Engineer's Toolset ADMINISTRATOR GUIDE. Version Last Updated: May 30, 2017

Transcription

1 ADMINISTRATOR GUIDE Engineer's Toolset Version Last Updated: May 30, 2017 Retrieve the latest version from:

2 2016 SolarWinds Worldwide, LLC. All rights reserved. This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain the exclusive property of SolarWinds and its respective licensors. SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON SOFTWARE AND DOCUMENTATION FURNISHED HEREUNDER INCLUDING WITHOUT LIMITATION THE WARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. The SolarWinds and other SolarWinds marks, identified on the SolarWinds website, as updated from SolarWinds from time to time and incorporated herein, are registered with the U.S. Patent and Trademark Office and may be registered or pending registration in other countries. All other SolarWinds trademarks may be common law marks or registered or pending registration in the United States or in other countries. All other trademarks or registered trademarks contained and/or mentioned herein are used for identification purposes only and may be trademarks or registered trademarks of their respective companies. SolarWinds Engineer's Toolset Document revised: 2/6/2017 2

3 Introduction 19 System requirements for Desktop Engineer's Toolset 20 System requirements for Engineer's Toolset on the Web 21 Install Desktop Engineer's Toolset 22 Silent installation for Desktop Engineer's Toolset 22 Install Desktop Engineer's Toolset 22 Install Engineer's Toolset on the Web 23 Uninstall Desktop Engineer's Toolset 24 Uninstall Engineer's Toolset on the Web 24 Launch Pad 26 Use Launch Pad to perform a search 26 Launch Pad favorites 27 Create folders 27 Copy tools 27 Launch command line parameters 27 View version information and find help 28 Utilities 29 License Management 29 Enter licensing information 29 Maintain licenses with License Manager 30 Install License Manager 30 Deactivate and re-activate licenses with License Manager 30 Re-activate license 31 Upgrade Engineer's Toolset 31 Back up or migrate Engineer's Toolset 31 Command line interface 32 Workspace Studio 33 Manage tabs 33 Create tabs 33 3

4 Create horizontal or vertical tabs 33 Find gadgets within tabs 34 Add tabs to toolbars 34 Use the tab rotator 34 Save tabs 34 Delete tabs 34 Modify Workspace Studio settings 34 Add gadgets 35 Response Time gadgets 35 Export results from a table 35 Interface gadgets 35 View interfaces 36 CPU gadgets 36 Memory gadgets 37 Detach gadgets 37 Web gadgets 37 Manage devices 37 Add devices 38 Discover and remember interfaces 38 Manage interfaces 38 Add device credentials 39 Import devices 39 Import from an Orion or SQL database 39 Import from any other file format 39 Tools Reference 41 Advanced Subnet Calculator 41 Look up address details 41 Classful Subnet Calculator 41 CIDR Calculator 42 4

5 Subnet addresses 42 Copy to the clipboard 43 Export, print, and copy calculations 43 Bandwidth Gauges 43 Create gauge 43 Launch shared credentials database 44 Save and load sets of gauges 44 Save a set of gauge 45 Reload a set of gauge 45 Compare a running config with the startup config 45 Config Downloader 45 Download a configuration from a router or switch 46 Advanced options 46 Config Uploader 47 Upload a configuration change to a Cisco router or switch 47 Example configuration files 48 Change all buffer settings 48 Reset or enable passwords using SNMP 48 Config Viewer 49 Download a config from Cisco router or switch 49 Automatically archive downloaded configuration files 50 Compare two configurations 50 Decrypt passwords 50 Decrypt all Cisco passwords 50 Troubleshoot Config Viewer 50 CPU Gauge 51 Monitor a device 51 Load gauge 51 CPU Gauge skins 51 5

6 DHCP Scope Monitor 51 Add DHCP Scope to the list of monitored scopes 51 Modify polling intervals, alert levels, and community strings 51 Interpret DHCP Scope Monitor results 52 Rescan DHCP Scopes 52 Export and copy DHCP Scope results 52 Discover used IP addresses 52 DNS Analyzer 52 Query DNS servers and generate graphical analysis 52 View discovered DNS details 52 View packet details 53 Add root DNS servers 53 Modify DNS query timeout 53 Skip resolution of names provides without addresses 53 DNS Analyzer colors 53 Analysis examples 54 Example 1 55 Example 2 55 Example 3 55 Example 4 56 Set node as the root and rescan 56 Discovered node as your root 56 DNS and WhoIs Resolver 56 Resolve domain names or IP addresses 56 Specify WhoIs Servers 57 View a cache of resolved names 57 DNS Audit 57 Start audit of IP range 57 Filter results 58 6

7 Interpret DNS Audit results 58 Edit Dictionaries 58 View Dictionary 58 Mutate Dictionary 58 Edit list of words in Dictionary 59 Import list of words 59 Enhanced PING 59 Log statistics 59 Export results 59 Export your results 60 Load profiles 60 Reset statistics 60 Reset high and low statistics 60 Clear all the data and restart monitoring 60 Customize graphs 60 Modify Enhanced Ping settings 61 IP address Management 61 Scan a subnet 61 Modify subnets 62 Filter subnet addresses 62 Filter discovered subnet list 63 Change the status of an IP address manually 63 Modify SNMP credentials and enable SNMP discovery 64 Modify ICMP scan settings 64 Automatically publish discovered information in HTML 64 Exclude subnet from Automatic Publishing 65 Scan a subnet manually 65 Refresh subnet IP address list 65 Share IP address Management Database 65 7

8 IP Network Browser 65 Scan subnet 66 Scan single device 66 Scan IP address range 66 Modify IP Network Browser settings 66 Save discovery in HTML 67 Export discovery as a text file 68 IP Network Browser command line operation 68 Customize Tools menu 69 Customize MIBs menu 69 Walk a network from one subnet to another 69 IP Network Browser FAQs 70 MAC Address Discovery 70 Start discovery 70 Search results data 71 Export, print, and copy discovered results 71 Export discovery results 71 Modify MAC Address Discovery settings 71 MAC Finder 71 MIB Scanner 72 View OID 72 Examples 72 MIB Viewer 73 View OID or table 73 Guidelines and examples 74 Export, print, and copy values 75 Export values 75 MIB Walk 75 Neighbor Map 76 8

9 Map neighbor devices 76 NetFlow Configurator 77 Configure NetFlow-capable Cisco router 78 NetFlow Realtime 78 Capture NetFlow data 78 Capture NetFlow data 79 Store NetFlow data 79 Analyze NetFlow data 79 Start Flow capture 80 Define applications and modify port definitions 80 Network Monitor 80 Add devices to monitor 81 Import into Network Monitor 81 Import from a Network Sonar database 81 Import from a comma delimited file 81 Import from a tab delimited file 82 Import from a Microsoft Access database 83 Modify Network Monitor settings 83 Set Network Monitor settings 83 Export and print node lists and event details 85 Export node lists and event details 85 Print node lists and event details 85 Publish to the Web 85 Save a node list to an HTML page 85 Save event details to an HTML page 85 View and modify node details 86 Modify node details 86 Delete nodes 86 Undo action 86 9

10 View node-specific events 86 View the Event Monitor 86 View Event details 87 Search previous events 87 Export events 87 Run database maintenance 88 Modify the look Network Monitor 88 Response Time Charts 88 Launch Response Time Charts 88 Network Performance Monitor 89 What Network Performance Monitor offers 89 Start the Toolset Network Performance Monitor 90 Add nodes and interfaces 90 Modify System settings 92 ICMP settings 93 SNMP settings 93 Modify Advanced settings 93 Baseline calculation 94 Availability calculation 94 Node warning interval 94 Calculate counter rollovers 95 Take XML snapshots 95 View node data and modify node properties 95 View and modify node properties 96 Unmanage a device 96 View interface data and modify interface properties 97 Transmit and Receive Bandwidth values 98 Enable and disable interfaces 98 View volume details and modify volume properties 99 10

11 Poll on demand 99 Manually poll objects 99 Poll a node 100 Poll an interface 100 Poll a volume 100 Rediscover on demand 100 Rediscover objects 100 Rediscover a node 100 Poll an interface 100 Poll a volume 100 Events 101 View a detailed log of unacknowledged events 101 Acknowledge events 101 View a detailed log of all events 101 View a summary of logged events 102 Views 102 View real time data 103 Create views 103 Print views 103 Export view data 103 Export a view 104 Charts 104 View charts 104 Customize charts 104 Export charts 105 Add value tables to charts 105 Alerts 105 Create alerts 105 Test alert action

12 Edit alerts 106 Copy alert 107 View current alerts 107 Disable alerts 107 Delete alerts 107 Alert suppression 107 Failure of redundant servers 108 Apparent failure of dependent nodes downstream of a failed device 108 Failure of a network link when a redundant link remains functional 109 Failure of load balancing between devices 109 Example of a dependent node alert suppression 109 Example of a failure of a load balancing alert suppression 110 Network Sonar 111 Complete Discovery Wizard 111 Modify Network Sonar Discovery preferences 112 Export, print, and copy data 114 Export charts 114 Limit discovery to a single class B or C network 114 Password generator 114 Ping 115 Export, print, and copy Sweeps 115 Modify Ping settings 115 Proxy ping 115 Initiate a Proxy Ping 116 Modify Proxy ping settings 116 Real Time Interface Monitor 116 Monitor interfaces on devices 117 Modify statistics of update intervals 117 Enable synchronous SNMP queries

13 Customize statistics groups 118 Export, print, and copy statistics 118 Export statistics 118 Publish to the Web 118 Automatically publish discovered information in HTML 119 Route viewer 119 Router password decryption 119 Router Password Decryption FAQs 120 Send page 120 Configure send page settings 120 SFTP/SCP server 121 Simple Web gadget 121 Spam Blacklist 122 Scan DNS blacklist servers 122 Remove servers from a blacklist 122 Report a server that is sending spam 122 Modify Spam Blacklist settings 123 Exporting Spam Blacklist Results 123 SNMP Brute Force Attack 123 SNMP Brute Force Attack settings 124 SNMP Brute Force Attack FAQs 124 SNMP Dictionary Attack 124 SNMP Dictionary Attack settings 125 Export from SNMP Dictionary Attack 125 Discover all of the devices on a network 126 SNMP Sweep 126 Sweep 126 Export, print, and copy Sweeps 127 Export sweep results

14 Publish to the Web 127 Clear Sweep results 127 Modify SNMP Sweep settings 127 SNMP Trap Editor 128 View example traps 129 Send traps 129 Export, print, and copy values 129 Export traps 129 Copy a trap template to the trap editor 129 SNMP Trap Receiver 130 Modify SNMP Trap Receiver settings 130 Set SNMP Trap Receiver settings 130 Send test traps 130 Export, print, and copy values 131 Export traps 131 Subnet Calculator 131 Export and print calculations 132 Syslog server 132 Select message properties 133 Modify properties 133 Limit number of messages to display 133 Clear messages from display 133 Filter accepted messages 133 Send syslog messages 134 Search syslog server database 134 Delete old Syslog messages from the database 134 Clear syslog server database 134 Export, print, and copy messages 134 Export messages

