a scan. When scanning netwrks cntaining Cisc ruters, set this number abve tw (2). If the target IP address is nt in the ARP cache f a Cisc ruter, the ruter discards the ICMP query (Ping) while it requests the MAC address f the target IP. The first Ping will never arrive at the subnet f the target IP address. In this situatin, the Cisc ruter respnds t the secnd Ping. Delay Between Pings Designates the time in millisecnds between each successive Ping t the target address. Setting this value very lw will send a cnstant stream f Pings t the target IP address. p14

15 TCP Prts Quest Crpratin, 2010 Timeut (ms) Designates the maximum amunt f time in millisecnds that Prt scan will wait fr a respnse frm the target. If the target des nt respnd within the number f millisecnds set, Prt scan will assume it is dwn. Select Pre-laded Prts Simply add r delete any listed prt and click n k. Add Custm Prts Simply enter the Prt number in the field seperating the numbers with a cmma. View Device Detail Infrmatin The Device Viewer sectin prvides the ability t drill int each discvered device. Shw Details Overview Displays a detailed verview f a device including status, DNS, and prcessr, disk, memry, and netwrk interface usage. Prcesses Prvides all the prcesses names and paths fr a given device. Sftware Gathers all the sftware installed n each device. Adding Devices via Agent(s) Adding Devices via Agent(s) Step 1: Select Add New Device(s) buttn in the upper left hand crner f the Devices sectin. Step 2: Chse an Agent t run device discvery with. Lcal and remte agents will appear fr selectin. Step 3: Select add devices via deplying Agents. Nte: Agents runs n Windws XP, Vista, and Server 03 machines. Step 4: Click Next. Step 5: Enter CIDR, DNS, IP/SubnetMask r Range f IP Addresses int the Target field. Step 6: Click Next. Step 7: The sftware will assess if the device(s) are available fr Agent installatin and display a list f results. Step 8: Click Next. Step 9: Enter the Preferred Windws Dmain Credential f the dmains fr agent deplyment. T create a new credential, select (new credential) frm the drp dwn bx. p15

16 Quest Crpratin, 2010 Step 10: Click Next. Step 11: Mdify the preferred credential assigned t each device if needed. Highlight the device and yu the 'Set Preferred' buttn at the bttm left crner. Step 12: Click Next. Step 13: The agent will nw be deplyed t the device(s). Yu can see the lg in the agent deplyment status. Step 14: Click Finish t cmplete the prcess. SNMP Enablement Tl Enabling SNMP n Devices fr Mnitring Step 1: Right click n a device r grup f devices and select Enable SNMP frm the menu ptins. Step 2: Cnfirm the device(s) yu want t enable SNMP n. Add mre devices by clicking the select targets buttn. Step 3: Click Next. Step 4: The sftware will Assess if the device(s) are available fr SNMP Enablement and display a list f results. Step 5: Click Next. Step 6: Select the SNMP Credential yu want t assign t the device(s). Enter new credentails with the Manage Credentials link. Step 7: Click Next. Step 8: Mdify the preferred credential assigned t each device if needed. Highlight the device and yu the 'Set Preferred' buttn at the bttm left crner. Step 9: Click Next. Step 10: SNMP will nw be Enabled n the device(s). Yu can see the lg in the enablement status windw. Step 11: Click Finish t cmplete the prcess Enabling WMI n Windws WMI cmes pre-installed n XP/Vista by default. T insure accessibility via WMI the user shuld check that the fllwing service(s) are started: Windws Management Instrumentatin Windws Management Instrumentatin Driver Extensins Step 1: G t the Cntrl Panel and duble click Administrative Tls. p16

17 Quest Crpratin, 2010 Step 2: Inside Administrative Tls duble click Cmputer Management. Step 3: Expand Services and Applicatins, right click n WMI Cntrl and fllw the Windws menus. p17

18 Quest Crpratin, 2010 Additinal Resurces Windws XP: Vista: Enabling SNMP n Windws Vista Enabling SNMP n targeted devices is necessary if ne wants t receive SNMP infrmatin frm thse devices. This infrmatin includes mnitring CPU, memry usage, and ther critical perfrmance details. Enable SNMP n Windws Vista Step 1: Navigate t the Cntrl Panel and duble click Prgrams and Features p18

19 Quest Crpratin, 2010 Step 2: Click Turn Windws features n r ff. Step 3: Scrll dwn t the SNMP feature check bth bxes and click Ok. Wait fr windws t enable the sftware. p19

