SolarWinds User Device Tracker Evaluation Guide

Copyright © 1995-2014 SolarWinds Worldwide, LLC. All rights reservedworldwide. No part of this document may be reproduced by any means normodified, decompiled, disassembled, published or distributed, in whole or in part,or translated to any electronic medium or other means without the written consentof SolarWinds. All right, title, and interest in and to the software anddocumentation are and shall remain the exclusive property of SolarWinds and itsrespective licensors.

SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHERTERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ONSOFTWARE AND DOCUMENTATION FURNISHED HEREUNDERINCLUDINGWITHOUT LIMITATION THE WARRANTIES OF DESIGN,MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANDNONINFRINGEMENT. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS,NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISINGIN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IFSOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCHDAMAGES.

The SolarWinds, the SolarWinds & Design, ipMonitor, LANsurveyor, Orion, andother SolarWinds marks, identified on the SolarWinds website, as updated fromSolarWinds from time to time and incorporated herein, are registered with the U.S.Patent and Trademark Office and may be registered or pending registration inother countries. All other SolarWinds trademarks may be common law marks orregistered or pending registration in the United States or in other countries. Allother trademarks or registered trademarks contained and/or mentioned herein areused for identification purposes only and may be trademarks or registeredtrademarks of their respective companies. Microsoft®, Windows®, and SQLServer® are registered trademarks of Microsoft Corporation in the United Statesand/or other countries.

Version 3.2.2, revised 04.28.2015

Contents

Table of Content

Table of Content 3

SolarWinds Orion 6User Device Tracker Evaluation Guide 6About SolarWinds 6Contacting SolarWinds 6Conventions 7SolarWinds User Device Tracker Documentation Library 7Chapter 1: Introduction to SolarWinds User Device Tracker 9What is a Device? 9

What SolarWinds User Device Tracker Offers 9

How Does SolarWinds User Device Tracker Work? 10

Chapter 2: Installing SolarWinds User Device Tracker 12SQL Server and SQL Server Express with SolarWinds UDT 12

Requirements for SolarWinds UDT 12

UDT Server Software Requirements 13

Orion Server Hardware Requirements 14

Requirements for Virtual Machines and Servers 15

Requirements for the Orion database Server (SQL Server) 16

Additional SolarWinds UDT Requirements 18

FIPS Support 18

SNMP Requirements for Monitored Devices 19

Enabling Microsoft Internet Information Services (IIS) 19

Enabling IIS on Windows 7 20

Enabling IIS on Windows Vista and Windows Server 2008 21

Enabling IIS on Windows Server 2003 24

Installing SolarWinds User Device Tracker 27

Adding Devices and Interfaces to the Orion Database 34

Chapter 3: Reading the SolarWinds UDT Summary 43Getting Started with User Device Tracker 43

All UDT Nodes 43

Discovering Ports Using UDT 44

Top XX Nodes by Percent Ports Used 44

Device Watch List 45

Ethernet Ports Used Over Time 45

Ports Currently Used 46

Last XX Events 46

Active Alerts 47

Chapter 4: Using SolarWinds User Device Tracker 48Viewing Device Tracker Port Details 48

Viewing Node and Port Data in Tooltips 49

Node Tooltips 49

Port Tooltips 50

Creating and Managing a Watch List 51

Finding the switch and port where a particular hostname, IP, or MACaddress is/was connected 51

Viewing the Predefined SolarWinds UDT Report 53

Configuring the Default SolarWinds UDT Alert 54

Configuring SolarWinds UDT 55

Port Management 56

Manage Ports 56

Contents

Discover Ports 56

UDT Settings 56

Polling Interval 56

Data Retention 56

View UDT Job Status 57

Manage Watch List 57

Thresholds 57

License Summary 57

thwack Community 57

UDT thwack Forum 58

Investigating SolarWinds UDT Further 58

SolarWinds Orion

SolarWinds OrionUser Device Tracker EvaluationGuide

About SolarWindsSolarWinds, Inc develops and markets an array of network management,monitoring, and discovery tools to meet the diverse requirements of today’snetwork management and consulting professionals. SolarWinds productscontinue to set benchmarks for quality and performance and have positioned thecompany as the leader in network management and discovery technology. TheSolarWinds customer base includes over 45 percent of the Fortune 500 andcustomers from over 90 countries. Our global business partner distributor networkexceeds 100 distributors and resellers.

Contacting SolarWindsYou can contact SolarWinds in a number of ways, including the following:

Team Contact Information

Sales 1.866.530.8100

http://www.solarwinds.com

TechnicalSupport

http://www.solarwinds.com/support, you need a customer account toaccess the Customer Support area of the website.

UserForums

http://www.thwack.com contains the community oriented user forums

6

http://www.solarwinds.com/

http://www.solarwinds.com/support

http://www.thwack.com/

ConventionsThe documentation uses consistent conventions to help you identify itemsthroughout the printed and online library.

Convention Specifying

Bold Window items, including buttons and fields.