15 Watch It 135 Monitor 135 Change audible alerts 135 Minimize Watch It 136 WMI browser 136 Deprecated Tools 137 Deprecated Advanced CPU load 137 Create database 137 Modify Advanced CPU Load settings 138 Set Advanced CPU Load settings 138 Monitor multiple processor devices 138 Display the number of processors that the device has and the load on a per processor basis 139 View running processes on the target device 139 View Client Session on the target device 139 View running services on the target device 139 View installed software on the target device 139 View historical graphs 139 Modify displayed columns 140 Deprecated MIB browser 140 Use the gadget with a device that is not in the explorer pane 140 View a single MIB 140 View a MIB table 140 Deprecated Ping Sweep 141 Export, print, and copy Sweeps 141 Export calculations 141 Ping Sweep settings 141 Edit Sweep settings 142 Modify ICMP ping settings 142 Publish to the Web

16 Deprecated Port scanner 143 Export, print, and copy scan results 143 Export scan results 143 Publish to the Web 144 Port scanner options and settings 144 Rescan ports on specific address 144 Set to Rescan This Address (same ports) 144 Set to Rescan This Address (all ports) 144 Deprecated Remote TCP Session reset 144 Display a list of TCP sessions connected to a remote device 144 Reset a remote TCP session 145 Remote TCP Session reset settings 145 Export from Remote TCP Session reset 145 Remote TCP session reset Frequently Asked Questions 145 Route View 145 Use the gadget with devices that are not in the explorer pane 145 View the Route table information for a device 146 Add or remove columns to be displayed 146 Export results 146 Deprecated router CPU load 146 Add multiple routers to your Router CPU Load user interface 146 Polling options, notifications and logging 147 Configure polling options, notifications and logging 147 Poll now monitored routers 147 Set all routers to specific poll intervals 147 View peak load high-water marks 148 Reset high-water marks 148 Print CPU loads 148 Save loaded routers

17 Load a saved router list 148 Delete all monitored routers 148 Troubleshoot Router CPU load 148 Deprecated subnet list 149 Modify SNMP options for subnet list 149 Export, print, and copy subnet list results 149 Export subnet list results 150 Publish to the Web 150 Deprecated SNMP Realtime graph 150 Graph OID values 151 Modify polling settings 151 Change columns in the OID table 151 Calculate Counter Rollovers 152 Customize graphs and automatically generate HTML 152 View raw data 153 Export, copy, and print SNMP graph results 153 Export graphs 153 Copy graphs and data 153 Publish SNMP Graph Results in HTML 153 Zoom 154 Customize OID 154 Deprecated Switch Port Mapper 154 Before using deprecated Switch Port Mapper 154 Select Report items 155 Modify SNMP settings 155 Mapping Switch and Hub ports 155 Deprecated Traceroute 156 Launch shared credentials database 156 Modify Traceroute settings

18 Start concurrent traces 159 Export, print, and copy Traceroute results 159 Export calculations 159 Publish to the Web 159 Deprecated WAN Killer 160 Diagnostic gadgets

19 Introduction The SolarWinds Engineer's Toolset (Toolset) provides the tools you need as a network engineer or a network consultant to get your job done. Toolset includes solutions that work precisely in providing diagnostic, performance, and bandwidth measurements. Engineer's Toolset is available as: desktop application: Desktop Engineer's Toolset web interface: Engineer's Toolset on the Web A Typical Engineer's Toolset Deployment Scenario 19

20 System requirements for Desktop Engineer's Toolset The following lists the minimum requirements for Desktop Engineer's Toolset: SOFTWARE AND HARDWARE REQUIREMENTS One of the following 32-bit or 64-bit operating systems is required: Windows Server 2008 R2 Windows Server 2008 R2 SP1 Operating System Windows Server 2012 Windows Server 2012 R2 Windows 7 (x32 and x64) Windows 8 Windows 8.1 Windows 10 CPU Speed Memory Hard Drive Space Window Account Network.Net Framework Database 500 MHz or faster 128 MB or greater 3 GB or more Installation requires an account with administrator privileges. Must be accessible from the computer on which the Toolset is installed to successfully use any network tools. 3.5 SP1 and 4.0 Syslog Server additional component, used to capture and decode syslog messages sent from network devices, supports Access databases. Internet Explorer versions 8 and later Browsers Firefox version 40.0 Chrome version 44.0 Microsoft Vista has implemented User Account Control (UAC), a layer of security that ensures hostile programs cannot run unnoticed with administrator privileges. Consider the following when installing or running any Toolset application: You may be prompted for administrator credentials. You may be prompted to grant the application access to the computer. 20

21 System requirements for Engineer's Toolset on the Web The following lists the minimum requirements for Engineer's Toolset on the Web: SOFTWARE AND HARDWARE REQUIREMENTS Windows Server 2008 R2 SP1 Windows Server 2012 Operating System Windows Server 2012 R2 Windows 7 x64 Windows 8 Windows 8.1 Windows 10 CPU RAM HDD Dual-core processor 4 GB 4 GB Support for SQL 2008 and 2008 R2 is deprecated as of this release. Future releases will no longer support SQL 2008 or 2008 R2. SolarWinds recommends that you upgrade directly to SQL 2016 at your earliest convenience. Support for Windows Server 2008 R2 is deprecated as of this release. Future releases will no longer support Windows Server 2008 R2. SolarWinds recommends that you upgrade to Windows Server 2012, 2012 R2, or 2016 at your earliest convenience. SQL Server 2008 SQL Server SQL Server 2008 R2 SQL Server 2008 R2 SP1 SQL Server 2008 R2 SP2 SQL Server 2008 R2 SP3 SQL Server 2008 SP1 SQL Server 2008 SP2 SQL Server 2008 SP3 SQL Server 2008 SP4 SQL Server 2012 SQL Server 2012 SP1 21

22 SOFTWARE AND HARDWARE REQUIREMENTS SQL Server 2012 SP2 SQL Server 2014 SQL Server 2014 SP1 SQL Server 2016 Internet Explorer versions 8 and later Browsers Firefox version 40.0 Chrome version 44.0 Install Desktop Engineer's Toolset Before you start the program: Confirm that your computer meets or exceeds the requirements to run a Desktop Toolset. Disable FIPS before installing SolarWinds Toolset. a. Click Start > Control Panel > Admin Tools > Local Security Policy > Local Policies > Security Options > Set System Cryptography. b. Set Use FIPS compliant algorithms for encryption, hashing and signing to Disabled. Toolset must be installed for All Users instead of for Individual users. If.Net 4.0 is installed in the machine, use SolarWinds-DesktopToolset-v11.exe. If.Net 4.0 is not installed in the machine, use SolarWinds-DesktopToolset-v11-WithDotNet.exe. Silent installation for Desktop Engineer's Toolset You can now silently install Desktop Engineer's Toolset on your system with command switches. 1. Open a Command Prompt window. 2. Go to the.exe upgrade path. 3. Enter SolarWinds-DesktopToolset-v11.exe/quiet. Your silent installation should start. A series of windows may open and close, these can be ignored. Install Desktop Engineer's Toolset 1. Log in to Windows as an Administrator. 2. Go to your download location and launch the Solarwinds Toolset executable. In the Toolset Setup wizard, click Next. 3. Select I accept the terms in this License Agreement from the License Agreement window, and then click Next. 4. Specify the location folder where you want Toolset program files to install, and then click Next. The default location is C:\Program Files(x86)\SolarWinds\Toolset. 22

23 5. Click Install to start installing Desktop Toolset. Nothing has been modified on your computer at this point. Click Back if you want to configure anything before this window. 6. In the Toolset dialogue box, select one of the following: Buy Now! to buy the full version of Engineer's Toolset. Continue Evaluation to continue with the evaluation. Enter Licensing Information to add licensing information for your product. For more information, see Software License Key. In the SolarWinds Improvement Program window, select Yes, I wish to participate anonymously (recommended). 7. Click Finish to exit the Setup wizard. If you want to integrate other Orion products, select I want to load Orion Toolset Integration Tray. In adherence to Microsoft security policies, Toolset cannot be installed from a remote machine with UAC enabled. Install Engineer's Toolset on the Web Before you start the program: Confirm that your computer meets or exceeds the requirements to run Toolset on the web. For more information about installing Desktop Engineer's Toolset, see Install Desktop Engineer's Toolset. 1. Log in to Windows as an Administrator. 2. Browse to your download location and launch SolarWinds Toolset On the Web executable. The setup program has either an exe or msi or extension. 3. If you are installing Engineer's Toolset on a server with no other Orion module, select English as your preferred language, and then click Next. Engineer's Toolset is not localized. If you select any other language, it is applied in the Orion Web Console, but all Toolset areas are still in English. If there is a SolarWinds module already installed, the language is automatically applied and this step is skipped. 4. If there is an existing SolarWinds Orion module, back up your Orion database, enter YES in the provided field, and then click Next. 5. If the installer detects that Internet Information Service (IIS) is not installed, select Continue with Orion installation, and click Next. 6. Accept the license agreement on the License Agreement window, and then click Next. 23

24 7. Browse to a file system folder where you want to install the Toolset program files, and then click Next. The default location is \Program Files\SolarWinds\Toolset. This step is not necessary if you are already running other Orion modules on the server. Engineer's Toolset on the Web is installed in the default credential. 8. If you are installing Engineer's Toolset on the Web on a server where you already have SolarWinds NPM installed, select an Orion installation, and then click Next. To use an existing Orion SQL database, select Advanced, and then select the Orion SQL database. To evaluate Engineer's Toolset on the Web or use a new MS SQL Express database, select Express. 9. Click Next to start the installation. At this time, nothing has been modified on your computer. If you want to change anything before this window, click Back. 10. If prompted to restart IIS, select Restart after installation. 11. Click Finish. 12. Click Enter Licensing Information, and then enter the license key in the Activate Web Toolset window. Complete the Activate Web Toolset wizard. If you are evaluating Engineer's Toolset on the Web, click Continue Evaluation. You can activate your license later. For more information, see Software License Key. In adherence to Microsoft security policies, Toolset cannot be installed from a remote machine with UAC enabled. Uninstall Desktop Engineer's Toolset Remove the following programs from the Control Panel: SolarWinds Toolset SolarWinds NetFlow Realtime SolarWinds SCP Server SolarWinds TFTP Server Configuration files, Microsoft Access databases, and registry keys are not removed by this procedure. Uninstall Engineer's Toolset on the Web Remove the following programs from the Control Panel: SolarWinds Active Diagnostics SolarWinds Collector 24

25 SolarWinds Information Service SolarWinds Job Engine SolarWinds License Manager SolarWinds Orion Platform Services SolarWinds Orion Improvement Program SolarWinds Orion Network Atlas SolarWinds Toolset v Configuration files, Microsoft Access databases, registry keys, and the SQL database are not removed by this procedure. 25