20 Quest Crpratin, 2010 Step 4: Nw g back t the Cntrl Panel and duble click Administrative Tls. Step 5: Inside Administrative Tls duble click Cmputer Management. p20

21 Quest Crpratin, 2010 Step 6: Under Services and Applicatins click Services Step 7: Scrll dwn t the SNMP Service in the right hand pane. p21

22 Quest Crpratin, 2010 Step 8: Duble click the SNMP Service and navigate t the Security tab. Make sure the Accept SNMP packets frm any hst is selected. Fr rutine public enablement, under Accepted cmmunity names click Add. Leave Cmmunity rights as READ ONLY and enter Public fr the Cmmunity Name. (A custmized SNMP Cmmunity string can als be used.) p22

23 Quest Crpratin, 2010 Step 9: Click Ok twice until yu re back at the abve Services screen. Right click the SNMP Service and select Start. Dne! Additinal Resurces An article cntaining useful infrmatin n SNMP can be fund n the CISCO site at: Cnfiguring SNMP Supprt fr Cisc Devices: Enabling SNMP n Windws XP Enabling SNMP n targeted devices is necessary if ne wants t receive SNMP infrmatin frm thse devices. This infrmatin includes mnitring CPU and memry usage frm the devices. p23

24 Quest Crpratin, 2010 Enable SNMP n Windws XP Step 1: Navigate t the Cntrl Panel and duble click Prgrams and Features. Step 2: Click Add/Remve Windws Cmpnents. Step 3: Select and duble-click n Management and Mnitring Tls. p24

25 Quest Crpratin, 2010 Step 4: Make sure bth bxes are selected and click OK. Step 5: Yu are returned t the previus dialgue. Click n Next p25

26 Quest Crpratin, 2010 Step 6: When that cnfiguratin is cmpleted, click finish. Return t the Cntrl Panel and duble- click Administrative Tls. p26

27 Quest Crpratin, 2010 Step 7: Inside Administrative Tls duble click Cmputer Management. Step 8: Under Services and Applicatins click Services and then scrll dwn t the SNMP Service in the right hand pane. p27

28 Quest Crpratin, 2010 Step 9: Duble click the SNMP Service and navigate t the Security tab. Make sure the Accept SNMP packets frm any hst is selected. Fr rutine public enablement, under Accepted cmmunity names click Add. Leave Cmmunity rights as READ ONLY and enter Public fr the Cmmunity Name. ( A custmized SNMP Cmmunity string can als be used.) Step 10: Click Ok twice until yu re back at the abve Services screen. Right click the SNMP Service and select Start. Dne! p28

29 Quest Crpratin, 2010 Enabling ptflw Traffic Analyzer supprts ptflw technlgy and industry standards NetFlw, sflw, and J-Flw. ptflw is a packet capture and filtering engine that allws users t gather traffic infrmatin frm nn-flw supprted devices such as cmputers, ruters and switches. The results appear just as they wuld with any traditinal flw technlgy. Enable ptflw t display traffic n devices The fllwing are steps t cnfigure ptflw successfully. Step 1: Establish prt mirrring n the ruter r switch. Prt mirrring is used n a netwrk device t send a cpy f all netwrk packets seen n ne switch prt (r an entire VLAN) t a netwrk mnitring cnnectin n anther switch prt. Prt mirrring n a Cisc Systems switch is generally referred t as Switched Prt Analyzer (SPAN); sme ther vendrs have ther names fr it, such as Rving Analysis Prt (RAP) n 3Cm switches. Please cnsult yur device's manual t see if it supprts prt mirrring and instructins n hw t enable it. Step 2: Click n the Enable Traffic Analysis Buttn, select Enable ptflw and click the Next. The hst serv er IP will appear autmatically. Select the Ingress (traffic in) and Egress (traffic ut) n all yur desired interfaces. Click Save, Next and Finish. Step 3: Click n Devices, select the machine running this sftware and click View Details. ptflw will appear under Netwrk Traffic Flw. Nte: In rder t maintain netwrk cnnectivity, tw NICs shuld be installed and active n the server. Deplyment scenaris Case #1: After enabling prt mirrring n the Swtich r Ruter, cnnect the mirrred prt t the cmputer running hst server. Case #2: Insert a hub int yur desired lcatin. Fr example, t capture traffic frm a firewall, install the hub just dwnstream frm the firewall. Next, cnnect the hub t the netwrk and als t the hst server. p29