Italics Book and CD titles, variable names, new terms

Fixed font File and directory names, commands and codeexamples, text typed by you

Straight brackets, asin [value]

Optional command parameters

Curly braces, as in{value}

Required command parameters

Logical OR, as invalue1|value2

Exclusive command parameters where only one of theoptions can be specified

SolarWinds User Device TrackerDocumentation LibraryThe following documents are included in the SolarWinds User Device Tracker(SolarWinds UDT) documentation library:

Document Purpose

Administrator Provides detailed setup, configuration, and conceptual

7

Conventions

SolarWinds User Device Tracker Documentation Library

Guide information for SolarWinds UDT.

EvaluationGuide

Provides an introduction to Orion SolarWinds User DeviceTracker features and instructions for installation and initialconfiguration.

Page Help Provides help for every window in the Orion SolarWinds UserDevice Tracker user interface

Quick StartGuide

Provides installation, setup, and common scenarios for whichOrion SolarWinds User Device Tracker provides a simple, yetpowerful, solution.

ReleaseNotes

Provides late-breaking information, known issues, and updates.The latest Release Notes can be found at www.solarwinds.com.

The following documents supplement the SolarWinds User Device Trackerdocumentation library with information about Orion Network Performance Monitor:

Document Purpose

Orion NetworkPerformance MonitorAdministrator Guide

Provides detailed setup, configuration, and conceptualinformation for Orion Network Performance Monitor.

Orion NetworkPerformance MonitorEvaluation Guide

Provides an introduction to Orion Network PerformanceMonitor features and instructions for installation andinitial configuration.

Page Help Provides help for every window in the Orion NetworkPerformance Monitor user interface

Release Notes Provides late-breaking information, known issues, andupdates. The latest Release Notes can be found atwww.solarwinds.com.

8

http://www.solarwinds.net/

http://www.solarwinds.net/

Chapter 1: Introduction toSolarWinds User Device TrackerSolarWinds SolarWinds User Device Tracker (SolarWinds UDT) allows you tomonitor devices and ports for your network. With SolarWinds UDT, you cananalyze your port usage and capacity and be alerted to issues before they occur.

SolarWinds UDT allows you to find where devices are connected in your networkand detailed information about capacity analysis. UDT regularly polls switchesand routers for information about what is connected to them. Based on thisinformation, SolarWinds UDT stores current and historical information aboutwhere a device has been connected. It also provides alerts and reports aboutdevices connected to the network. For capacity analysis, SolarWinds UDT canreport on how many ports are used on switches currently, as well as over time, soyou can better understand the true utilization of the ports on your switches.

What is a Device?A device is a MAC address, hostname, or IP Address. SolarWinds UDT allowsyou to search on this information to find where the device is connected in thenetwork and where it has been connected in the past.

What SolarWinds User Device Tracker OffersSolarWinds UDT provides focused device and port monitoring for networkengineers. SolarWinds UDT provides many features to help, including:

l Quickly find where a device (MAC address, hostname or IPAddress) is connected in the network

l Find out where a device has been connected in the past

l Find out what has been connected to a port over time

9

Chapter 1: Introduction to SolarWinds User Device Tracker

l Provides port capacity analysis for a switch (how many ports arebeing used, including both monitored and un-monitored ports)

l Provides global port capacity analysis for used/available ports andnetwork capacity planning

l Configure a watchlist to track when specific devices appear on thenetwork and alert when the devices appear

How Does SolarWinds User Device Tracker Work?Using SNMP calls to your network framework, SolarWinds User Device Trackerprovides real time feedback on your applications and trending through statisticsstored in the Orion database. Keeping with the Orion common componentsinfrastructure, there are no agents installed on your servers and no remotesoftware to maintain. All calls are made in real time and displayed on a WebConsole accessible from any supported browser.

The following diagram provides an overview of the current SolarWinds UDTarchitecture, including interations among SolarWinds UDT components, theSolarWinds UDT database, and the managed devices on your network.

10

11

How Does SolarWinds User Device Tracker Work?

Chapter 2: Installing SolarWindsUser Device TrackerSolarWinds User Device Tracker (SolarWinds UDT) features a wizard-driveninstallation procedure. For an enterprise-class product, the requirements arenominal.

SQL Server and SQL Server Express withSolarWinds UDTSolarWinds does not recommend using SQL Server Express database instancesfor SolarWinds UDT. Instead, SolarWinds recommends the use of a productionversion of SQL Server.

Evaluations of SolarWinds UDT are a limited exception. For evaluation purposes,SolarWinds UDT can support the use of SQL Server Express database instances.SQL Express allows you to evaluate SolarWinds UDT with a real database, and itis available, free of charge, from Microsoft. However, SolarWinds does notrecommend its use with SolarWinds UDT in any production environment for thefollowing reasons:

l SQL Express is unable to manage databases larger than 4GB.

l SQL Express is limited to a single processor.

l SQL Express is unable to utilize more than 1MB RAM.

Note: For production environments, SolarWinds UDT installations should use aSQL Server database instance installed on a separate server.

Requirements for SolarWinds UDTSolarWinds recommends installing your SolarWinds product on its own server,with the Orion database hosted separately, on its own SQL Server. Installations of

12

Chapter 2: Installing SolarWinds User Device Tracker

multiple SolarWinds UDT servers using the same database are not supported.

UDT Server Software Requirements

The following table lists minimum software requirements and recommendationsfor your UDT server.