26 Launch Pad The Toolset Launch Pad is a convenient way to launch the Toolset tools. You can use the Launch Pad to complete the following tasks: Launch tools Search Launch the command prompt Rename and re-order the Launch Pad folders Access information about your Toolset version, administrator guide, community sites and forums, and online support Use Launch Pad to perform a search Launch Pad offers a powerful search function that assists in finding the tools you need. 1. Launch the Toolset Launch Pad from the Start menu. 2. In the Search field, enter a keyword, tool, or phrase you want to find. 3. Click Search all tools. 26

27 Launch Pad favorites Change the order of your Toolset Launch Pad groups to add frequently used Toolset tool groups in the My Favorites folder. 1. Launch the Toolset Launch Pad from the Start menu. 2. Click Add to Favorites in the upper-right of the tool window. Your favorites are now available in the My Favorites folder. Create folders Create new tool groups and populate them with the current Toolset shortcuts provided. For example, create a special group of tools, and then re-order or move the group to the top of the Launch Pad for easier access. 1. Launch the Toolset Launch Pad from the Start menu. 2. Click Create folder in the navigation bar. 3. Name the folder. 4. Select the tools to copy to the new group. 5. Click Add. 6. Click Create Folder. Copy tools Tools can be copied from one folder to another in the Launch Pad. 1. Click a tool folder. 2. Right-click the tool, and then select Copy. 3. Select a new location and paste the tool. Launch command line parameters You can access the Command Prompt while viewing your host network information. 1. Launch the Toolset Launch Pad from the Start menu. 2. Select a tool from the right pane. 3. Right-click the tool, and then select command line parameters. 27

28 View version information and find help The Launch Pad provides a convenient place to find your Toolset version information, access Help, connect with other SolarWinds Toolset users on THWACK, and connect to the SolarWinds website. 1. Launch the Toolset Launch Pad from the Start menu. 2. In the navigation bar, click Help. 3. Select an option from the list. 28

29 Utilities This section provides information on the following: Licensing Upgrading Downgrading Creating backup and migrating Command Line Interface License Management Toolset uses a seat-based license. The tools are made accessible from the Orion Web Console. This feature is only available for Engineer's Toolset license. Web Toolset Per Seat License activation key: the number of users who can access the application is based on the number of seats purchased per license. Desktop Toolset activation key: can be used for one desktop installation of Toolset. Use Web Toolset as a stand-alone product: monitor up to ten resources, regardless of the number of seats purchased. Use Web Toolset with other Orion products: monitor as many resources as the other product licenses, and additional 10 resources from the Toolset license. For more information about the licensing change, see the SolarWinds knowledge article "Licensing Engineer's Toolset v11.0 (FAQ) For more information about licensing your Engineer's Toolset, see Software License Key For more information about managing licenses for Engineer's Toolset, see User License Management for Toolset Enter licensing information 1. After installation, the Toolset Setup program opens the Activate Toolset window. 2. Click Enter Licensing Information. To install Toolset on a computer with internet access: a. Click I want to activate my license over the Internet. b. Log in to the Customer Portal using your CustomerID and password. c. Click License Management. d. Go to SolarWinds Engineer's Toolset, and then locate the unregistered licenses list. e. Copy your unregistered Toolset activation key to the clipboard, and then paste it in the Activation Key field on the Activate Toolset window. 29

30 f. Connect with a proxy server to access the Internet, select Proxy Server, and then enter the proxy address and port number. g. Click Next. The software license key should now be active. To install Toolset on a computer without Internet access: a. Click I want to activate my license through the Customer Portal. b. Follow the steps in the Activate Toolset window to complete the registration. Maintain licenses with License Manager SolarWinds License Manager is a free utility that helps migrate Toolset licenses from one computer to another without contacting SolarWinds Customer Service. Install License Manager Install License Manager on the computer from which you are migrating currently licensed products. You must install License Manager on a computer with the correct time. If the time on the computer is off by as little as 5 minutes, in either direction, from Greenwich Mean Time (GMT), you cannot reset licenses without calling SolarWinds Customer Service. Time zone settings do not affect and do not cause this issue. 1. Click Start > All Programs > SolarWinds Engineer's Toolset > Utilities > Install License Manager. 2. Click I Accept to confirm SolarWinds EULA. 3. Click Install. Deactivate and re-activate licenses with License Manager To move your SolarWinds product to another server, you need to deactivate the current license from the computer and reactivate it on the server with a new installation. To do this without contacting SolarWinds Customer Service, Toolset must be under an active maintenance. 1. Log in to the computer where the currently licensed SolarWinds product is installed. 2. Start the License Manager in the SolarWinds program folder. 3. Select the products you want to deactivate on this computer, and click Deactivate. You can deactivate more than one product at the same time. In this case, the deactivation file contains information about each product. In certain products, you can deactivate licenses by using the internal licensing tool of the product. 4. Complete the Deactivation wizard, and save the deactivation file. 5. Log in to the SolarWinds Customer Portal, and go to the License Management page. 6. Select your product instance, and click Deactivate License Manually. 7. In the Manage License Deactivation page, locate the deactivation file you created in License Manager, and click Upload. 30

31 The deactivated licenses are now available to activate on a new computer. The new License Manager tool has offline deactivation with a created file that can be uploaded to the Customer Portal. Re-activate license Log in to the computer where you want to install your products, and then start installation. When asked to specify your licenses, provide your information. The license you deactivated earlier is assigned to the new installation. Upgrade Engineer's Toolset To upgrade to the current version of SolarWinds Toolset, find the upgrade path that matches your implementation in the following list: Upgrade earlier versions of Engineer's Toolset to version 10.9 and then to version Upgrade Engineer's Toolset : Uninstall your current Engineer's Toolset version, and install the latest version. Enter your current license activation key. In this case, no manual uninstallation is required, and no data is lost. Upgrade Engineer's Toolset from an Evaluation version to a Licensed version requires a license activation key. Upgrade from TFTP Server Free Tool to the current Engineer's Toolset. Upgrade from NetFlow Real Time Free Tool to the current Engineer's Toolset. Back up or migrate Engineer's Toolset The following files must be included when creating a backup of your Toolset implementation. The same version of Toolset must be installed on the computer from which the files are copied. If a file cannot be located, run the associated program and skip the file. FILES TO BACK UP OR MOVE *.BandwidthGauges PURPOSE Bandwidth gauge settings files 31

32 FILES TO BACK UP OR MOVE PURPOSE Bandwidth-Monitor.cfg dictionaries.cfg DNS.cfg IP-BrowserWeb.cfg Network-Monitor.cfg PortScan.cfg SWDiscovery.cfg Configuration settings files SWNetPerfMon.cfg TraceRoute.cfg Watchit.cfg *.IPDB IP address management database *. mdb Syslog database *.SNMP-Graph *.SDB SNMP Realtime graphs Network Sonar databases These files are located in the following locations by default, where UserName is the Windows user account. C:\Documents and Settings\UserName\Local Settings\Application Data\SolarWinds C:\Documents and Settings\All Users\Application Data\SolarWinds Some Toolset applications prompt you for a location to save specific files. If you have saved any files in a location other than the paths listed above, you will need to locate these saved files. Command line interface Many of the tools have command line options. Use /? to obtain a list of command line parameters for each tool. 32

33 Workspace Studio The SolarWinds Workspace Studio enables you to implement tabbed views displaying a wide range of your vital network statistics. You can easily create views that show graphs, gauges, and tables of response times, current bandwidth, percent utilization, and more. Use network discovery views to perform quick ping sweeps and map network switches. The Workspace Studio has an interface that can move and resize objects. The real time data collected by Workspace Studio is easy to find and manage. Manage tabs Workspace Studio can help you do the following tasks: Create tabs Create horizontal tabs Find gadgets within tabs Add tabs to toolbars Switch between tabs Save tabs Delete tabs meta.robots("noindex,nofollow"); Create tabs Tab layout and design is fully customizable. This enables you to create multiple tabs with multiple sets of gadgets. You can easily switch from a tab showing you details on a core switch to a tab showing you discovery information. Tabs can be saved so you can return to your customized view. 1. Click Tabs > New Tab. 2. Drag any gadget to add to the tab. 3. Save the tab. Right-click the tab name, and then click Save Tab. To save a tab under a group name, enter the name, and then click OK. meta.robots("noindex,nofollow"); Create horizontal or vertical tabs You can move multiple groups of tabs in a split-view on your monitor. To split tabs horizontally, click Tabs > New Horizontal Tab Group. To split tabs vertically, click Tabs > New Vertical Tab Group. 33

34 meta.robots("noindex,nofollow"); Find gadgets within tabs Right-click the tab, click Show Gadget, and then click a gadget. You can drag Gadgets from one tab to another tab. To copy Gadgets from a tab to a newly-created tab, drag the gadget to a blank area adjacent to an existing tab. meta.robots("noindex,nofollow"); Add tabs to toolbars Right-click the tab, and then click Add to Toolbar. Use the tab rotator You can use the tab rotator to switch between your tabs. This is especially helpful when using the Workspace Studio to display an overall status view or network operations center (NOC) view. Save tabs 1. Click Tabs > Save Selected Tabs. 2. To save the tab using a folder structure, enter the path and tab name using the following syntax: folder\tabname. You can save your tabs for later use and organize your tabs using any folder structure you want. Unsaved tabs re-open when you restart Workspace Studio. Delete tabs You can delete individual or a selection of tabs. 1. In the Saved Tabs group, select a tab or group of tabs. 2. Click Tabs > Delete Selected Tabs, and then click Yes. Modify Workspace Studio settings Modify SNMP, ICMP, polling, or threshold settings. 1. Go to the Settings menu. 2. Click File > Settings to access the Workspace Studio settings. If you closed the Explorer pane (or any other Workspace Studio component) and need to display it again, click View > Explorer Pane. 34

35 Add gadgets Gadgets can be discovery tools, interface monitors, CLI tools, or response time monitors. Configuring a gadget can mean adding a single device or supplying an IP address range to scan. Some gadgets require you to add devices or interfaces and select which statistics to monitor. Drag a gadget from the Explorer pane to a tab. meta.robots("noindex,nofollow"); Response Time gadgets Response Time gadgets display response time data for one or multiple devices. 1. Click Gadgets > Monitoring, and then drag a response time gadget to a tab. 2. Click options in the upper-right corner of the gadget, and then click Gadget Settings. 3. If the devices you want to monitor have: been added to the Workspace Studio, select the devices you want to monitor. have not been added to the Workspace Studio, enter the IP address or host name of a device, and then click Add. 4. Click OK. Export results from a table 1. Click > Export Table. 2. Select the items to export. 3. From the Export Format options, select the format to export, and then click OK. 4. Enter a file name, and then click Save. meta.robots("noindex,nofollow"); Interface gadgets Interface gadgets enable you to monitor detailed statistics from your network device interface such as bandwidth, percent utilization, broadcast packets and more. 1. Click Gadgets > Monitoring, and then drag any interface gadget to a tab. 2. Click Gadget Settings. 3. If the devices with the interfaces you want to monitor have: been added to the Workspace Studio: select the devices, and then click Next. have not been added to the Workspace Studio: complete the following: a. Enter the IP address or host name of a device. b. Select the device credentials used to collect SNMP data for the device, or click Discover a 35