30 Quest Crpratin, 2010 Enabling sflw n devices is necessary if ne wants it cllected. Enable sflw n Extreme, Fundry, and HP Devices Extreme sflw Cnfiguratin T supprt Extreme devices, yu must cnfigure the device using the fllwing cnfiguratin template. enable sflw cnfigure sflw cnfig agent cnfigure sflw cllectr prt 6343 cnfigure sflw sample-rate 128 cnfigure sflw pll-interval 30 cnfigure sflw backff-threshld 50 enable sflw backff-threshld enable sflw prts all The sflw cllectr value must reflect the IP address where this sftware is installed. Fundry sflw Cnfiguratin T supprt Fundry devices, yu must cnfigure the device using the fllwing cnfiguratin template. Nte: Ensure yur Fundry device supprts sflw versin 5. cnfig> int e 1/1 t 4/48 interface> sflw frwarding cnfig> sflw destinatin cnfig> sflw sample 128 cnfig> sflw plling-interval 30 cnfig> sflw enable The sflw destinatin value must be the IP where this sftware is installed. HP sflw Cnfiguratin T supprt HP devices, yu must cnfigure the device using the fllwing cnfiguratin template. Nte: This will nt shw up in the cmmand line interface. Because f this it will nt return if the switch is reset. setmib sflwrcvraddress.1-0ac70199 setmib sflwrcvrprt.1 -i 6343 setmib sflwrcvrowner.1 -D net sflwrcvrtimeut.1 -i setmib i 37 setmib i 1 setmib i 8 setmib i 1 Where 0AC70199 is the IP address f the cmputer (in hexidecimal) where this sftware is installed. Line 4 sets the sample rate. Line 5 enables sflw. Line 6 sets the plling interval, and line 7 enables plling. Enabling JFlw Enabling JFlw n a Juniper netwrking device is necessary t cllect this data. Enable JFlw n Juniper Devices Enable J-flw n yur device Enable J-Flw statistics. Enable J-Flw statistics n the desired interfaces. (Optinal) Define the sampling interval at which yu want t cllect statistics. (Optinal) Custmize the size f the main flw cache. (Optinal) Define flw cache aging timers. (Optinal) Specify t where yu want t exprt J-Flw statistics. p30

31 Quest Crpratin, 2010 Enabling Flw-Based Statistics Use the ip flw statistics cmmand t explicitly enable J-Flw. NOTE: Issuing any cnfiguratin level cmmands implicitly enables J-Flw. ip flw statistics * Use t enable J-Flw. * Example hst1(cnfig)#ip flw statistics * Use the n versin t disable J-Flw n the virtual ruter. Enabling Flw-Based Statistics n an Interface Use the ip rute-cache flw sampled cmmand t enable J-Flw n an interface. NOTE: Issuing an interface-level flw cmmand des nt enable J-Flw n the virtual ruter. T enable J-Flw, issue the ip flw statistics cmmand. ip rute-cache flw sampled * Use t enable J-Flw n an interface. * Example hst1(cnfig-if)#ip rute-cache flw sampled * Use the n versin t disable J-Flw statistics n the interface. Defining a Sampling Interval Use the ip flw-sampling-mde cmmand t define the packet-sampling interval fr the virtual ruter. The sampling interval specifies the rate at which the virtual ruter samples J-Flw infrmatin. This rate is used fr all interfaces that have J-Flw enabled. Once yu enable an interface, the virtual ruter samples 1 packet at the specified packet interval. The pssible interval range is frm 10 packets t 4 billin packets (the default). NOTE: Packet sampling ccurs individually fr each prcessr. Because the ruter distributes packets ver multiple prcessrs, sampling ccurs when each prcessr reaches the specified packet interval. ip flw-sampling-mde packet-interval * Use t define the J-Flw packet-sampling interval. * Example hst1(cnfig)#ip flw-sampling-mde packet-interval 50 * Use the n versin t return the sampling interval t its default value. Setting Cache Size Use the ip flw-cache entries cmmand t limit the number f main flw cache entries fr the virtual ruter (as cllected acrss all line mdules that are running J-Flw). Once the cache size exceeds the flw-cache entry limit, the least recently used flw is remved. p31