Software Requirements

OperatingSystem

Windows Server 2003, 2008 R2, 2012 or 2012 R2 with IIS in 32-bitmode.

IIS must be installed. SolarWinds recommends that SolarWindssoftware administrators have local administrator privileges toensure full functionality of local SolarWinds tools. Accounts limitedto use of the Orion Web Console do not require administratorprivileges.Notes:

l SolarWinds does not support production installations ofSolarWinds products on Windows XP, Windows Vista, orWindows 7 systems.

l If you are installing SolarWinds UDT on Windows Server2003, confirm that your full computer name is no longer than15 characters in length. Windows Server 2003 trims anycharacters beyond the fifteenth, and this may preventSolarWinds services from properly identifiying your UDTserver.

l SolarWinds UDT is not supported on Windows Server 2008.For more information, see “Requirements for SolarWindsUDT” on page 12.

WebServer

Microsoft IIS, version 6.0 and higher, in 32-bit mode.

DNS specifications require that hostnames be composed ofalphanumeric characters (A-Z, 0-9), the minus sign (-), and periods

13

(.). Underscore characters (_) are not allowed. For more information,see RFC 952.

Note: SolarWinds neither recommends nor supports the installationof any SolarWinds UDT product on the same server or using thesame database server as a Research in Motion (RIM) Blackberryserver.

.NETFramework

Version 3.5. .NET Framework 3.5 SP1 is recommended.

SNMPTrapServices

Windows operating system management and monitoring toolscomponent

WebConsoleBrowser

Microsoft Internet Explorer version 6 or higher with Active scripting

Firefox 3.0 or higher (Toolset Integration is not supported onFirefox)

Orion Server Hardware Requirements

The following table lists minimum hardware requirements and recommendationsfor your UDT server.

Note: Hardware requirements are listed by SolarWinds license level.

Hardware UT2500, UT5000, orUT10000

UT25000 orUT50000

UTX

CPUSpeed

2.0 GHz 2.4 GHz 3.0 GHz

Note: Dual processor, dual core is recommended.

14

Orion Server Hardware Requirements


Hard DriveSpace

2 GB 5 GB 20 GB

Note: A RAID 1 drive for server operating system, SolarWindsinstallation, and tempdb files is recommended. The SolarWindsinstaller needs 1GB on the drive where temporary Windows systemor user variables are stored. Per Windows standards, somecommon files may need to be installed on the same drive as yourserver operating system..

Memory 3 GB 4 GB 4 GB

ApplicationPorts

161/SNMP and 443/SNMP. VMware ESX/ESXi Servers are polledon 443.

17777/TCP open for Orion module traffic

17778/ HTTPS open to access the SolarWinds Information ServiceAPI

Requirements for Virtual Machines and Servers

SolarWinds installations on VMware Virtual Machines and Microsoft VirtualServers are fully supported if the following minimum configuration requirementsare met for each virtual machine.

Note: SolarWinds strongly recommends that you maintain your SQL Serverdatabase on a separate physical server.

VirtualMachine

Configuration

Orion Requirements by License Level

UT2500, UT5000, orUT10000

UT25000 orUT50000

UTX

CPU Speed 2.0 GHz 2.4 GHz 3.0 GHz

15

Allocated

Hard DriveSpace

2GB 5GB 20GB

Note: Due to intense I/O requirements, SQL Server should behosted on a separate physical server configured as RAID 1+0.RAID 5 is not recommended for the SQL Server hard drive.


NetworkInterface

Each virtual machine on which Orion is installed should have itsown, dedicated network interface card.

Note: Since Orion uses SNMP to monitor your network, if you areunable to dedicate a network interface card to your Orion server,you may experience gaps in monitoring data due to the lowpriority generally assigned to SNMP traffic.

Requirements for the Orion database Server (SQL Server)

The following table lists software and hardware requirements for your Oriondatabase server. SolarWinds UDT license levels are provided as a reference.

Requirements UT2500, UT5000, orUT10000

UT25000 orUT50000

UTX

SQL Server SQL Server 2005 SP1 Express, Standard, or Enterprise

SQL Server 2008 Express, Standard, or Enterprise and SQLServer 2008 R2

SQL Server 2012 SP1 Express, Standard or Enterprise

SQL Server 2014 Express, Standard or Enterprise

Notes:l Due to latency effects, SolarWinds does not recommendinstalling your SQL Server and your SolarWinds UDTserver or additional polling engine in different locations

16

Requirements for the Orion database Server (SQL Server)


across a WAN. For more information, see SolarWindsKnowledge Base article, “Can I install my Orion server orAdditional Polling Engine and my Orion database (SQLServer) in different locations across a WAN?”

l Either mixed-mode or SQL authentication must besupported.

l If you are managing your SolarWinds UDT database,SolarWinds recommends you install the SQL ServerManagement Studio component.

l If your SolarWinds UDT product installs SQL ServerSystem CLR Types, a manual restart of the SQL Serverservice for your SolarWinds UDT database is required.

l Use the following database select statement to check yourSQL Server version, service pack or release level, andedition:

select SERVERPROPERTY ('productversion'),SERVERPROPERTY ('productlevel'), SERVERPROPERTY('edition')

CPU Speed 2.0 GHz 2.4 GHz 3.0 GHz

Hard DriveSpace

2 GB 5 GB 20 GB

Note: Due to intense I/O requirements, a RAID 1+0 drive isstrongly recommended the SQL Server database andSolarWinds UDT data and log files. RAID 5 is not recommendedfor the SQL Server hard drive. The SolarWinds UDT installerneeds at least 1GB on the drive where temporary Windowssystem or user variables are stored. Per Windows standards,some common files may need to be installed on drive as yourserver operating system.