36 Credential. c. Click Next. 4. Configure the discovery method used to find your interfaces: a. Click the Discover list. b. Select the method to use to find the target interfaces, and then click Go. To filter your search by name, status or type, you must specify the search parameter associated with the selected filter. For example, select Interfaces with Status method, and then select Up as the search parameter. Interface search results are cached to improve search speed. To clear the cache, click Clear Cached Interfaces from Selected Hosts. 5. Select the interface monitor. 6. Select the statistics to monitor, and then click Create Chart Items. 7. Click Next. View interfaces You can view statistic across multiple interfaces. For example, if you have a device with two interfaces, and you can view outbound traffic as a whole instead of viewing two individual outbound statistics. Select the interfaces to aggregate, click Aggregate Interfaces, and then click OK. meta.robots("noindex,nofollow"); CPU gadgets CPU gadgets are used to monitor the processor load of your network devices. 1. Click Gadgets > Monitoring > CPU and Memory, and then drag a CPU gadget to a tab. 2. Click > Gadget settings. 3. To monitor devices that: have been added to the Workspace Studio: select the devices, and then click Next. have not been added to the Workspace Studio: complete the following: a. Enter the IP address or host name of a device. b. Select the device credentials used to collect SNMP data for the device, or click Discover a Credential. For more information, see Add device credentials. c. Click Next. If the list does not display the CPUs, click Rediscover CPUs. 4. Modify the thresholds for the CPUs selected. 5. If you are creating a gauge, click Next, and then select the gauge style to display. 6. Click Finish. 36

37 meta.robots("noindex,nofollow"); Memory gadgets 1. Click Gadgets > Monitoring > CPU and Memory, and then drag a CPU gadget to a tab. 2. Click > Gadget settings. 3. To monitor devices that: have been added to the Workspace Studio: select the devices, and then click Next. have not been added to the Workspace Studio: complete the following: a. Enter the IP address or host name of a device. b. Select the device credentials used to collect SNMP data for the device, or click Discover a Credential. For more information, see Add device credentials. c. Click Next. 4. Select the memory statistics to monitor, and then click Next. If the list does not display the memory statistics expected, click Rediscover Memory. 5. Modify the thresholds for the CPUs selected. 6. If you are creating a gauge, click Next, and then select the gauge style to display. 7. Click Finish. Detach gadgets Detach and view a configured gadget independently from the Workspace Studio. Detaching a gadget creates a copy of your configured gadget in a separate window. Click Options in the upper-right corner of the gadget, and then click Detach. When you close the gadget, all settings associated with the detached gadget are lost. Web gadgets Web gadgets are used to display Web pages within the SolarWinds Workspace Studio. The following are some of the uses for the Web gadgets: Displaying your SolarWinds Orion Web resources. Accessing web interfaces for your network devices. Showing current weather conditions or forecasts. Accessing local intranet resources. Manage devices Devices can be added for one-time use or saved for future use. You can also import a list of devices to the Workspace Studio. Login credentials are created and assigned to specific devices. 37

38 Add devices 1. Click Devices > Add New Device. 2. Enter the IP address or host name of the device. 3. Select when to display the device status. When monitoring a large number of devices, it is good practice to set your devices to show the status only when monitored in a gadget to reduce unnecessary overhead. To select an existing credential set, select the credential set from the list, and then click Test this Credential. Click Close when done. To create a credential set, click Add a new credential, enter the information, and then click OK. For more information, see Add device credentials Discover and remember interfaces After adding a device, you can discover the interfaces on that device. When the interfaces are known, you can set Workspace Studio to remember the interfaces so they are displayed in the Devices tab in the Explorer pane. This enables you to drag interfaces to interface gadgets without having to go through the add interface process. 1. Right-click the device that contains the interfaces to be added, and then click Discover Interfaces. 2. Select the method you want to use to find the interfaces. 3. To filter your search by name or status, specify the search parameter associated with the filter you choose. For example, select the Interfaces with Status method, and then select Up as the search parameter. 4. Click Go. 5. Click Remember. 6. To remove an interface, click Stop Remembering. 7. Click OK. To discover the device credentials based on the existing credential sets, click Discover a Credential, and then click Close. Manage interfaces Manage interfaces directly from the Device list. To enable or disable interfaces, right-click the interface or selection of interfaces, and then click Enable/Disable Interfaces. To rename an interface, right-click the interface, click Rename Interface, and then enter the new name. To display the interface details, right-click the interface, and then click Show Interface Information. 38

39 Add device credentials When you add devices or use gadgets, you may be required to assign unique credentials to a device for use within the Workspace Studio. Create multiple credential sets to help you streamline your daily use of the tool. For security, credential sets can be encrypted within the database. The Workspace Studio supports SNMP (v1, v2c, and v3), SSH1, SSH2, and Telnet communication protocols. For information on the communication protocols your devices support, see device documentation. 1. Click File > Manage Devices & Credentials. 2. Click SNMP Credentials or SSH Credentials. 3. Click Add New. 4. Select the communication protocol. 5. Enter a name for the credential set. 6. Enter the community string. To see the community string as you enter it, click Show. 7. To test the SNMP credentials, enter or select the IP address or host name of a device, and then click Test Credential. 8. To ensure your credential details are secure, select Encrypt Credentials. 9. Click Apply Changes. Import devices You can import a list of devices from a text file, a CSV file, SolarWinds database types, SQL databases, and Access databases. Add devices to the Workspace Studio using an import file. The import files must contain the IP address of each device listed. 1. Click Devices > Import Devices. 2. Select the file to import, and then click Next. Import from an Orion or SQL database 1. If you know the connection string, click Enter Connection String Manually, enter the connection string, and then click Next. 2. In the Server Name or Address field, enter the SQL server name or IP address. 3. Enter the user name and password. 4. Select the database you want to import devices from, and then click Next. Import from any other file format 1. Browse to the import file, select it, and then click Next. 2. Assign the columns, and then click Next. 3. Select the rows to import, and then click Next. 39

40 4. If you want to exclude devices with duplicate IP addresses, select the box on the Select Options window. 5. Click Finish. The IP address of the device is used as the device display name when importing static devices if there is no connectivity. 40

41 Tools Reference This section introduces individual tools available in SolarWinds Toolset. Advanced Subnet Calculator SolarWinds Advanced Subnet Calculator assists you in calculating subnet masks and in IP address management with the following: Breaks down the IP address Performs DNS Resolution Offers classful subnet calculations Offers classless (CIDR) subnet calculations Provides a complete report of subnet addresses based on calculations Look up address details From the Address Details tab, you can execute forward and reverse DNS look ups, ping IP addresses, and convert them to hex and binary. IP address host name Response Time Hex Binary Address Owner or Info Copying to the clipboard Enter an IP address and click Lookup host name to look up the DNS name of the IP address. The tool also pings the target and calculates the response time. Enter a host name and click Lookup IP address to look up the IP address. The tool also PINGs the target and calculates the response time. Provides the response time for the IP address or host name. Provides the hex equivalent of the IP address. Provides the binary equivalent of the IP address. Provides a complete DNS Resolution of the owner of the IP address and bit template. Click Copy Details to copy the current information to the clipboard. Classful Subnet Calculator From the Classful Subnet Calculator tab, you can generate a list of subnets based on a number of different parameters. The classful approach to masking is achieved by adhering to the following standard classes: Class A Class B Class C

42 The following information is calculated after entering an IP address: Subnet Mask Inverse mask Subnet size Host range Broadcast IP address Subnet Mask Mask Bits Host Bits Number of Subnets Hosts per Subnet Subnet Bit Mask The IP address you specify is used as a base address when calculating subnets. To calculate a list of subnets, click Generate Subnets. The subnet mask used when generating a list of subnets. The subnet mask automatically adjusts when you change any other parameters. Number of network (or mask) bits used when generating a subnet list. The number of mask bits automatically adjusts when you change any other parameter. Number of host bits used when generating a list of subnets. The number of host bits automatically adjusts when you change any other parameters. Number of subnets that can be generated based on the subnet mask. The number of subnets automatically adjusts when you change any other parameters. Number of hosts within each subnet, based on the subnet mask. The number of hosts automatically adjusts when you change any other parameters. Mask template for the current subnet mask. CIDR Calculator Classless Inter Domain Routing (CIDR) provides a flexible method to allocate and specify IP addresses used in inter-domain routing compared to the original system of classful IP address assignment. As a result, the number of available addresses has been greatly increased. CIDR is now the routing system used by virtually all gateway hosts on the backbone network of the Internet. Many small companies also benefit from CIDR in that four class Cs can be grouped into one subnet to provide over 1,000 IP addresses. Subnet addresses On the Subnet Addresses tab, you can generate a worksheet of IP addresses for any subnet. Notes for each IP address can be added in the Notes column. These notes are printed or exported when the list of IP addresses is printed or exported. IP address Subnet Enter an IP address here. This IP address is used as the subnet address when generating a list of IP addresses. Click Generate Addresses to generate a list of IP addresses for the subnet. The subnet mask used when generating a list of IP addresses. 42

43 Mask Copy to the clipboard To copy the list of IP addresses to the clipboard, click Copy. Exporting is also available from the File menu. For more information, see Export, print, and copy calculations Export, print, and copy calculations After calculating information, you can transfer that information to other tools through exporting and copying and pasting capabilities. You can also print calculated information. To export calculations, click File > Export, and then select the enter of export. To copy calculations, click Edit, and then select the information to copy. The selection changes based on the tab you select. To print calculations, click File > Print. Bandwidth Gauges Bandwidth Gauges provides real time traffic monitoring. It monitors the use and amount of data received or transmitted by any remote network device using SNMP to communicate and gather traffic statistics. Gauges display transmitted and received traffic in bits per second, or transmitted and received percent utilization for each interface or port. Create gauge Bandwidth Gauges are simple to set up. As long as you have enabled SNMP communication on your devices, and your devices support MIB-II, you can monitor bandwidth usage with the Bandwidth Gauges tool. The number of gauges is governed by the memory of the Toolset computer. Real time utilization is based on the number of octets transmitted or received through an interface over the last few seconds. Bandwidth gauge polls the remote interface about every fifteen (15) seconds by default and calculates average bits per second since the most recent poll. You can select any interface or sub-interface of a frame relay to monitor. 1. Click Gauges > New Gauge. 2. Specify the device IP address or host name. 3. Select to use a community string or SNMPv3 credentials. To test the credentials, click Test. 4. Click Next. Specify if you want to store the credentials in the shared credentials database when prompted. 5. Select discovered interfaces or ports, and then click Next. 43