32 Quest Crpratin, 2010 The pssible flw-cache range is 1,024 t 524,288 entries. The default is 65,536 entries. ip flw-cache entries * Use t limit J-Flw main flw cache entries. * Example hst1(cnfig)#ip flw-cache entries * Use the n versin t return the cache size t its default value, Defining Aging Timers Once the virtual ruter creates a flw in the cache, the flw can be remved at the expiratin f either the active r the inactive timer. Specifying the Activity Timer Use the ip flw-cache timeut active cmmand t specify a value fr the activity timer. The activity timer measures the amunt f time that the virtual ruter has been recrding a datagram fr a given flw. When this timer expires, the virtual ruter exprts the flw cache entry frm the cache and remves the entry. This prcess prevents active flws frm remaining in the flw cache and allws cllected data t appear in a timely manner. The pssible range fr the activity timer is 1 t 60 minutes. The default value is 30 minutes. ip flw-cache timeut active * Use t define the activity timer. * Example hst1(cnfig)#ip flw-cache timeut active 50 * Use the n versin t return the activity timer t its default value. Specifying the Inactivity Timer Use the ip flw-cache timeut inactive cmmand t specify a value fr the inactivity timer. The inactivity timer measures the length f time expired since the virtual ruter recrded the last datagram fr a given flw. When this timer expires, the virtual ruter exprts the flw cache entry frm the cache and remves it. When, at a later time, anther datagram begins that uses the same flw characteristics, the virtual ruter allcates a new flw cache entry, and the inactivity timer begins again. The pssible range fr the inactivity timer is frm 10 t 600 secnds. The default value is 15 secnds. ip flw-cache timeut inactive * Use t define the inactivity timer. * Example hst1(cnfig)#ip flw-cache timeut inactive 80 * Use the n versin t return the inactivity timer t its default value. Specifying Flw Exprt Use the ip flw-exprt cmmand t specify the lcatin t which yu want t exprt the J-Flw datagrams. ip flw-exprt * Use t specify the lcatin t which yu want t exprt J-Flw datagrams r specify an alternate surce address fr utbund exprt J-Flw datagrams. * Example 1 Specifies the destinatin address fr J-Flw datagrams hst1(cnfig)#ip flw-exprt versin 5 peer-as p32

33 Quest Crpratin, 2010 * Example 2 Specifies the surce address fr utbund exprt J-Flw datagrams hst1(cnfig)#ip flw-exprt surce fastethernet 5/0 * Use the n versin t remve the exprt setting. Enabling NetFlw Enable NetFlw fr Cisc IOS Devices Enable Cisc Express Frwarding: ruter(cnfig)# ip cef In the cnfiguratin terminal n the ruter, issue the fllwing t start NetFlw Exprt. It is necessary t enable NetFlw n all interfaces thrugh which traffic yu are interested in will flw. Nw, verify that the ruter is generating flw stats - try 'shw ip cache flw'. Nte that fr ruters with distributed switching (GSR's, 75XX's) the Rendezvus Pint CLI will nly shw flws that made it up t the RP. T see flws n the individual linecards use the 'attach' r 'if-cn' cmmand and issue the 'shw ip cache flw' n each LC. Enable exprt f these flws with the glbal cmmands. 'ip flw-exprt surce' can be set t any interface, but ne which is the least likely t enter a 'dwn' state is preferable. Netflw will nt be exprted if the specified surce is dwn. Fr this reasn, we suggest the Lpback interface, r a stable Ethernet interface: ruter(cnfig)# ip flw-exprt versin 5 ruter(cnfig)# ip flw-exprt destinatin <ip-address> <prt> ruter(cnfig)# ip flw-exprt surce FastEthernet0 Use the IP address f yur NetFlw Cllectr and cnfigured listening prt. If yur ruter uses BGP prtcl, yu can cnfigure AS t be included in exprts with cmmand: ruter(cnfig)# ip flw-exprt versin 5 [peer-as rigin-as] The fllwing cmmands break up flws int shrter segments. ruter(cnfig)# ip flw-cache timeut active 1 ruter(cnfig)# ip flw-cache timeut inactive 15 Use the cmmands belw t enable NetFlw n each physical interface (i.e. nt VLANs and Tunnels, as they are aut included) yu are interested in cllecting a flw frm. This will nrmally be an Ethernet r WAN interface. Yu may als need t set the speed f the interface in kilbits per secnd. It is especially imprtant t set the speed fr frame relay r ATM virtual circuits. interface <interface> ip rute-cache flw bandwidth Nw write yur cnfiguratin with the 'write' r 'cpy run start' cmmands. When in enabled mde, yu can see current NetFlw cnfiguratin and state with the fllwing cmmands: ruter# shw ip flw exprt ruter# shw ip cache flw ruter# shw ip cache verbse flw Upgrading p33