17

http://knowledgebase.solarwinds.com/kb/questions/1809/Can+I+install+my+Orion+server+or+Additional+Polling+Engine+and+my+Orion+database+(SQL+Server)+in+different+locations+across+a+WAN%3F



The Configuration Wizard installs the following required x86 components if theyare not found on your SolarWinds UDT database server:

l SQL Server System Common Language Runtime (CLR) Types.SolarWinds products use secure SQL CLR stored procedures forselected, non-business data operations to improve overallperformance.

l Microsoft SQL Server Native Client

l Microsoft SQL Server Management Objects

Additional SolarWinds UDT Requirements

Enterprise-level SolarWinds UDT deployments with the potential for more than50,000 ports may need additional computing resources above the standardsrequired for SolarWinds common components:

Ports Additional Requirements

Up to 50,000 No additional requirements

More than 50,000 8+ GB RAM

Note: If you are running Windows Server 2008, you must upgrade to WindowsServer 2008 R2, because SolarWinds UDT does not support Windows Server2008 due to known WMI issues.

FIPS SupportFIPS (Federal Information Processing Standard) defines security andinteroperability standards for computers used by the U.S. federal government.

To enable FIPS in the Local Security Policy on Windows:

1. Click Start > Control Panel > System and Security > AdministrativeTools, and then double-click Local Security Policy.

18

Additional SolarWinds UDT Requirements


2. Expand the Local Policies category in the left pane, and then clickSecurity Options.

3. Right-click System cryptography: Use FIPS compliant algorithms forencryption, hashing, and signing.

4. In the context menu that is displayed, click Properties.

5. In the Local Security Setting tab, click Enabled and then click OK.

Note: FIPS can also be enabled as part of Group Policy.

SolarWinds UDT installations on Windows Server 2008 R2 and Windows 7require a Microsoft hotfix to realize the FIPS-compatibility features of this release.For more information about this required Microsoft hotfix, see the articlehttp://support.microsoft.com/kb/981119. As noted in the KB article, you need toenable FIPS first before applying the Microsoft hotfix.

SNMP Requirements for Monitored DevicesSolarWinds UDT can monitor the performance of any SNMPv1-, SNMPv2c-, orSNMPv3-enabled device on your network. Consult your device documentation ora technical representative of your device manufacturer to acquire specificinstructions for configuring SNMP on your device.

Notes:

l To properly monitor devices on your network, you must enableSNMP on all devices that are capable of SNMP communications

l If SNMPv2c is enabled on a device you want SolarWinds UDT tomonitor, by default, SolarWinds UDT will attempt to use SNMPv2cto poll the device for performance information. If you only wantSolarWinds UDT to poll using SNMPv1, you must disableSNMPv2c on the device to be polled.

Enabling Microsoft Internet Information Services (IIS)Microsoft Internet Information Services (IIS) must be installed and enabled on theserver hosting SolarWinds UDT. If you are using Windows Server 2003 or

19

http://support.microsoft.com/kb/981119

Windows XP, you must install IIS version 6. Windows Server 2008 and WindowsVista require IIS version 7. The following sections provide procedures to enableIIS:

l Enabling IIS on Windows 7

l Enabling IIS on Windows Vista and Windows Server 2008

l Enabling IIS on Windows Server 2003

l Enabling IIS on Windows XP

Enabling IIS on Windows 7

SolarWinds only supports evaluations of SolarWinds UDT version 2.5 and higheron Windows 7. The following manual procedure is provided in case problemsoccur with the automatic IIS installation for Windows 7.

To enable IIS on Windows 7:

1. Click Start and then click Control Panel.

2. In Control Panel, click Programs and Features and then click TurnWindows features on or off.

3. In theWindows Features dialog box, expand Internet InformationServices.

4. Expand the category forWeb Management Tools and check IIS 6Management Compatibility. (To do this, you must expand IIS 6Management Compatibility and then check all of the sub-optionsunderneath.)

5. Expand the category forWorld Wide Web Services.

a. Expand the sub-category for Application DevelopmentFeatures and check ASP.NET.

Note: This also checks several other options.

20

Enabling IIS on Windows 7


b. Expand the category for Common HTTP Features andcheck Static Content.

c. Expand the category for Security and check both BasicAuthentication and Windows Authentication.

6. Click OK.

Enabling IIS on Windows Vista and Windows Server 2008

IIS is enabled automatically after UDT installation and prior to the start of theConfiguration Wizard. If the Configuration Wizard detects that IIS is not installedon Windows 2008, it installs IIS. The following manual procedure is provided forWindows Vista, or in case problems occur with the automatic IIS installation forWindows Server 2008.

The following procedure enables IIS on Windows Vista and Server 2008.