44 6. Check that Adjust automatically-discovered speed is correct, or specify your own speed. Different speeds can be specified for transmit and receive. The tool uses the port speeds to calculate percent utilization of the interface and define the upper scale of the gauge. 7. Select 64-bit or 32-bit traffic counters. 8. Click Finish. The gauge measures a baseline, and then immediately start monitoring usage. Launch shared credentials database The shared credentials database quickly loads credentials between different tools in the Toolset. 1. Click Edit > Shared Credentials Database. 2. Click Add, and then enter the required information: a. Enter the community string. b. To add SNMPv3 credentials, click SNMP Version 3, and then specify the following information: Credential set Context User name Authentication type Authentication password or key Encryption type Encryption password or key The name that represents the credentials you specify on the Add Credentials window. This name is displayed in the SNMP Version 3 list in Toolset tools that support the shared credentials database. A named designation, similar to a group or domain name, to which the user name belongs. Context is mandatory if it has been defined for the object being managed. The name of the user with access to the device. The authentication type you want to use when logging on to the device, for example, MD5. The password or key that corresponds to the selected authentication enter. The encryption used when communicating with the device, for example, DES (56bit) or AES (128 or 256 bit) encryption. The password or key that corresponds to the selected encryption enter. 3. Click a set of credentials, and then click Modify to change the stored information. 4. Click the credentials, and then click Devices to specify the host name or IP address of a device to associate with the selected credentials. Save and load sets of gauges When you have a set of gauges defined, you can save their configuration as a file that can be loaded at any time. 44

45 Save a set of gauge 1. Click File > Save Gauges. 2. Name the configuration file, and then click Save. Reload a set of gauge 1. Click File > Load Gauges. 2. Browse to the configuration file, and then click Open. Compare a running config with the startup config Use this tool to compare the running and startup (in NVRAM) configs of a Cisco router. If changes were made to the configuration but not committed to non-volatile memory, you can detect differences between the two configurations. Always compare running and startup configs before rebooting a router. 1. Confirm that your access list does not block SNMP queries. 2. Click Select Device, and then specify the host name or IP address of the device. 3. Select a community string or SNMP version 3 credentials. 4. To test the credentials, click Test. 5. Click OK. 6. If prompted, store the credentials you specified in the shared credentials database. 7. Click Compare Configs. When you download a configuration file, the SolarWinds TFTP Server starts automatically if required. If the TFTP Server is running, an icon is displayed in the Windows System Tray. To see the TFTP Server log, click the icon and click Status on the TFTP Server menu. The TFTP Server log displays any errors that occurred while transferring the configuration files. Cisco routers stop responding to SNMP queries while they are requesting a file from a TFTP Server. They also stop responding to SNMP while sending files to a TFTP Server. If you instruct a Cisco router to upload or download a new configuration file and it cannot comply, the action is attempted numerous times repeating up to a minute. During this time, the router stops responding to SNMP queries. You must wait until the previous router action times out, and then try again. After downloading both configurations, the comparison is displayed in the Config Editor or Viewer. Config Downloader The SolarWinds Config Download tool is used to download the configuration files from a Cisco router or switch. You can specify the target directory in which to save the config files. The Config Download tool lets you download configs quickly and archive them for later use. You do not need to view the downloaded config each time. 45

46 To use the Config Download tool, you need the SNMP read and write community string for the router or switch that you are downloading changes from. You also need a TFTP Server for the router or switch to communicate with. You can use SolarWinds TFTP Server or any other TFTP Server. Some of the uses for the Config Downloader include: Shutting down an interface Resetting or changing a login or enable password Changing banners Modifying access lists Modifying any other configuration setting Download a configuration from a router or switch The Config Download sends instructions to a router or switch via SNMP. This is why the SNMP read and write community string for the target router or switch is needed. The router or switch then transmits the configuration file to the target directory using the TFTP Server specified. 1. Click Select Router, and then specify the IP address or host name of the device. 2. Select to use a community string SNMP version 3 credentials. 3. To test the credentials, click Test. 4. Click OK. 5. If prompted, store the credentials you specified in the shared credentials database. 6. Click Copy Config from Router or Switch to PC. Advanced options You can modify your Advanced Options. The Advanced Options can downloaded Config file in the default system directory and use the TFTP Server configured for the workstation. When Advanced Options is selected, the following features are available: View config file after downloading Save config to TFTP Server Address Status Window When you select this option, the config download automatically launches the SolarWinds Config Viewer and displays the downloaded config file. In this window you can enter the directory name for the archived config file, or Browse to your archive folder. To select a specific TFTP Server, enter the TFTP Server IP address. The Status Window displays the download progress. 46

47 Config Uploader The SolarWinds Config Uploader is used to upload configuration changes into a Cisco router or switch. Config Uploader can be used to change an entire config or just one or two parameters. To use Config Uploader, you need the SNMP read and write community string for the router or switch that you are uploading changes into. You also need the SolarWinds TFTP Server for the router or switch to communicate with. Some of the uses for the Config Uploader are: Shut down an interface Reset or change a login or enable password Change banners Modify access lists Modify any other configuration setting The Config Uploader sends instructions to a Cisco router or switch via SNMP. This is why the Cisco Upload tool requires the SNMP read and write community string for the target router or switch. The device then requests the new configuration file from the TFTP Server and merges the new configuration file with the running configuration. You can also have the Config Uploader write the new configuration changes to nonvolatile RAM by checking Write to NVRAM also. Upload a configuration change to a Cisco router or switch 1. Confirm that your access list does not block SNMP queries. 2. Create the new configuration file. 3. Place the new configuration file in the TFTP Server root directory. 4. Click Select Router, and then specify the IP address or host name of the device. 5. Select to use a community string or SNMP version 3 credentials. 6. To test the credentials, click Test. 7. Click OK. 8. If prompted, store the credentials you specified in the shared credentials database. 9. Click Copy Config from PC to Router or Switch. Devices must support the writenet MIB to support this tool. 47

48 Cisco routers stop responding to SNMP queries while they are requesting a file from a TFTP Server. They also stop responding to SNMP while sending files to a TFTP Server. If you instruct a Cisco router to upload or download a new configuration file and it cannot, the action is attempted numerous times repeating up to a minute. During this time, the router stops responding to SNMP queries. You must wait until the previous router action times out, and then try again. Example configuration files Configuration files are text files that contains commands to be merged with the running configuration. There are no special rules for naming this file. You can give it any file name you choose. The following examples illustrate some common configuration changes. Shutdown Interface Ethernet0/2 Replace the Logon Banner Reset the Enable Password to "New*Password" interface Ethernet0/2shutdown banner motd $Internet-Gateway Cisco 7200Support Number: Contract Number: A Serial Number: $ enable password New*Password You can change and enable secret password the same way. Change all buffer settings buffers smallpermanent 500buffers small max-free 1000buffers small min-free 150buffers middle permanent 500buffers middle max-free 1000buffers middle minfree 150buffers big permanent 200buffers big max-free 400buffers big min-free 150buffers verybig permanent 150buffers verybig max-free 300buffers verybig minfree 50buffers large permanent 100buffers large max-free 200buffers large minfree 50buffers huge permanent 50buffers huge max-free 100buffers huge min-free 10 By creating a single configuration file with all the new buffer settings, and then uploading the change to all your routers using Config Uploader, you can avoid many typing errors. Reset or enable passwords using SNMP The SolarWinds Config Uploader can reset any login or enable a password on a Cisco router or switch. You do not need to know the password, just the SNMP read and write community string of the router or switch. 1. Create a text file with a single line containing the new password and copy it to the TFTP Server root directory. This text file provides a set of configuration commands you want to merge with the running configuration. This is a simple text file. You may give it any file name you choose. The following example text resets the enable password to New*Password.enable password New*Password. This will change the Enable Password even if it has been set using the enter 5 "secret" method. 48

49 To reset the login passwords for the vty (telnet) terminals, use the following example text: line vty 0 4password New*Passwordlogin 2. Start the TFTP Server on your machine. 3. The text file must be in the root directory of the TFTP Server. 4. Enter the device address, community string, and the TFTP server IP address into the Config Uploader and click Copy Config from PC to Router or Switch. In this example, Config Uploader did not write to non-volatile memory. If you restart or reboot the router, the enable secret password resets back to the previous password, prior to the changes. Write the changes to non-volatile memory, if you want to ensure the router retains the new password after a restart. Config Viewer You can use the SolarWinds Config Viewer in many ways: Download configurations from Cisco routers and switches. Compare date-based configurations of Cisco routers and switches. Upload configurations to Cisco routers and switches. Back up configurations. Print configurations. View and make changes to running router and switch configurations. Download a config from Cisco router or switch The Config Viewer makes it easy to download configs from your devices. 1. Click Select Router, and then specify the IP address or host name of the device. 2. Select community string, or SNMP version 3 credentials. 3. To test the credentials, click Test. 4. Click OK. 5. If prompted, store the credentials you specified in the shared credentials database. 6. Click Download. 7. Select the config to be downloaded, currently running config, or the start-up config in the router memory. When downloading a configuration file, the Config Viewer automatically starts the SolarWinds TFTP Server, if required. When running, the TFTP Server icon is displayed in the Windows system tray. To see the TFTP Server log, click the icon, and then click Status on the TFTP Server menu. The TFTP Server log displays any errors that occur during configuration file transfer. Ensure your access list does not block SNMP queries. 49

50 Automatically archive downloaded configuration files Config Viewer creates an archive of each configuration file as it is downloaded. Archived config files are saved in subdirectories of the install directory. These sub-directories are named using a date stamp in the format, mm-dd-yyyy. When you download a configuration, a copy is placed in the archive directory. Automatic archiving makes it easy to compare an older configuration with a current configuration to review changes. Compare two configurations Config Viewer enables comparison of text-based configurations. You can compare the configurations of different routers or switches, or compare an older version with the current configuration. 1. Click File > Compare Two Config Files. 2. Provide the path to each file. Config Viewer shows compared files side-by-side with changes highlighted in yellow. Red designates missing lines. Green highlights mark added lines. Decrypt passwords Config Viewer can decrypt seven Cisco passwords. The password decryption feature is often used with AS5200 and other Cisco access servers devices. The Config Viewer can download the configuration and decrypt all the login passwords in seconds. This is useful when converting AS5200 logins to TACACS or RADIUS. Decrypt all Cisco passwords Enter seven passwords in a configuration file, click Edit > Decrypt Passwords. Config Viewer searches and decrypts all enter seven passwords and highlights them in green. For more information about resetting enter seven or secret enter five passwords, see the following sections: Example configuration files Reset or enable passwords using SNMP Troubleshoot Config Viewer Consider the following notes to help troubleshoot any issues you encounter. Ensure you have also reviewed the notes following the download procedure. See Download a config from Cisco router or switch. TFTP Server setting is correct: select File > Preferences, and then confirm that the TFTP Server Address settings are correct. You might need to restart the Config Viewer after making these changes. Device supports the writenet MIB: Config Viewer uses the writenet MIB. Devices that do not support this MIB do not support the tool. 50

