Peregrine Systems DPND-523-EN12 Setup Manual

Dell bridge/router user manual
Table of Contents

Advertisement

Quick Links

Peregrine Systems, Inc.
Network Discovery
5.2.3
®

Setup Guide

Part No. DPND-523-EN12

Advertisement

Table of Contents
loading

Summary of Contents for Peregrine Systems DPND-523-EN12

  • Page 1: Setup Guide

    Peregrine Systems, Inc. Network Discovery 5.2.3 ® Setup Guide Part No. DPND-523-EN12...
  • Page 2 Network Discovery © Copyright 2005 Peregrine Systems, Inc. PLEASE READ THE FOLLOWING MESSAGE CAREFULLY BEFORE INSTALLING AND USING THIS PRODUCT. THIS PRODUCT IS COPYRIGHTED PROPRIETARY MATERIAL OF PEREGRINE SYSTEMS, INC. (“PEREGRINE”). YOU ACKNOWLEDGE AND AGREE THAT YOUR USE OF THIS PRODUCT IS SUBJECT TO THE SOFTWARE LICENSE AGREEMENT BETWEEN YOU AND PEREGRINE.
  • Page 3: Table Of Contents

    Contents PEREGRINE Chapter 1 Welcome to Network Discovery ....11 About Network Discovery ..... 11 Why it’s important to prepare .
  • Page 4 Network Discovery Send the questionnaire ..... . 22 Chapter 3 Prepare the network ......23 Turn on SNMP management in all routers and core switches .
  • Page 5 IBM Hardware ......47 Dell Hardware ......49 HP Hardware.
  • Page 6 Network Discovery Connect a management workstation to the network ..64 Connect an Uninterruptible Power Supply ... . . 64 (Optional) Connect data backup equipment and pager hardware . . 65 (Optional) Connect the Peregrine appliance to a telephone line .
  • Page 7 Enter an NTP server to synchronize the time (continually) ..87 Change the default Admin password ....88 About disabling warnings ..... 89 Disabling UPS warnings .
  • Page 8 Network Discovery Check that it’s working ..... . . 104 Are devices appearing on the Network Map? ..105 Are there problems on the Exceptions reports? .
  • Page 9 Property sets are a shortcut..... 120 Reviewing and activating your configuration changes ..121 Chapter 10 Setting up Accounts .
  • Page 10 Network Discovery Check that your maintenance license is current ... 148 Check that you have the latest software components ..148 Download the new component(s) ....149 Install the new component(s) .
  • Page 11: Welcome To Network Discovery

    Welcome to Network Discovery CHAPTER Thank you for using Network Discovery. This book is intended for the Network Discovery Administrator, the person who will have the most control over the setup and operation of Network Discovery. This information is critical to your success with Network Discovery. Your sales representative may have given it to you as a separate pre-purchase handout (Preparing for Installation);...
  • Page 12: Peregrine Desktop Inventory Can Contribute Data To Network Discovery

    Network Discovery Peregrine Desktop Inventory can contribute data to Network Discovery Peregrine Desktop Inventory (PDI) scanners can be scheduled from Network Discovery and scan files can be added to a shared directory on the Peregrine appliance, so the scanned devices will appear in the Network Discovery database, and on the Network Map.
  • Page 13: Start By Collecting Information About Your Network

    Start by collecting information about your network The Pre-Setup Questionnaire is available in the next chapter of this manual (see Pre-setup Questionnaire on page Word file from http://support.peregrine.com. Note: If you wish, you may fill in the questionnaire and send it to Peregrine customer support.
  • Page 14 Network Discovery 14 | Welcome to Network Discovery...
  • Page 15: Pre-Setup Questionnaire

    Pre-setup Questionnaire CHAPTER Your contact information Your Name Organization Address Telephone E-mail Describe your network’s node and subnet setup Enter the following information to help determine the scale of your network. Pre-setup Questionnaire | 15...
  • Page 16: Enter The Peregrine Appliance Network Information

    Network Discovery Note: Network Discovery defines a node as any network device with at least one MAC address. A managed device is a network device that has an SNMP agent and MIB so it can respond to SNMP requests. How many nodes do you believe are active on your network? Are there any remote sites to be managed? If yes, approximately how many managed nodes are at remote sites? Is your network divided into subnets?
  • Page 17: Peregrine Systems Customer Support Access

    Peregrine Systems Customer Support access Information on the options you have for receiving Customer Support is in Choose how to receive Peregrine Systems Customer Support on page If you will use a modem and a dedicated analog telephone line, enter the number of the telephone line.
  • Page 18: List Ipv4 Ranges For Network Discovery To Avoid