To enable IIS on Windows Server 2008:

1. Click Start > All Programs > Administrative Tools > Server Manager.

2. Click Roles.

3. Click Add Roles.

21

4. Click Next to start the Add Roles Wizard, and then checkWeb Server(IIS).

5. If you are prompted to add features required for Web Server (IIS), clickAdd Required Features.

6. Click Next on the Select Server Roles window, and then click Next on theWeb Server (IIS) window.

22

Enabling IIS on Windows Vista and Windows Server 2008


7. Confirm that Common HTTP Features > Static Content is installed.

8. Check Application Development > ASP.NET.

9. Click Add Required Role Services.

23

10. Check both Security > Windows Authentication and Security > BasicAuthentication.

11. Check Management Tools > IIS 6 Management Compatibility.

12. Click Next on the Select Role Services window.

13. Click Install on the Confirm Installation Selections window.

14. Click Close on the Installation Results window.

Enabling IIS on Windows Server 2003

The following procedure enables IIS on Windows Server 2003.

24



To enable IIS on Windows Server 2003:

1. Click Start > Control Panel > Add or Remove Programs.

2. Click Add/Remove Windows Components.

3. Confirm that Application Server is checked, and then click Details.

4. Confirm that Internet Information Services (IIS) is checked, and then clickDetails.

5. Confirm thatWorld Wide Web Service is checked, and then click Details.

25

6. Confirm thatWorld Wide Web Service is checked, and then click OK.

7. Click OK on the Internet Information Services (IIS) window, and thenclick OK on the Application Server window.

8. ConfirmManagement and Monitoring Tools is checked and clickDetails.

26



9. Confirm that both Simple Network Management Protocol andWMISNMP Provider are checked, and then click OK.

10. Click Next, and then click Finish when the wizard completes.

Note: You may be prompted to install additional components, to provide yourWindows Operating System media, or to restart your computer.

Installing SolarWinds User Device TrackerSolarWinds SolarWinds User Device Tracker offers an intuitive wizard to guideyou through installing and configuring the product.

SolarWinds SolarWinds User Device Tracker does not require Orion NPM.However, if you are performing a clean install of SolarWinds UDT 3.1 and alsowant to install Orion NPM, you should install Orion NPM version 11.0.1 or laterbefore or after you install SolarWinds UDT 3.1. For more information, see“Installing SolarWinds Orion Network Performance Monitor” in the SolarWindsOrion Network Performance Monitor Administrator Guide.

Note: If you have any additional web consoles or pollers, you must upgrade themtoo by repeating this procedure for each additional SolarWinds UDT poller or webconsole. Be sure to use the correct installers for pollers or web consoles, sincethese are different from the standard installer package. For information about

27

installing additional Orion Web Consoles or pollers, refer to the SolarWinds UDTAdministrator Guide.

To install or upgrade SolarWinds SolarWinds User Device Tracker:

1. Log on the server where you want to install or upgrade SolarWinds UDTwith a local administrator account.

2. If you downloaded the product from the SolarWinds website, navigateto your download location and launch the executable.

3. If you are prompted to install requirements, click Install, and thencomplete the installation, including a reboot, if required.

Notes:

l Downloading and installing Microsoft .NETFramework 3.5 may take up to 20 minutes or more,depending on your existing system configuration.

l If a reboot is required, after restart, click Install toresume installation, and then click Next on theWelcome window.

4. If the InstallShield Wizard detects that Microsoft Internet InformationServices (IIS) is not installed, select Suspend installation to manuallyinstall IIS, click Next, quit setup, and then install IIS as shown in one of thefollowing sections, depending on your platform:

l Enabling IIS on Windows 7

l Enabling IIS on Windows Vista and Windows Server 2008

l Enabling IIS on Windows Server 2003

l Enabling IIS on Windows XP

Note: The Orion Web Console requires that Microsoft IIS is

28

Installing SolarWinds User Device Tracker


installed on the SolarWinds UDT Server. If you do notinstall IIS at this point, you must install IIS later, and thenconfigure a website for the Orion Web Console to use.

5. Read the message about the Orion Improvement Program. If you arewilling to send anonymous data back to SolarWinds for productimprovement, click Send data. Otherwise, click Do not send data.

Note: You can stop sending this data at any time byuninstalling the Orion Improvement Program using theControl Panel.

6. Read the welcome message, and then click Next.

7. Select I accept the terms of the License Agreement, and then clickNext.

29

8. Select an Installation Folder or accept the default, and then click Next.

9. Choose Express Install – Recommended or Advanced Install (requiresan existing SQL Server database).

10. Click Next to begin the installation.

30



11. Click Finish when the setup completes.

12. Click Continue Evaluation.

13. If the Configuration Wizard does not start automatically, click Start >All Programs > SolarWinds Orion > Configuration Wizard.

14. Review the Welcome text, and then click Next.

31

15. Click Database, Website, Services, then click Next.

16. Configure the Database Settings for the SQL Server, with the desired formof authentication, and then click Next.

17. Enter existing account credentials for the SQL Server or define new ones,and then click Next.

32



18. Click Next to accept the default Website Settings.

19. Click Next to install all services.

20. Review the configuration summary, and then click Next.

33

21. After the Configuration Wizard completes, confirm that Launch Orion Webis checked, and then click Finish.

22. Log in to the Orion Web Console as an administrator.

Note: If you have not already configured another Adminpassword, you can log in with the User ID Admin and nopassword.

