Transcription

SolarWinds LANsurveyorAdministrator GuideLANsurveyor

Copyright 1995-2011 SolarWinds, all rights reserved worldwide. No part of thisdocument may be reproduced by any means nor modified, decompiled, disassembled,published or distributed, in whole or in part, or translated to any electronic medium orother means without the written consent of SolarWinds All right, title and interest in andto the software and documentation are and shall remain the exclusive property ofSolarWinds and its licensors. SolarWinds Orion , SolarWinds Cirrus , andSolarWinds Toolset are trademarks of SolarWinds and SolarWinds.net and theSolarWinds logo are registered trademarks of SolarWinds All other trademarkscontained in this document and in the Software are the property of their respectiveowners.SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHER TERMS,EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON SOFTWARE ANDDOCUMENTATION FURNISHED HEREUNDER INCLUDING WITHOUT LIMITATION THEWARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULARPURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL SOLARWINDS, ITSSUPPLIERS OR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISINGIN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IF SOLARWINDS HASBEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.Microsoft and Windows 2000 are either registered trademarks or trademarks ofMicrosoft Corporation in the United States and/or other countries.SolarWinds LANsurveyor Administrator Guide v10.4, 3.8.2011

Administrator Guide : : SolarWinds LANsurveyorTable of ContentsIntroduction. 1Welcome. 1Licensing. 1Compatibility. 2. 2Upgrade LANsurveyor. 3Install LANsurveyor.4Configure LANsurveyorfor Windows Vista/7/2008.4Install ResponderClients.6Upgrade ResponderClients.8Remove ResponderClientsRepository. 9Repository Monitor. 14Draw a Map. 15. 15Start LANsurveyor. 16Create a New MapIP Address Range. 17Hops. 17SNMP Devices. 18Responder Clients. 18ICMP (Ping) . 18NetBIOS. 18SIP Clients. 19Active Directory.Domain Controllers19Mapping Speed. 19Troubleshooting.Your Map20Read a Map. 20Networks. 21Routers. 21Managed Switches/Hubs. 21End Nodes . 21View Map Levels. 22Contents : : I

SolarWinds LANsurveyor : : Administrator GuideFilter Map Objects. 23Add To Map. 23Node Properties. 24. 24Move Map Objects. 25Create Map ObjectsGroups. 25Map Properties . 26Map Layout . 27Map Spacing . 29Map Background.Image30Map Labels . 30Toolbars and Navigation. 31. 31Application Buttons. 32Map Window ButtonsMap Navigation. 33. 34Select Map ObjectsZoom the Map . 36Context Menus . 36Your Maps. 3939Save and Open.MapsSave As Image . 39Save As Visio . 40Print Your Map . 40. 41Open a Saved MapRescan a Map . 41Monitor Your Network. 43. 43Network Monitoring.43Continuous ScanIntrusion DetectionContinuous Scan.Options45. 47TCP Port MonitoringTCP Port Monitor.Options48AlertsReports. 49. 53Create Reports. 53II : : Contents

Administrator Guide : : SolarWinds LANsurveyor. 54Instant Information. 55Standard ReportsBackup Profiler. 56Software Inventory. 57Software Meter. 57Missing Software. 58Hardware Inventory. 58Switch/Hub Ports. 59. 60Custom Reports60Save and Open.Reports.61Rerun and ModifyReports61Export Reports .to ExcelManage Clients. 63. 63Remote Client Management.65Protect ResponderClients66Find Responder.ClientsShut Down. 66Restart. 67. 67Synchronize ClocksSend a File. 67Send a Folder . 68. 68Send a MessageStore Notes. 69Quit a Process . 69. 69Launch an Application.69Schedule a ManagementOperationApplication Integration. 71Open Browser . 71Launch Telnet . 71SSH Client. 7272Launch Remote.DesktopLaunch VNC. 7273Manage SNMP .InterfacesScheduled Events. 75Contents : : III

SolarWinds LANsurveyor : : Administrator Guide.75Scheduled EventsWindowEvent Logging. 77. 77Session Log WindowSyslog. 78LANsurveyor Preferences. 79Set Options. 79. 83Run as a Service. 84Licensed OptionsAppendix A - Report.Fields85.85Responder ClientDataSNMP Data. 8993Active Directory.DataSIP Client Data. 94. 95Autodiscovery DataAppendix B - LANsurveyor.Icons97Appendix C - SNMP.Checklist99Appendix D - .Large Diagram Tips101IV : : Contents

Administrator Guide : : SolarWinds LANsurveyorIntroductionWelcomeLANsurveyor is network management software any network manager, administrator,engineer, or designer can use to automatically diagram networks of any size. TheLANsurveyor map provides a graphical interface so you can manage your network fromanywhere on the network.With LANsurveyor, you can:draw a map showing the logical connectivity of your entire networkmake queries of network objects for such information as Simple NetworkManagement Protocol (SNMP) data and Responder client dataadd icons to your map to represent network objectsbe alerted when a new device is added to your networklaunch other applications using the map as an interfacecreate reports about any items on the mapscan your network for intruders using one or more maps as the baseline andautomatically disable network access for rogue nodesWith LANsurveyor's Responder client add-on, you can:manage remote Windows, Linux, and Mac OS nodes from the LANsurveyor map,including starting and stopping applications, distributing files and folders,restarting and shutting down, and synchronizing clockshelp plan your backup and disaster recovery strategyLicensingIf you are using the evaluation version of LANsurveyor, please purchase a LANsurveyorlicense. Licensed users receive information on free updates and upgrade availability,and only licensed users can receive technical support.Introduction : : 1