    Network Discovery From IPv4 range 4 IPv4 range 5 IPv4 range 6 List IPv4 ranges for Network Discovery to avoid If there are subsets of the above IPv4 ranges that you do not want Network Discovery to discover, enter them here. Important: You do not need to enter ranges outside the ranges you have specified.
  • Page 19: Enter Tcp/Ip Configuration

    account will be able to manage the device from the Network Discovery interface. Community string Enter TCP/IP configuration The Peregrine appliance must have its own static IP address, but it can manage devices with either static or dynamic IP addresses. Please enter the following information to show how the devices on your network receive IP addresses.
  • Page 20 Network Discovery Are TCP/IP addresses static or dynamic? Is SNMP management enabled on the DHCP server? Enable SNMP management on the DHCP server so that Network Discovery can poll the DHCP server ARP cache for the current IP and MAC address pair information of the devices on your network.
  • Page 21: What Server Will You Use For The Peregrine Appliance

    Medium - 2GB, 2 CPUs IBM xSeries 336 Large - 4GB, 2 CPUs IBM xSeries 345 Small - 1GB, 1 CPU Dell 1750 Servers Small - 2GB, 1 CPU Large - 4GB, 2 CPUs Dell 1650 Servers Small - 1GB, 1 CPU...
  • Page 22: Send The Questionnaire

    Network Discovery Server Type Large - 4GB, 2 CPUs HP DL380 Large - 4GB, 2 CPUs Note: Any of the “Large” appliances can be turned into a “Medium” appliance by removing 1 CPU and 2 GB of RAM. Send the questionnaire When you have completed the questionnaire, send it to Peregrine Systems Inc.
  • Page 23: Prepare The Network

    Prepare the network CHAPTER The following flowchart shows all the important tasks that must be completed to prepare your network. There are other optional tasks described throughout the chapter. Enable SNMP management in network devices Set DHCP lease time Configure directed community strings Adjust bridge aging Plan where to connect the...
  • Page 24: Turn On Snmp Management In All Routers And Core Switches

    Network Discovery Turn on SNMP management in all routers and core switches Depending on the device, this may be a case of enabling an existing SNMP agent or setting up an SNMP agent. You may also turn on SNMP management in other devices. The more managed devices in your network, the better.
  • Page 25: Set Dhcp Lease Time

    Set DHCP lease time If you use DHCP (Dynamic Host Configuration Protocol) in your network, set the IP address lease time to at least 7 days and turn on SNMP management on the DHCP servers. About community strings A community string is like a password. A device uses a community string to protect its SNMP MIB—and it’s the data from the SNMP MIB that Network Discovery relies on.
  • Page 26: (Optional) Adjust Bridge Aging

    Network Discovery What happens if a device with directed community strings is not configured with the IP address of the Peregrine appliance? Network Discovery will behave as though the device does not have SNMP management turned on. Network Discovery will appear to work, but you’ll eventually notice that it is working poorly.
  • Page 27: Choose How To Receive Peregrine Systems Customer Support

    Choose how to receive Peregrine Systems Customer Support Options for allowing Customer Support access (in the order in which Peregrine Systems recommends them) are as follows: through Internet access through a Virtual Private Network over Internet by a modem and a dedicated analog telephone line through a Remote Access Server (RAS) Through Internet access For you to have Customer Support by means of the Internet you must enable...
  • Page 28: Virtual Private Network Over The Internet

    Network Discovery Used for Applet Server 1. Depending on your settings for Appliance proxy services 2. If you have an Aggregator license Virtual Private Network over the Internet Contact Peregrine Systems Customer Support to send them the software that will enable access. If you have a firewall, enable the firewall ports listed in the above table.
  • Page 29 If you have a corporate firewall that could impede Network Discovery, configure the corporate firewall to allow ICMP (ping) to pass through, and enable the following ports: Used for Port Echo Reply 0/icmp Error Messages 3/icmp Echo Request 8/icmp TTL Timeout 11/icmp Netmask Request 17/icmp...
  • Page 30 Network Discovery SNMP traps 162/udp Peregrine Listener 1738/udp MIB Browser 8100/tcp Network Map 8101/tcp Network Map Proxy 8102/tcp MIB Browser Proxy 8103/tcp Telnet Proxy 8104/tcp HTTP Proxy 8105/tcp MySQL ODBC 8108/tcp Applet server 8109/tcp ServiceCenter 12670/tcp Traceroute 33263/udp 33436/udp 1. Depending on your settings for Appliance proxy services 2.
  • Page 31: Check Cisco Devices

    Check Cisco devices It is strongly recommended that firmware/software in your Cisco devices be IOS version 12 or higher. If you want ATM or Frame Relay support, IOS 12 is mandatory in your Cisco devices. (Optional) Enable UDP port forwarding on routers If you want to have your Peregrine appliance communicate with listener agents across subnets, you will need to enable routing for the UDP packets.
  • Page 32: Check Committed Information Rate Values

    Network Discovery Enter the following commands: configure terminal <enter> interface [source interface] <enter> ip helper-address [destination listener] <enter> (repeat this command for each appliance you want to send to) exit <enter> ip forward protocol udp 1738 <enter> end <enter> Note: Any interface can have multiple helper-addresses.
  • Page 33: Chapter 4 Compatibility Matrix