Adding Devices and Interfaces to the Orion Database

The following procedure adds a device and its interfaces to the Orion databaseusing the Web Node Management feature of the Orion Web Console.

To add devices and interfaces to the Orion database:

1. Log on to the server that hosts your SolarWinds UDT installation.

2. Click Start > SolarWinds Orion > Orion Web Console.

3. Log in to the Orion Web Console as an administrator.

Note: If you have not already configured another Adminpassword, you can log in with the User ID Admin and nopassword.

34



4. If Discovery Central does not load automatically, click Settings in the rightcorner of the screen, and then click Discovery Central under GettingStarted with Orion.

5. Click NETWORK SONAR DISCOVERY under Network Discovery.

6. Click Add New Discovery.

7. Click Add New Credential to add a ‘read’ community string valid fordevices on your network.When you are finished adding credentials,click Next.

35

8. Add a range of IP addresses. Click Next when you are finsihed.

For example, you might start with the subnet 10.199.1.0 and scan through subnet10.199.12.252. In this case you will catch all nodes with IP addresses on twelvesubnets.

9. Enter a description of the discovery you are setting up, adjust the timeoutsand other settings, and click Next when you are finished.

36



10. Since you are running this discovery manually, accept the defaults(Once and Yes, run this discovery now) and click Discover.

For information on scheduled discovery, see the SolarWinds User Device TrackerAdministrator Guide.

You will see the progress of your discovery scan:

11. Check the devices to monitor and click Next. By default, all arechecked.

37

12. Check the volume types to monitor on your nodes and click Next. Bydefault, only Compact Disk and Removable Disk is not selected.

13. Review the summary of checked devices and volumes, adjust as needed,and click Import.

38



14. Scroll through the Import Results as needed and click Finish when you areready.

15. Click DISCOVER MY PORTS under User Device Tracker Port Discovery.view.

39

16. Check the devices to scan for Ethernet ports and click Next.

You will see the progress of the port scan:

17. Check the devices and ports that you want UDT to monitor. By default, alldevices and ports are selected.

18. Click Advanced Filering Options and check appropriate filters to apply inimporting the ports. Filters allow you to exclude ports that do not fit the filtercriteria.

40



19. when you are ready, click Next.

20. Click SETUP WATCHLIST on the Import Results page.

21. Click Add Device.

22. Enter a MAC, IP address, or hostname to monitor; optionally, enter a nameand description that will help you recall why your are watching this device.

41

42


Chapter 3: Reading the SolarWindsUDT SummaryDevice Tracker Summary is the UDT view. It provides insight into port usage, portrelated alerts, and UDT related events. The resources listed in this section areincluded by default in Device Tracker Summary.

Getting Started with User Device TrackerThis resource provides links to the port discovery wizard (Discover Ports), theManage Watchlist page (Manage Watchlist), and the Device Tracker SearchResults page (Search). Click the relevant button to navigate to that resource.Click Remove This Resource if you no longer want to see it on the DeviceTracker Summary page.

All UDT NodesThis resource provides the current list of UDT-managed nodes and ports groupedby Vendor and Status. Drill down into the tree to see specific nodes, their status,and their ports. Click MANAGE PORTS to add a node, edit node properties,unmanage or remanage devices, or to manually get current device status. ClickEDIT to change what this resource displays its information.

43

Chapter 3: Reading the SolarWinds UDT Summary

Discovering Ports Using UDT

This area provides a clear view of nodes being monitored by UDT. User can addOrion nodes and display both monitored and unmonitored ports. New ports thathave been imported to UDT are shown in every polling interval. Notifications aredisplayed in Event resource to show single or group nodes that were added toUDT.

Top XX Nodes by Percent Ports Used

This resource provides a list of the top nodes by percent of ports used. Click EDITto configure the number of devices to list; the default is 10. Depending on thenumber of ports on the devices being monitored, it would not be uncommon tosee a list of devices with all ports in use.

44

.

Device Watch List

This resource shows when devices on the list were first and last seen on yournetwork. Click MANAGE LIST to add or remove devices from the list. Click EDITto change how the resource displays its information.

Ethernet Ports Used Over Time

This resource provides a chart with the percentage of ports used for each intervalover the specified time period. The line for the 95th percentile values is alsodisplayed on the chart. Click View Options to adjust the span of time to chart.

45

Device Watch List

Chapter 3: Reading the SolarWinds UDT Summary

Ports Currently Used

This resource provides a chart showing the percentage of used and free ports formanaged devices. Click EDIT to change the title and subtitle of this resource.

Last XX Events

This resource provides a chronological list of UDT-related events. Click EDIT toconfigure the number of events to list; the default is 25.

46

Active Alerts

This resource provides a list of the active alerts associated with UDT devices andports. You see any device on your Watch List that changes its connect status onthe network..

47

Active Alerts

Chapter 4: Using SolarWinds UserDevice TrackerThe sections of this chapter presents and overview of port details, and introducesprocesses for creating a watch list; setting up UDT reports and alerts, trackingconnectivity history for a specific IP, MAC, or port..