SolarWinds LANsurveyor : : Administrator GuideCompatibilityTo use LANsurveyor, you must have the following:A Pentium-class computer with 256MB memoryWindows 2003, Vista (professional, workstation, or server editions), 7, 2008, or2008 R2A connection to an IP-based networkAdditionally, some LANsurveyor features require the following:Responder client software add-on installed on nodes for reports and clientmanagement.Nodes that understand SNMP (called "SNMP Agents") and the community string(or password) for SNMP devices you wish to report on. Some of the SNMP Agentsused by LANsurveyor are:MIB-II SNMP agents that exist on nearly all IP routers and many IP devices.Printer MIB SNMP agents that exist on some IP printers.Bridge MIB SNMP agents to determine switch port connectivity.Repeater MIB SNMP agents to determine hub port connectivity.Microsoft SQL Server 2005 or Microsoft SQL Server 2005 Express to store SNMPconfiguration and Responder client information in LANsurveyor's Repository.Upgrade LANsurveyorUpgrading from LANsurveyor 10.2 or 10.3If you are running LANsurveyor 10.2 or 10.3 on Windows 2003, Vista, 7, or 2008,you can upgrade to LANsurveyor 10.4 by following the Install LANsurveyor procedures.Settings and configuration information are transferred to the new installationautomatically.If you are running LANsurveyor 10.2 on Windows 2000, upgrading to LANsurveyor10.4 is not supported. You will need to first upgrade to a supported version ofWindows (2003, Vista, 7, or 2008). Then you will need to uninstall the LANsurveyor 10.2software (using Start Control Panel Add or Remove Programs), and do a cleaninstall of 10.4 by following the Install LANsurveyor procedures.2 : : Introduction

Administrator Guide : : SolarWinds LANsurveyorReleases of LANsurveyor Prior to 10.2If you are running a release of LANsurveyor prior to 10.2, upgrading is notsupported. You will first need to ensure that your system has a supported version ofWindows (2003, Vista, 7, or 2008) and upgrade if it does not. Then you will need touninstall the previous LANsurveyor software (using Start Control Panel Add orRemove Programs), and do a clean install of 10.4 by following the Install LANsurveyorprocedures.Install LANsurveyorNote: If you have been running the evaluation version of the LANsurveyor software, youmust uninstall the evaluation software before installing the licensed version.To uninstall the LANsurveyor evaluation version:1. Click Start Control Panel, and then double-click Add or Remove Programs.2. Click SolarWinds LANsurveyor in the Currently installed programs list, andthen click Remove.To download and install your LANsurveyor software:1. Log in to the SolarWinds portal at http://www.solarwinds.com/customerportalusing the login information you received from SolarWinds.2. Click View All in the DOWNLOADS section of the ALERTS & NEWS tab.3. Locate the LANsurveyor section, and then click DOWNLOAD NOW.4. Click Save File, and then click OK.5. After the download finishes, double-click the LANsurveyor-v XX.X .zip file toopen it.6. Double-click the LANsurveyor version .exe installer file, where version isthe version number of your LANsurveyor software, for exampleLANsurveyor104.exe is the installer for LANsurveyor version 10.4.7. Click Run when you are prompted “Do you want to run this file?”.8. Follow the instructions in the SolarWinds LANsurveyor Setup Wizard.To license and register your LANsurveyor software:1. Run LANsurveyor.2. In the SolarWinds LANsurveyor dialog, enter your Name, Organization, andthe Serial Number you received in the SolarWinds e-mail, and then click OK.3. If you are warned that some of LANsurveyor’s features may be unavailable,make note of the likely causes of this problem, and then click OK.4. In the Online Registration dialog, enter the requested information, and thenclick Register Now.Your software is now licensed and registered, and you are ready to begin usingLANsurveyor.Introduction : : 3