34 Quest Crpratin, 2010 There are tw ways this sftware will update. One apprach is manual update and the ther apprach is aut update. Manual Update Step 1: Select Admin frm the main Menu Bar. Step 2: Select Check fr Sftware Updates buttn t see if an update is available. Step 3: Select Update Nw t pull dwn the sftware updates and apply them. The sftware will clse and pen autmatically. * Nte: Pre-existing MSP installatins may still use 5054 (TCP) fr agent cmmunicatin. Once the PacketTrap server has been updated, the existing agent installatins will cntinue t use prt 5054 until the agent sftware updates. As sn as the agent sftware has update, the agent will cnnect using the new prt 5053 and will cntinue t use nly prt 5053 fr agent cmmunicatin. Aut Update Upn launch, the sftware will check fr any updates available at the patch server. The sftware will autmatically pull the updates and stre in cache. They will be applied the next time the sftware is launched. Setting Up Yur Netwrk Dashbard Dashbard Overview The dashbard prvides unparalleled visibility int netwrk perfrmance, fault management, and device availability acrss any size f netwrk. The iggle like Dashbard is a netwrk management dashbard with a summary display f key perfrmance indicatrs (KPIs) like CPU lad, netwrk interface traffic, latency, packet lss and event lgs, expsing trubled devices and areas f the netwrk. With supprt fr drag and drp, it s easy t custmize each dashbard tab by simply adding and remving gadgets. Nw managers and peratins staff can cntinuusly mnitr key assets f the cmpany t ensure that yur netwrk is always running at peak perfrmance. Mnitr availability, CPU lad, memry, disk space utilizatin, netwrk interface traffic, netwrk latency, and packet lss Perfrm advanced mnitring f running services, prcess availability, and perfrmance cunters fr MS Exchange, SQL, Active Directry Inventry f gadgets include charts, gauges, lists, text, and web links Drag and drp mnitring gadgets t create a custm view Learn mre: Cnfigure a Dashbard Cnfigure a Gadget Cnfigure a Dashbard p34

35 Quest Crpratin, 2010 Cnfigure a Dashbard The Dashbard can be custmized t meet yur needs. In additin t the settings belw, yu can drag and drp gadgets frm clumn t clumn and adjust the size f each clumn by mving the divider bar t the left r right. Add Tab Create multiple dashbards full f key gadgets. Fr example, create a dashbard fr ruters, create ne fr servers, and even create ne fr yur web prperties t make sure they are up and running. Add Gadgets Prvides a list f gadgets t use n the dashbard. They encmpass a brad suite f missin critical data like device applicatin, netwrking, devices, availability, and web-based tls. Please see Cnfigure a Gadget fr mre details. These dashbard functins can be fund by selecting the dwn arrw n each tab. Cnfigure Clumns Set the number f clumns fr yur dashbard page. Gadgets will resize autmatically based n the number f clumns. Rename Tab Give every dashbard tab a friendly name fr easy navigatin acrss yur multiple dashbards. Clear Gadgets Will clear the dashbard f any gadgets and allw yu t start fresh in cnfiguring the dashbard. Clse Tab Will permanently remve the dashbard tab and all its assciated gadgets. Cnfigure a Gadget Cnfigure a Gadget The Dashbard ffers a wide range f gadgets t present any data being cllected abut yur netwrk. Every gadget takes yu thrugh a similar and intuitive cnfiguratin wizard that makes setup quick and easy. Active Directry Mnitrs the perfrmance cunters fr Active Directry server. Name enter a friendly name Refresh Interval determine hw ften the gadget executes Display Mde IP Address r DNS Name Target - enter the hst name r IP Address WMI Timeut (ms) - Designate the maximum amunt f time in millisecnds that WMI will wait fr a respnse frm the target. If the target des nt respnd within the number f millisecnds set, it is assumed dwn WMI Credential Set the prper credential stre fr the netwrk f the device yu are ging t mnitr. T cnfigure the credential stre, please see the sectin titled Credential Settings. Perfrmance Cunters Cnfiguratin select the Active Directry perfrmance cunters that yu wuld like t mnitr in the gadget p35