Viewing Device Tracker Port DetailsClicking on a port for any monitored node shows the UDT Port Details page.

You can customize which of these resources appear on the page by clickingCustomize Page. You may see different resources depending on the item youare viewing.

Port DetailsThis resource provides a list of port properties, including the port name, portnumber, application status, MAC addresses of the devices connected to theport, VLANs, and Duplex mode. Click EDIT to specify the following portdetails information:

o Maximum Number of IPV4 Addresses to Display – specifies themaximum number of connected IPV4 addresses to display in the GUI.

o Maximum Number of IPV6 Addresses to Display – specifies themaximum number of connected IPV6 addresses to display in the GUI.

o Maximum Number of MACs to Display – specifies the maximum numberof connected IPV6 addresses to display in the GUI.

48

Chapter 4: Using SolarWinds User Device Tracker

Port HistoryThis resource providesa table of port history information, including the timeperiod, connected IP addresses, connected MAC addresses, andhostnames. Click EDIT to specify the following port history information:

o Maximum Number of Rows to Display – specifies the maximum numberof rows to display in the history table for the GUI.

Viewing Node and Port Data in TooltipsNode and port tooltips in SolarWinds UDT provide immediate status overviews ofmonitored nodes and ports. To view a quick overview of any monitored node orport in the web console, hover over a node or port. Depending on the selecteddevice, the information in the following tables is displayed immediately.

Node Tooltips

Hoverover…

To see…

NodeStatus

Current status of the node (up, down, warning, unplugged, orunmanaged)

Note: SolarWinds UDT now supports the ability to includeapplications in calculation of node child status. So if node is up, butapplication on that device is down, you will see a child status iconindicating there is a problem.

IPAddress

The IP address currently assigned to the selected node

MachineType

The vendor icon and vendor description of the selected node

AverageResponseTime

The measured average response time of the selected node as of thelast node poll

49

PacketLoss

The percent of all transmitted packets that are lost by the selectednode as of the last node poll

CPULoad

The percent of available processing capacity on the selected nodethat is currently used as of the last node poll

MemoryUsed

The percent of available memory on the selected node that iscurrently used as of the last node poll

Port Tooltips

Hover over… To see…

Port Name Name of the port.

Oper Status Operational status of the port (up, down, unknown,warning, or critical).

Admin Status Administrative status of the server (up, down, warning,unplugged, or unmanaged).

Interface Type The interface type of the port.

Active Connection Whether the connection is active or not.

VLAN Displays information about the VLAN.

Duplex Displays the Duplex mode: FullDuplex, HalfDuplex, orUnknown.

number ofconnected IPs

Number of connected IP addresses

number ofconnected MACs

Number of connected MAC addresses

50

Port Tooltips


Creating and Managing a Watch ListScenario: I need to create a watch list to be alerted when particular IP or MACaddresses are connected to the network.

To create a watch list:

1. Click Settings near the top of the web console.

2. Click UDT Settings.

3. Click Manage Watch List.

4. Click Add Device on the Manage Watchlist page.

5. Enter the device’s MAC address, IP address, or hostname, add a nameand description that will help you keep track of why the device is on the list,and click OK.

Finding the switch and port where a particular hostname, IP, orMAC address is/was connectedScenario: I need to find the switch and port where a particular hostname, IP, orMAC address is now connected or was connected in the past in order to respondto a security or network problem.

To find the switch and port where a particular hostname, IP, or MAC address isconnected:

1. Click the DEVICE TRACKER tab, if not already selected.

2. Locate UDT Search (just below the menu bar near the top right of thepage).

3. Enter a MAC Address, IP Address, or Hostname and search button.Specific matches are required, unless wildcards are used in the search.This means that if you search for laptop and there is a machine namedlaptop01, you will not find it unless you search for laptop01 or laptop* (orother valid wildcard search).

51

More wildcard examples:

l Fa1* – (when used with Port Number search option) matches anyport number that begins with Fa1 followed by any characters.

l MAC Address: 00:0C*

l IP Address: 10.10.10.*

l Cisco3750-* (assuming each of three stacked switches were addedas individual devices, using a common naming convention likeCisco3750-1, Cisco3750-2, Cisco3750-3; in this search you wouldselect the ‘Connected To’ drop-down list beside Search)

4. Depending on whether you want to see current connections or historicalresults, choose eitherOnly show active connections search results orInclude historical results.

The search results are displayed in a scrollable, tabularview. For each item, the following information is displayed:

l IP Address – IP address for the device

l Hostname – The hostname for the endpoint. You cannot click it andgo to a node details page. An icon is displayed that indicateswhether the connection is active or not.

l MAC Address – MAC address for the device. An icon is displayedthat shows the connection type as Directly Connected to the Switch,Indirectly Connected to the Switch, or Unknown.

l Connected To – name of the switch to which the device isconnected

l Port Number – port number used for the connection

l Port Description – description for port used for the connection

l VLAN – number for the VLAN. If the port is being trunked, it should

52

Finding the switch and port where a particular hostname, IP, or MAC address


say trunk.

l Last Seen – date and time the device was last connected

Note: if you cannot find a device, but know that it isconnected, search using the MAC address to find the portthat points to a physical location.