SolarWinds LANsurveyor : : Administrator GuideConfigure LANsurveyor for Windows Vista/7/2008The Windows Vista/7/2008 firewall blocks ICMP ping replies by default, preventingLANsurveyor from performing network discovery using ping. To correct the situation,either adminstratively turn off the Vista firewall or add a rule permitting ping repliesthrough the firewall, as shown in the following procedure.To add a rule enabling ICMP ping for LANsurveyor on Windows Vista/7/2008:1. Login to Windows as an Administrator.2. Click Start Control Panel Administrative Tools Windows Firewall with AdvancedSecurity.Note: This option is not available if you are not an Administrator.3. Click Inbound Rules in the left pane.4. Click New Rule in the right pane.5. Select Custom, and then click Next.6. Select All programs, and then click Next.7. Select ICMPv4 as the Protocol type, and then click Next.8. Confirm that Any IP address is selected for both Which local IP addresses doesthis rule match? and Which remote IP addresses does this rule match?, and thenclick Next.9. Select Allow the connection on the Action page, and then click Next.10.Confirm that all options are checked on the Profile page, and then click Next.11.Provide an appropriate Name for your new rule, and then click Finish.12.Repeat the preceding steps, clicking Outbound Rules instead of Inbound Rules.13.Test the new rules by opening LANsurveyor and then creating a new map with onlyICMP (Ping) checked in the Other IP Service Discovery area of the Create a NewNetwork Map window.The Mapping Progress window will show ICMP receipts, and the resulting map shouldshow one or more workstations with generic IP icons.Install Responder ClientsYour LANsurveyor Installation includes the Responder client add-on installers forWindows, Linux, and Mac OS computers unless you are running the evaluation version.Note for Evaluation Version: If you are running the evaluation version of LANsurveyor,the Responder client installers are not included, however you can download them ifdesired from the following location: http://www.solarwinds.com/embedded in products/productLink.aspx?id LANsurveyor Responders. Theevaluation version includes licenses for up to 5 Responder clients, so you can installand evaluate up to 5 Responder clients without using the License Manager to enterResponder Client licenses.Some of LANsurveyor's most advanced reporting and management features requirethe Responder client add-on to be installed on network computers, and systems with a4 : : Introduction

Administrator Guide : : SolarWinds LANsurveyorResponder client can have their hardware and software asset data automaticallystored in LANsurveyor's Repository. See Repository for information on installing theRepository.LANsurveyor Responder client licenses must be purchased separately from yourLANsurveyor license. Contact [email protected] to obtain the LANsurveyorResponder client licenses.Install Responder Client LicenseUse LANsurveyor's License Manager to install the Responder client add-on licenses.Note that the LANsurveyor Responder clients require a separate license that isdifferent from your LANsurveyor license.To install the Responder client add-on licenses:1. Select License Manager from the Window menu, then enter your Responder clientlicense code.2. After entering the license code, click Add License, and then click OK.Deploy via Directory ServicesYou can deploy Responder clients to 2000, XP, 2003 and Vista-based Windowscomputers through Remote Procedure Call and Remote Registry services using adirectory service such as Active Directory. To deploy using Active Directory, log into theLANsurveyor computer using an account in an Active Directory administrative group(Domain Admins or Enterprise Admins).Note for Evaluation Version: If you are running the evaluation version of LANsurveyor,the option to Deploy via Directory Services is not supported. You must deploy theResponder clients manually, as described in the "Deploy Manually" section thatfollows.When you create your map, LANsurveyor will prompt you to deploy your Responderclients.To deploy your Responder clients if you have already created a map (or declined todeploy when first prompted):1. Select XP/2003/2K/Vista LANsurveyor Responders. from the Tools Deploy menu.2. The Deploy Responder client wizard is displayed, allowing you to select theappropriate computers and the schedule for deployment.Introduction : : 5

SolarWinds LANsurveyor : : Administrator GuideTip: If you're having difficulty deploying via Directory Services, configure your Windowsworkstations as follows:Ensure that the Remote Registry service is runningEnsure that the RPC service is runningTurn on file and print sharing service and configure your workstation firewall toallow connections to UDP 137, UDP 138, UDP 445, and TCP 139, and TCP 445portsDeploy ManuallyYou can copy the client installation software to any system (or to a central server) forlocal installation. All supported Responder client installers are included in folders inthe LANsurveyor installation directory (e.g., "Linux LANsurveyor Responders" ).Note for Evaluation Version: If you are running the evaluation version of LANsurveyor,the Responder client installers are not included in folders in the LANsurveyorinstallation directory. You can download them from the following location: http://www.solarwinds.com/embedded in products/productLink.aspx?id LANsurveyor Responders.There are two Linux installers: rpm for RedHat based systems and deb for Debianbased systems. Refer to the "nrlinux-readme.doc" file in the folder for up-to-dateinformation on installing Responder clients on Linux systems as well as supportedsystems.After copying the Responder client installers to each of the client systems, install theResponder client on each client system by running the installer.If you deploy the Responder client manually, as described in this section, you will needto password protect your Responder client using the Manage wizard.Upgrade Responder ClientsOther than manually using the installation software on each computer, LANsurveyorprovides two methods for automatically upgrading Responder client software on yourworkstations and servers.Upgrade Responder Clients WizardThe easiest method is to use the Upgrade Wizard. Select Upgrade LANsurveyorResponders. from the Tools menu, and the wizard will upgrade all Responder clientson any open LANsurveyor map to the latest revision.6 : : Introduction

Administrator Guide : : SolarWinds LANsurveyorThere are five steps in the wizard:Select the name and location fo

Nodes that understand SNMP (called "SNMP Agents") and the community string (or password) for SNMP devices you wish to report on. Some of the SNMP Agents used by LANsurveyor are: MIB-II SNMP agents that exist on nearly all IP routers and many IP devices