51 CPU Gauge The SolarWinds CPU Gauge monitors CPU load on routers, switches, and Windows 2000 and later computers. The CPU Gauge uses SNMP to communicate with the remote device, displaying the received results in a graphical gauge. Monitor a device 1. Click the button in the upper-right corner of the tool. 2. Click Setup Gauge. 3. Provide the IP address and the read or read and write community string for the device. 4. Click OK. Ensure your access list does not block SNMP queries. Ensure you use a valid read or read-write community string. Load gauge 1. Click the button in the upper-right corner of the tool. 2. Click Load Gauge. 3. Select the gauge to load, and then click Open. CPU Gauge skins 1. Click the five vertical lines next to the title of the tool. 2. Select the new skin. DHCP Scope Monitor The Dynamic Host Configuration Protocol (DHCP) Monitor Scope polls DHCP servers to extract IP address scopes and highlight scopes which have few addresses remaining. The number of dynamically-assigned and unassigned IP Addresses for each scope is displayed. You can use DHCP Monitor to show which scopes within your environment are running out of IP Addresses. Add DHCP Scope to the list of monitored scopes 1. Click Scope > Add DHCP Scope. 2. On the Add DHCP Scope window, specify the IP address or host name and the SNMP community string, and then click OK. You can add numerous DHCP servers to the tool, simultaneously monitoring numerous scopes. This tool supports DHCP scopes only on Windows NT, Windows 2000, and Windows 2003 servers and monitors scopes using SNMP. SNMP must be installed on the DHCP server. Modify polling intervals, alert levels, and community strings 1. On the toolbar, click Settings. 2. Click the Polling tab, and then adjust the polling interval. 3. Click the Alerts tab, and then adjust the IP address scope at which to consider IP address scope critically low. 51

52 4. Click the Community Strings tab, and then select the DHCP servers to monitor. 5. Click OK. Interpret DHCP Scope Monitor results DHCP Scope Monitor displays several details about each DHCP Scope: DHCP Scope provides the subnet address of the scope. Scope Name provides an editable field, allowing you to specify a name for each scope. In the Scope Name field, double-click the cell to edit, and then enter the name for each scope. Size displays the total number of IP addresses defined for each scope. Leased provides the total number of used IP addresses. Available provides the total number of unused IP addresses. Server provides the server name. Status provides the date and time of the last poll and any error messages. Rescan DHCP Scopes You can refresh the DHCP scopes of a specific DHCP server or all monitored DHCP servers. To rescan the entire range of DHCP scopes, click Scope > Poll All DHCP Scopes Now. To refresh a single DHCP scope, select the scope, and then click Scope > Poll Selected DHCP Scope. Export and copy DHCP Scope results After discovering scopes, you can transfer the information to other tools through exporting. To export calculations, click File > Export, and then select the enter of export. To copy calculations, click Edit, and then select results to copy. Discover used IP addresses The DHCP Scope Monitor displays the number of addresses used and available. Use the SolarWinds Ping Sweep to scan the subnet and show the addresses in use. DNS Analyzer You can use the DNS Analyzer tool to visually display the hierarchy of DNS resource records, including name server, CName, and pointer. The relationships between multiple Name servers and target IP addresses can be distinguished using the DNS structure diagram. Redirections from one Name server to another are also shown. DNS Analyzer queries your DNS servers and graphically represents the results. Query DNS servers and generate graphical analysis 1. Enter the required information. 2. Click Draw DNS Structure. View discovered DNS details You can view details about each node in the discovered structure. 52

53 Select the server you want more information about, and then click Details ( ). The Details pane is displayed on the right side of the screen with the following information: Server details Question sent to the server Record type asked for Parent node details Records returned View packet details You can view details about the packet sent between servers directly from the DNS diagram. To view packet details, right-click a link between nodes, and then click Packet Details. Add root DNS servers You can add root DNS servers to DNS Analyzer. Root name servers field requests for the root name space domain, and then direct further requests to the top-level domains. 1. Click File > Settings, and then click the Root DNS Servers tab. 2. Enter the name of the root name server to add in the Add Name Server to List field, and then click Add Server. 3. Click OK. Modify DNS query timeout Depending on your network and bandwidth limitations, you may need to adjust the DNS query timeout. 1. Click File > Settings, and then click the Details tab. 2. Adjust the DNS Query Timeout scroll bar. 3. Click OK. Skip resolution of names provides without addresses DNS servers might not always provide both the name and the address for other DNS servers. You can force another DNS lookup to retrieve the missing information, or you can accept the provided name or address. 1. Click File > Settings, and then click the Details tab. 2. Select Do Not Resolve Suggested Name Servers without Addresses. 3. Click OK. DNS Analyzer colors Understanding the colors used in DNS Analyzer is integral to understanding your graphical DNS analysis. Consult the following table for a list of colors, designations, and definitions. 53

54 COLOR OBJECT DEFINITION Peach Root Name Server Represents the Root Name servers used to start the chain of queries. These are the first name servers queried during a DNS Analysis. You may change the Root Name servers in the settings dialog. Purple Name Server Represents a non-top Level Domain name server which was referred by another name server. Yellow CName Represents a record returned from a Name Server that indicates that the target host name that we are querying for is really an alias for another host name. Aqua Gold Green Blue Red MX Record Global Top Level Domain Servers (GTLD) Authoritative Address Address Error Represents a record returned from a Name Server indicating the host name of the computer that is designated to receive traffic. Represents Name Servers which are known to be at the top level of the internet naming system (DNS). GTLD Servers are typically used as the Root Name Server for DNS Analysis. Represents a record returned from a Name Server containing the Authoritative IP address for the request host name. Authoritative indicates that the Name Server is the authority for the queried domain. Represents a record returned from a Name Server containing an IP address for the queried host name. These record types are returned by Name Servers which have previously queried other Name Servers for the address, and have cached the answer. Represents an error during the Analysis. If a Name server fails to respond in the designated timeout period, an error node will be drawn with the description "Timeout." Other errors may include "Name Error," which indicates that the queried host name does not exist. Analysis examples The following examples illustrate common output for DNS Analyzer and a short description of the output. 54

55 Example 1 The root name server is GTLD. The additional name servers are ns1.msft.net, ns3.msft.net, ns5.msft.net, ns4.msft.net, ns2.msft.net. All name servers point to one authoritative server. Msn.com does not have any DNS issues. Example 2 The root name server is GTLD. The additional name servers are ns1.msft.net, ns3.msft.net, ns4.msft.net, and ns2.msft.net. All name servers point the authoritative servers. In this example, the DNS is hosted from eight different servers. Example 3 There are 14 root name servers listed and 22 name servers. A non-authoritative address is found and an alias. The address is non-authoritative as it comes from the cache of the name server. 55

56 Example 4 In this example, there is an error reported from one of the Name Servers. This represents a time out issue. Set node as the root and rescan DNS Analyzer enables you to set a discovered node as the root of your DNS analysis, and then rescan and recreate your diagram. Discovered node as your root 1. Right-click the node you want as root. 2. Click Set Node as Root and ReQuery. DNS and WhoIs Resolver SolarWinds DNS Resolver retrieves information about domain names and IP addresses and then displays information about the specified host name or address. Resolve domain names or IP addresses 1. To find the IP address of a host or domain, enter any of the following in the Host name field: Host name, for example, Server-4 or URL, for example, address, for example, sales@solarwinds.com Domain name, for example, yahoo.com Click Lookup Address to retrieve information about the host name or URL. 2. To find the host name or domain of a specific IP or network address, enter any of the following in the IP address field: IP address, for example,

57 Network address, for example, Click Lookup Host name to retrieve the host name and other details about the address. Specify WhoIs Servers You can configure the tool to select a WhoIs server automatically, or designate a specific server to use. 1. Click File > Settings. 2. Clear Automatically determine the correct WhoIs Servers. 3. Enter the IP address or host name of the server you want to use, or select the WhoIs server from the list. 4. Click OK. View a cache of resolved names You can access a cache of all the host names and IP addresses resolved by the tool. When a host name or IP address is resolved, the DNS Resolver creates an HTML file containing all the discovered results and stores it in the DNS-Cache directory. 1. Browse to your installation directory. 2. Locate the DNS-Cache directory, and then view the HTML file named using your search parameter. The DNS-Cache directory is cleared when the program is closed, so you should copy the files into another directory if you want to save them. DNS Audit The DNS Audit tool helps you locate DNS database errors by scanning a range of IP addresses and performing reverse DNS lookups for each address. If DNS Audit receives a DNS response for an address, it attempts a forward DNS lookup to verify that the forward lookup resolves to the originally-scanned IP address. Any errors found during the scan are highlighted. You can also filter the results to show the reverse DNS errors, the IP addresses that did not resolve, or forward DNS errors. Start audit of IP range 1. Enter the beginning address of an IP range in the Starting IP address field. 2. Enter the ending address of an IP range in the Ending IP address field. 3. Click Scan. If DNS Audit finds forward or reverse DNS records with more than one response, it will list them all. DNS Audit uses the DNS and WINS servers already configured on your PC. If multiple domain names are assigned to a single IP address, or there are multiple IP addresses assigned to a single domain name, DNS Audit will only show them when you run DNS Audit on Windows

58 Filter results Several different filters are available, including the ability to limit results to the following: Addresses with reverse DNS responses Addresses that do not respond to reverse DNS Addresses with forward DNS errors Click Filter, and then select the enter of filter. Interpret DNS Audit results Consider the following when interpreting DNS Audit results: The first column of the user interface provides the scanned IP address. The Reverse Resolve column provides the DNS name, if the IP address resolves using reverse DNS. The Reverse Resolve column contains red text <no reverse DNS response> if a response is not received. The Forward Resolve column contains nothing if reverse resolution fails (forward resolution is not attempted). The Forward Resolve column contains <did not resolve> if there was a failure of the forward resolution attempt. The Forward Resolve column contains a red IP address if the forward resolution to an IP address is different than the originally scanned IP address. Edit Dictionaries The Dictionary Editor helps build a database of words to be used during an SNMP or password attack. The dictionary database is normally used by SolarWinds SNMP Dictionary Attack, but you can also use it with other programs. The database of dictionaries is a Microsoft Access database. A new dictionary can be created by importing a list of words. The words in a dictionary can be arranged. Dictionaries can also be exported into plain text files. View Dictionary Click Dictionaries > Show Dictionary, and then click the dictionary you want to see. Mutate Dictionary Mutating a dictionary is the process of mutating each word slightly. For example, changing all the words to uppercase, capitalizing them, or converting individual characters. 1. Click Dictionaries > Mutate Dictionary, and then click the dictionary you want to alter. 2. Select one or more mutations to apply, and then click OK. 3. Select a dictionary to place the new words in, and then click OK. Words are taken from one dictionary, mutated, and then stored in the target dictionary. 58