5. To add an item to the watchlist, click the item in the results list and clickAdd To Watch List.

Viewing the Predefined SolarWinds UDT ReportConnected MAC and IP Addresses is a SolarWinds UDT report predefined forproviding current data on your connected devices. Results of this report includethe node, port number, port name, connected MAC addresses, and connected IPaddresses.

Note: Before you can use Report Writer, you must have collected at least a fewminutes worth of data in a database that is populated with the devices that youwant to monitor.

To view the default UDT report:

1. Click Start > All Programs > SolarWinds Orion > Alerting, Reporting,and Mapping > Report Writer.

2. Click File > Settings.

3. In the General tab of the Report Writer Settings window, select either of thefollowing as a default viewing mode:

l Preview displays the report as it will appear in printed form.

l Report Designer is the report creation and editing interface.

Note: You can toggle between Preview and ReportDesigner modes at any time by clicking Preview or

53

Design, respectively, on the toolbar.

4. If you want to separate the data for individual network objects withhorizontal lines, click Report Style, and then check Display horizontallines between each row.

5. Click OK to exit Report Writer Settings.

6. Click Connected MAC and IP Addresses under UDT: ConnectedDevices in the left pane of the main window.

A variety of reports are included with Report Writer, and icons that precede reportnames distinguish the different types of reports that are available.

For more information about using SolarWinds Orion Report Writer, see “Reportsand Alerts” in the SolarWinds UDT Administrator Guide.

Configuring the Default SolarWinds UDT AlertThe Advanced Alert Manager and the Basic Alert Manager are deprecated inSolarWinds Orion Core 2015.1 and later. A web-based alerting engine replacesthe previous alerting engine and includes new alerting variables. SolarWindsUDT provides device alerts that user can use with this latest web-based alertingengine.

Configuring an alert for SolarWinds UDT is similar to configuring an alert for OrionNetwork Performance Monitor.

The UDT alerts currently available are:

l Alert me when a rogue DNS name appears on network

l Alert me when a rogue Empty DNS name appears on network

l Alert me when a rogue IP address appears on network

l Alert me when a rogue MAC address appears on network

l Alert me when an access port connects to two or more MACaddresses

54

Configuring the Default SolarWinds UDT Alert


l Alert me when a MAC address moves

l Alert me when a watch list item becomes active

l Alert me when a MAC address appears on network

l Alert me when a new MAC vendor appears on network

To configure the default UDT alert:To configure UDT alert, follow this link to create new alerts.

Configuring SolarWinds UDTYou can configure SolarWinds UDT and its port information, watch list, andsettings through the Orion Web Console by using the UDT Settings page.

To configure SolarWinds UDT:

1. Log on to your Orion Web Console with an Administrator account.

Note: Initially, Admin is the default administrator user IDwith a blank password.

2. Click the DEVICE TRACKER tab.

3. Click UDT Settings.

Refer to the sections that follow for details about the administrative commandsavailable in each category:

55

http://www.solarwinds.com/documentation/en/flarehelp/orionplatform/default.htm#orioncoreag-alertscreatingnewalerts.htm

Port Management

Manage Ports

Click Manage Ports on the UDT Settings page to add, configure, and deleteports.

Discover Ports

Click Discover Ports on the UDT Settings page to discover ports.

UDT Settings

The UDT Settings category gives you access to the commands that allow you toview and manage global UDT settings.

Polling Interval

Click Polling Interval on the UDT Settings page to determine how frequentlyUDT polls a node for port status.

Data Retention

Click Data Retention on the UDT Settings page to specify how long SolarWindsUDT keeps historical information in the database. By default this is 365 days.

56

Port Management


View UDT Job Status

Click View UDT Job Status on the UDT Settings page to view the status for theUDT jobs for each node, showing the node name and IP address, job type, dateand time for the last time the job was run, date and time for the next time the jobwill be run.

Click Poll Now to immediately run the corresponding UDT job.

Manage Watch List

Click Manage Watch List on the UDT Settings page to add, delete, andconfigure nodes for a Device Watch List.

Thresholds

Click Thresholds on the UDT Settings page to set the level at which a port willbe included in a High Port Utilization Report.

License Summary

Click License Summary on the UDT Settings page to see a comparisonbetween the current number of nodes and volumes and the limits allowed by yourSolarWinds UDT license.

This page also displays the licensing information for both the Orion core and UserDevice Tracker and shows the version of the applications that you are running.

thwack Community

The thwack Community category gives you access to the commands that allowyou to view and download useful information from the thwack community forSolarWinds users.

57

UDT thwack Forum

Click UDT thwack Forum on the UDT Settings page to browse the informationprovided in the UDT thwack Forum.

Investigating SolarWinds UDT FurtherWhile this concludes the guided tour of SolarWinds User Device Tracker, thisEvaluation Guide has in no way fully covered the wealth of monitoring featuresavailable with SolarWinds UDT. Please explore the SolarWinds User DeviceTracker Administrator Guide, available on the SolarWinds website, athttp://www.solarwinds.com/support/documentation.aspx, to learn even moreabout the power and convenience of SolarWinds User Device Tracker.

58

UDT thwack Forum

http://www.solarwinds.com/support/documentation.aspx

Documents

SolarWinds User Device Tracker Evaluation Guide