59 The source and target dictionary may be the same. Also, you can perform many mutations on a single dictionary. You are not limited to a single mutation. Edit list of words in Dictionary The easiest way to edit the words in a dictionary is to export the dictionary to a plain text file and open it in a text editor. After you have edited the dictionary, import it back into the dictionary database. See Import list of words. Import list of words Word lists can be imported into the dictionary database using a text file. 1. Click File > Import Dictionary. 2. Choose to import the list to a new or existing database. 3. Browse to the text file containing the list of words to add, and then click Open. The list of words should be in a plain text file with one word per line. Enhanced PING Enhanced Ping can be used to continuously monitor servers, routers, workstations, or other devices and continually show response time. 1. Click Nodes > Edit Nodes. 2. Enter the name of the node you want to ping, and then click Add Node. 3. Repeat Step 2 until you have added all the devices you want to monitor with the Enhanced Ping tool. 4. Click OK. Log statistics The Enhanced Ping tool can log response times as they are collected. The log file is a plain text file. A new line is added to the log file each time Enhanced Ping checks the response time of each node. 1. Click Nodes > Settings, and then click the Logging tab. 2. Check Enable logging of ICMP responses, and then specify a destination and file name for the file in the Log File field. 3. Click OK. Export results Using the Export wizard, you have several export options: Export in the following formats: Windows Metafile EMF BMP JPG 59

60 PNG Text Export to the following destinations: Clipboard File Printer Export the object using the following height and width dimensions: Millimeters Inches Points Export your results 1. Click File > Export wizard. 2. Specify the values, and then click Export. Load profiles To save time, especially if you often monitor the same set of devices with the Enhanced Ping tool, save your profile. This ensures you can quickly load the profile and immediately start monitoring instead of building a device list each time you start the tool. 1. Click File > Load Profile. 2. Select the profile you want to load, and then click Open. Reset statistics You can clear and re-calculate the high and low response time statistics for all nodes. Reset high and low statistics Click Nodes > Reset High/Low Statistics. Clear all the data and restart monitoring Click Nodes > Reset All Statistics. Customize graphs There are a few quick changes you can make to the look of your chart. You can simply select a different chart enter: Step Chart Ribbon Chart Area Chart 60

61 Vertical Bar Chart Horizontal Bar To change the chart enter, click Chart, and then select the chart enter to view. To add a response time table, click Chart > Response Time Table to add a table of response times at the bottom of the chart. To select a different color palette for your chart, click Chart > Palette, and then select a color scheme. To modify the colors used in the foreground and background of the chart and to designate your statistics, click Chart > Set Colors. To view a full set of the customization options, click Chart > Customize, and then modify the chart. Modify Enhanced Ping settings Enhanced Ping can modify ICMP polling intervals, ICMP timeout, packet time-to-live, and the data size and contents of the actual ICMP packet. 1. Click Nodes > Settings. 2. Click on the Polling tab, and then specify the values: Poll Interval ICMP Timeout Packet Time- To-Lives enables you to change how often to check the response time of each node. designates the amount of time to wait for a PING response before assuming the IP address is no longer responding. If you expect devices to respond quickly and would like any delays over 300 milliseconds to be flagged as a problem, set the PING Timeout to 300 milliseconds. Enhanced Ping then considers PING responses taking longer than 300 milliseconds as lost. enables you to specify the number of hops allowed during a trip to the specified IP address. With a setting of 32, your test could pass through 32 different routers before being discarded by the network. 3. Click the Packet Size tab, and then specify the following value: Data portion of ICMP packet: you can enter the additional text in the window to increase the packet size or delete text to reduce the packet size. Most PING tests require only a small amount of data. IP address Management SolarWinds IP address Management can be used to actively monitor which IP addresses are in use on your network across multiple subnets. It can also be used to pre-allocate IP addresses. Scan a subnet You can get started quickly by scanning a network subnet. 61

62 1. Click Subnets > New. 2. Enter a name for the subnet. This name is used in the navigation tree on the left of the user interface, and as the window name in the right pane. 3. Enter an IP address in the subnet you want to scan. 4. Enter the subnet mask, and then click OK. The following information is reported for each IP address: IP address status, for example, Available, Used, or Reserved DNS name Days from the last response Machine enter (For target devices that support SNMP) System Name (For target devices that support SNMP) Location (For target devices that support SNMP) Response Time Add comments for each address You do not need to leave IP address Management running. Many customers run the tool only when assigning IP addresses. They scan the subnet to update the current IP address details just before they assign an IP address. If you do leave the tool running, IP address Management has a better opportunity to report every used IP address. If you leave IP address Management running, any devices that were powered off during the initial scan are retrieved when the device is powered up. Modify subnets You can change the name used to identify a subnet within the IP address Management tool, modify the subnet mask, and change the automatic scan frequency. 1. In the left pane, click the subnet you want to modify. 2. Click Subnets > Details. 3. Enter an easily recognizable name in the Subnet Name field. 4. Enter the mask you want to use when scanning the subnet. If you change this setting, you must rescan the subnet. 5. Adjust the slider to adjust the frequency with which the IP address Management tool should scan the subnet for IP addresses in use. You can also specify that this subnet be excluded from the automatic publishing of discovered IP addresses. See Automatically publish discovered information in HTML Filter subnet addresses The addresses within each subnet can be filtered to display the following discovered addresses: 62

63 All addresses in the subnet Used addresses in the subnet Available addresses in the subnet Reserved addresses in the subnet Provides a list of all addresses listed in IP address order. Provides a list of only the IP addresses that have responded to an IP address Management scan. These IP addresses are currently in use and should not be used when assigning addresses to new devices. Displays IP addresses that have never responded and are marked available. These addresses can be assigned to new devices. Displays the IP addresses that you have marked as reserved for future use. You should Reserve an IP address when assigning it to a device. You can reserve an IP address by clicking the IP address and pressing R on the keyboard or by clicking on the IP address and selecting Address Status > Reserved. Filter discovered subnet list Click View, and then select the filter you want to use. All Addresses Used Addresses Reserved Addresses Available Addresses Change the status of an IP address manually If you know the status of an IP address and it is not properly shown in your IP address scan, you can manually update the status of the address. You may need to manually update address information for a a variety of reasons, including: A particular device was down at the time of the scan. A device has been recently decommissioned. Click Edit, and then click the option. Mark Selected Addresses as Reserved. Mark Selected Addresses as Used. Mark Selected Addresses as Available. 63

64 Modify SNMP credentials and enable SNMP discovery SNMP credentials are not required to use the product to find used or available IP addresses.to discover the enter of device using the IP address, specify SNMP credentials. You can create a list of SNMP credentials, including SNMP v3 credentials, to use when you query your subnets. 1. Click File > Network/Scanner Settings. 2. Check Enable SNMP Discovery on the Credentials tab. 3. Click Add. 4. Specify the information on the Add Credentials window, and then click OK. 5. Arrange the order of the community strings using Move Up and Move Down. Access is attempted using the community strings in the displayed order. Often used credentials should be higher in the list to speed discovery. 6. Click OK. Modify ICMP scan settings Initial contact with devices is attempted using ICMP. Depending on your network, you can modify your scanning settings to expand or shorten delays between pings and the timeout. 1. Click File > Network/Scanner Settings. 2. Click the Preferences tab, and then specify the values in the Scanning grouping of the window. 3. Click OK. The number of pings should be set to 2 or higher, especially when scanning networks using Cisco routers. If the target IP address is not in the ARP cache of a Cisco router, the router discards the ICMP query (PING) while it requests the MAC address of the target IP. The first PING will never arrive at the subnet of the target IP address. In this situation, the Cisco router responds to the second PING. On slow connections, consider allowing more time between pings and expanding the timeout period. Automatically publish discovered information in HTML IP address Management enables you to automatically generate an HTML file that contains the information you select on a timed schedule. For example, you can save this report to your inetpub root directory and provide an automatically-refreshed list of used and available IP addresses on your website. 1. Click File > Network/Scanner Settings. 2. Click the Preferences tab, and then check Enable auto-publish to Web. 3. Specify the directory to save the HTML files. The files use the subnet address as the name of the published HTML file. The default directory is <ALL_USERS_PROFILE>\Application Data\SolarWinds\Toolset. 4. Specify the publishing interval in the Auto-publish every field. 64

65 5. Select one of these options: 6. Click OK. Publish all IP Addresses Publish only Reserved, Used, or IP Addresses with comments Exclude subnet from Automatic Publishing To exclude a specific subnet from the published HTML file, complete the following task. 1. Click Subnets > Details. 2. In the Subnet Details window, select Exclude this subnet when Auto-Publishing to the Web, and then click OK. Scan a subnet manually In the left pane, select the subnet, and then click Subnets > Scan Now. Refresh subnet IP address list Select the subnet in the left pane, and then click Refresh. Refreshing a subnet does not rescan the subnet. This action only repopulates the table from the database. Share IP address Management Database When you create an IP address Management database, you can select a shared location to save to the database. If you select a shared server, any computer in your network with the SolarWinds IP address Management tool installed can access, view, and update this data. If you have an existing database that you want to move to a shared server, complete the following task. 1. Copy the IP-Address-Management.IPDB file from the SolarWinds directory where you installed the executables to the shared server where you want the database to reside. The default installation directory is \Program Files\SolarWinds\Engineer's Toolset. 2. Open SolarWinds IP address Management with which you want to load this database. 3. Click File > Open IP address Management Database, and then browse to and select the IP- Address-Management.IPDB on your shared server. This database becomes your default until you change to a different database. IP Network Browser SolarWinds IP Network Browser is an interactive network discovery tool. IP Network Browser can scan a subnet and show the details about the devices on the subnet. Each IP address is sent a PING. For each responding address, IP Network Browser attempts to gather more information. It does this using SNMP (Simple Network Management Protocol). An SNMP agent must be active on the remote devices in order for IP Network Browser to gather details about the device. 65

66 The SolarWinds IP Network Browser is not specific to Cisco devices. It can discover any device with an IP address. If the device has an SNMP agent and the correct SNMP community string is included in the IP Network Browser Settings, IP Network Browser discovers a great deal about the device. The first time you run IP Network Browser, a configuration wizard guides you through setting up the tool. Before completing the wizard, confirm that you have the read or read and write community string and that an access list on your router is not blocking SNMP access. Scan subnet 1. Enter an IP address in the Subnet Address field. 2. Enter the subnet mask in the Subnet Mask field. 3. Click Scan Subnet. You are not required to enter the exact network address. IP Network Browser calculates the correct subnet address based on the Subnet Mask. For example: if you enter as the Subnet Address and as the Subnet Mask, IP Network Browser calculates the correct subnet / For this example, IP Network Browser scans from to Scan single device 1. Enter a host name or IP address in the Host name or IP address field. 2. Click Scan Device. Scan IP address range 1. Enter the beginning IP address in the Beginning IP address field. 2. Enter the final IP address of the range in the Ending IP address field. 3. Click Scan Address Range. When scanning a range of IP addresses, you might scan a network or broadcast address. When you scan a broadcast address, any device (or all devices) on the subnet might respond. The discovery information can be a mix from many different devices. Modify IP Network Browser settings Enable IP Network Browser to locate as many devices as possible within your network. 1. Click File > IP Network Browser Settings. 2. To modify the community strings tried when contacting devices, click the Community Strings tab. To add a community string, enter the community string you want to add in the New Community String field, and then click Add. To remove a community string, click the community string, and then click Delete. To change the order in which community strings are attempted, select the community string then click the up or down arrow. 66

67 3. To modify the number of PINGs sent during the discovery mode or change the delay between Pings, click the Discovery tab. ICMP PINGs are used to initially discover a responding node. If you are connecting over dialup or another slow connection, the wait and delay can be increased for better discovery and to limit traffic generated by the tool. The number of PINGs per node should always be set to 2 or more, especially when scanning networks using Cisco routers. If the target IP address is not in the ARP cache of the Cisco router, the router discards the ICMP query (PING) while it requests the MAC address of the target IP. The first PING will never reach the subnet of the target IP address. In this situation, the second PING is the one the target IP address responds to. 4. To modify the wait period before timing out change the PING time to live for a packet, click the ICMP tab. The PING timeout is the number of milliseconds to wait for a reply before assuming that the target IP address is not responding. The packet time-to-live is the number of hops you will except while navigating to the specified IP address. With a setting of 32, your PING test could pass through up to 32 different routers on its way to the remote IP address before being thrown away by the network. Normally you would set this to 32 hops. 5. To modify the community strings tried when contacting devices, click the SNMP tab. The packet timeout designates the number of milliseconds to wait for an SNMP reply before assuming the packet was lost and retrying. You can set this around 600 milliseconds, the internal SNMP logic of the tool automatically adjust when it notices dropped packets. Query attempts defines how many times to retry an SNMP query before giving up. Set this to at least 2, to ensure one retry. Save discovery in HTML The Engineer's edition of IP Network Browser can save the current discovered information as an HTML page that can be published to your Web server. You must first discover node details and expand the corresponding tree items to include details in the HTML version of the discovery. For example, if you have discovered a Windows Server, and would like the user accounts included in the saved file, you must first expand the accounts tree so the account details are also discovered. 1. Click File > Publish to Web. 2. Select the nodes to include, and then click Next. 3. Select the discovery groups you want included in the report, and then click Next. Discovery groups include accounts, routes, shares, and other information discovered through SNMP. Your discovery results may not include all the groups. Results depend on the discovered device enter and what it supports. 4. Specify whether or not to include the SNMP community strings, and then click Publish. 67

68 Export discovery as a text file You can export discovered results to a text file. You must first discover node details and expand the corresponding tree items to include details in the text version of the discovery. For example, if you have discovered a Windows Server and would like the user accounts included in the text file, you must first expand the accounts tree so the account details are discovered. 1. Click File > Export wizard. 2. Select the nodes to be included, and then click Next. 3. Select the discovery groups you would like included in the report, and then click Next. Discovery groups include accounts, routes, shares, and other information discovered through SNMP. Your discovery results may not include all the groups. Results depend on the discovered device enter and what it supports. 4. Specify to include the SNMP community strings if required, and then click Export. Network Sonar can discover your network and create a Microsoft Access database. See Network Sonar IP Network Browser command line operation It is possible to launch the IP Network Browser directly from the command line. You must add the path to IP Network Browser in the PATH system variable or specify the full path when running the program from the command line. Syntax IP-Network-Browser HostIP [subnet/mask startip-endip] Hostip IP address of a single machine subnet/mask Subnet address and mask separated by a "/" startip-endip Examples An IP address range separated by a "-" Scan or discover a single device: IP-Network-Browser Scan or discover an entire subnet: IP-Network-Browser / Scan or discover a range of IP addresses: IP-Network-Browser

69 Customize Tools menu You can add new tools to the Tools menu by editing the Tools.Menu file. This file and other customizable files are located in the IP-Network-Browser directory in the SolarWinds Toolset installation directory. The Tools.Menu file is a text file and can be edited in Notepad. The default Tools.Menu file is listed below. ## Tools Menu for IP Network Browser#### Macros that can be used with any command are:## ${IP} IP address of the node# ${Target} Node Name# ${SysObjectID} Unique System OID for the node# ${Community} SNMP community string for the node##&telnet... : telnet.exe ${IP}Trace&Route... : traceroute.exe ${IP} To change the Telnet command: Replace the current tool with the following entry: &Telnet... : C:\Program Files\MyFavoriteTools\mytelnet.exe ${IP} To add a command called SSH: Add the following entry on an empty line: &ssh... : ssh.exe ${IP} ${Community} To add menu-dividing lines: Enter a single hyphen (-) on a line alone. Customize MIBs menu You can add new MIB references to the MIBs menu by editing the.mibsmenu files. These files and other customizable files are located in the IP-Network-Browser directory in the SolarWinds Toolset installation directory. The *.MibsMenu files are text files that can be edited in any text editor. The file names of the MibsMenu files are simply the vendor or machine specific sysobjectid followed by.mibsmenu. The sysobjectid can be discovered for a specific device by using IP Network Browser to discover it, and then expanding the System MIB section of the tree. You can also use SolarWinds MIB Browser to find or discover new MIB references. # MIBs Menu for IP Network Browser## Generic SNMP Devices## Syntax for each line is...## Menu item : MIB table or tree# &MAC Addresses of Interfaces... : ifphysaddress&running Software... : hrswruntable Installed &Software... : hrswinstalledtable-&ip Statistics... : ipinreceives & Next 16&ICMP Statistics... : ICMP&SNMP Statistics... : SNMP&TCP Statistics... : tcprtoalgorithm & Next 11 & tcpinerrs & tcpoutrsts&udp Statistics... : udpindatagrams & Next 3- RMON &Ethernet Statistics... : etherstatstablermon &Token Ring Statistics... : tokenringmlstatstable-&frame Relay Statistics... : frcircuittable&bgp Peer Table... : bgppeertable Walk a network from one subnet to another When you right-click a selected subnet, you can zoom to the next subnet and scan it. IP Network Browser opens a new window and begins scanning the subnet in the new window. 69

70 IP Network Browser FAQs How do I create a Community Sting? For Cisco routers there is a brief overview on the page ( If you have a different router, please refer to that manufacturer home page for specific instructions on how to configure and change Community Strings. Is IP Network Browser specific to Cisco devices only, or can it be used to discover details about any device? The SolarWinds IP Network Browser is not specific to Cisco devices. It can discover any device with an IP address. If the device has an SNMP agent and the correct SNMP community string is included in the IP Network Browser Settings, IP Network Browser discovers a great deal more about the device. IP Network Browser inherently understands hundreds of types of devices and will discover different details about each. For example: User Accounts, Shares, and Running Services are discovered about Windows workstations and servers. For Cisco routers, the tool discovers IOS levels, the cards in each slot, flash memory details, interface details, frame relay DLCIs and their statuses, among other information. When expanding the results I get a message saying: "ActiveX component can't create object" This occurs if a component of your SolarWinds tools has been deleted or moved. This is easily resolved by re-installing the toolset. Your existing license will still work and you will NOT need to reregister. I cannot seem to download a Cisco configuration file. What am I doing wrong? Are you using the read and write community string? Click Router > Verify Community String and ensure you have the read and write community string. Ensure an access control list (ACL) on the router is not blocking SNMP queries. See Troubleshoot Config Viewer MAC Address Discovery The MAC Address Discovery tool can discover the MAC addresses, hardware manufacturer, IP address, and host names of the devices connected to your local subnets. To discover the MAC addresses of devices connected to remote subnets, either run the tool on a laptop you can plug into the remote subnets or consider using Network Sonar and the Switch Port Mapper. See Network Sonar and Deprecated Switch Port Mapper. Start discovery 1. From the Local Subnet list, select the local subnet. If your computer is attached to one subnet, only one choice is provided in the list. 2. Click Discover MAC Addresses. 70

71 Search results data Search for a value in the results set returned by the MAC Address Discovery tool: 1. Click Edit > Find. 2. Specify the text string to find. 3. Specify the search option: From the top From the current position down From the current position up 4. Click Find Next. Export, print, and copy discovered results After you perform a discovery, the MAC Address Discovery tool can transfer that information to other tools through exporting and copy and paste capabilities. You can also print discovered information. Export discovery results 1. Click File > Export, and then select the enter of export. 2. Select the information to export. 3. Name the path for the exported information. To copy discovery results, click Edit > Copy Selection, or Edit > Copy All. To print discovery results, click File > Print, and then select the information to print. Modify MAC Address Discovery settings You can configure the enter of data provided in the discovery settings by adding data columns and specifying how to format MAC addresses. You can also adjust the ICMP Ping settings to reflect your network speed. 1. Click File > Settings. 2. Click the Columns tab, and then select the columns to display in your discovery results. Use the up and down arrows to change the left to right order of the selected columns. 3. Click the MAC Addresses tab, and specify the notation you want to use. Dotted notation offers an easier to read value separated by periods (.). 4. Click the Network tab, and then specify the ICMP values to use when pinging devices in the local subnet. Fast connections can use shorter timeout and delay settings. MAC Finder The MAC Finder gadget is used to search a list of switches for a specific MAC address. This is helpful when you are looking for a MAC address but do not know the associated device. 1. Click Gadgets > Tools > Discovery Tools, and then drag the MAC Finder gadget to a tab. 2. Enter the MAC address you are searching for in the MAC Address to Find field. 71

72 3. To search have already been added to Workspace Studio, drag the switches from the Devices tab to the Devices to Search list in the MAC Finder gadget. 4. To search have not been added to Workspace Studio, enter the IP address or host name and the SNMP community string in the provided fields under Manually Add IP or host name, and then click Add device. 5. To hide Cisco trunk port results, select Do not display Cisco trunk ports. 6. Click Search. MIB Scanner The MIB Scanner tool scans within a range of device IPs for specific OIDs. Scans multiple devices. Scans for multiple MIBs. Shows which devices support MIBs and their values. View OID 1. Enter a comma-delimited list of IP addresses to scan. You can enter a range using dashes, you can use wildcards (* and?), and you can use subnet identifiers. Examples: ::? / , /30, *1, To use a file, click Load from file. 3. Browse to the file you want to import, and then click Open. 4. Follow the onscreen instructions to complete the import process. 5. Enter the comma-delimited OIDs. 6. Select the Discovery Options. 7. Click Discover. Examples You must scan your corporate network for a set of Windows machines. If you use the sysdescription OID , and then perform a Discover using MIB Scanner, all the devices on the network that match that OID value display in the result pane. You can then sort the results by value and search for matching sysdescription OIDs. 72

73 You are going to use the Neighbor Map tool to get a map of your network, but you need to find out which devices support CDP protocol first. You know that the CDP MIB is , you enter this in the OIDs field and perform a Discover. Your results display with several green rows. The green rows are devices that actually contain CDP information and might support CDP protocol. The white rows are SNMP devices that did not match the requested OID. Selecting the Devices matching the requested OIDs tab displays a filtered list of only those devices that matched the CDP MIB. MIB Viewer The MIB Viewer tool queries the Management Information Base (MIB) database to display any OID or Table. It provides a faster method than the MIB Browser to retrieve frequently used MIBs, although it does not provide browsing of the MIB tree. View OID or table 1. Enter the host name or IP address of the target device. MIB Viewer directly queries the device for supported MIBs. 2. Provide an SNMP community string. To modify values, ensure you provide the read and write community string. 73