    You must install the Network Discovery software onto a server meeting the following hardware requirements. For a new installation, the IBM xSeries 335, Dell 1750 Server, or HP DL360/DL380 are recommended. However, the IBM xSeries 330 or Dell 1650 can also be used.
  • Page 34 Network Discovery Aggregator Appliance Devices Ports Attributes Appliances a This could be 2 CPUs, or one physical CPU which is equivalent to 2 logical CPUs. b The large appliance has 2 physical CPUs, which is equivalent to 4 logical CPUs. However, if you are using your Peregrine appliance in Basic Discovery mode, the number of devices (scan files) change considerably.
  • Page 35: Picking The Right Server

    1 CPU, 2.4 GHz or better, with 512KB full-speed cache at least 1GB of RAM (or more depending on the number of devices) 2 SCSI drives with a minimum of 36 GB each Dell, HP, or IBM server Warning: Peregrine cannot guarantee that all devices with these requirements will work.
  • Page 36: Small Appliance (Up To 4,000 Devices)

    Modem IBM xSeries 330 Hard Disk Modem IBM xSeries 345 Hard Disk Modem Dell 1650 Server Hard Disk 36 | Compatibility Matrix 1 GB 2 x 36GB or 73GB SCSI Multitech ZPX Universal version 1 GB 2 x 36 or 73GB SCSI...
  • Page 37: Medium Appliance (Up To 8,000 Devices)

    Modem For a Dell 1650 with the 5V PCI slot option, choose one of the following: For a Dell 1650 with the 3V PCI slot option, choose the Multitech MultiModem ZPX model number MT5634ZPX-PCI-U-NV. Dell 1650 Server 1 (1.40Ghz) 1 GB...
  • Page 38 1 x 2.40Ghz XEON 2 GB (or more) 2 x 36GB or 73GB 10,000 RPM SCSI For a Dell 1750 with the 5V PCI slot option, choose one of the following: IBM 56K PCI modem model number 33L4618 Multitech MultiModem ZPX model numbers...
  • Page 39 2 GB (or more) Hard Disk 2 x 36GB or 73GB 10,000 RPM SCSI Modem For a Dell 1750 with the 5V PCI slot option, choose one of the following: IBM 56K PCI modem model number 33L4618 Multitech MultiModem ZPX model numbers...
  • Page 40: Large Appliance (Up To 15,000 Devices)

    1 x 3.20 GHz XEON 2 GB (or more) 2 x 36GB or 73GB 10,000 RPM SCSI For a Dell 1850 with the 5V PCI slot option, choose one of the following: IBM 56K PCI modem model number 33L4618 Multitech MultiModem ZPX model numbers...
  • Page 41 Hard Disk 2 x 36GB or 73GB 10,000 RPM SCSI Modem For a Dell 1750 with the 5V PCI slot option, choose one of the following: IBM 56K PCI modem model number 33L4618 Multitech MultiModem ZPX model numbers MT5634ZPX-PCI-NV or MT5634ZPX-PCI-U-NV For a Dell 1750 with the 3V PCI slot option, choose the Multitech MultiModem ZPX model number MT5634ZPX-PCI-U-NV.
  • Page 42: Servers That Have Been Tested

    Network Discovery Servers that have been tested Here is a list of servers that Peregrine has tested and do work: Dell 1650 1750 1850 2650 IBM 335 IBM 330 IBM 336 IBM 345 HP DL360 HP DL380 Check the management workstation Because Network Discovery is web-based, you can use any properly equipped workstation as a management console.
  • Page 43: Peregrine Product Compatibility

    Item Required Video 16,000 —colors —resolution 800 × 600 Memory (MB RAM) (512, if using an Aggregator) Pentium II 233 equivalent or better Operating system Microsoft Office a Requires a Virtual Machine (VM) upgrade. b Must be downloaded from java.sun.com, do not use the version that comes with your browser c 512 MB is recommended for large network maps.
  • Page 44 Network Discovery b You can set Network Discovery to work with scanners from Desktop Inventory Administration > System preferences > Scanner Version 7.3.1 or 8.0. See 44 | Compatibility Matrix...
  • Page 45: Chapter 5 Install And Start Network Discovery

    Install and Start Network Discovery CHAPTER The following flowchart shows all the important tasks that must be completed to install the appliance. There are other optional tasks described throughout the chapter. Connect keyboard and monitor Install software from the CD Connect the appliance to the Set up management workstation Connect appliance to AC...
  • Page 46: About Installing The Hardware

    Network Discovery About installing the hardware When you install the server, follow the server installation documentation. The server installation documentation may vary depending on what server you have. The server installation documentation was included in the shipping box. If the documentation is missing or you have a problem, contact the hardware manufacturer.
  • Page 47: Connect The Peregrine Appliance To Ac Power

    To attach a keyboard and monitor Following the server installation documentation, connect the output end of the C2T breakout cable to the C2T (Out) connector on the back of the Peregrine appliance. (The C2T breakout cable is packed in the C2T cable kit.) Connect the keyboard and monitor ends of the cable to the keyboard and monitor.
  • Page 48 Network Discovery Press Enter again. You return to the Configuration/Setup Utility main menu. If you have an IBM xSeries 335, continue with all of the steps. If you have an IBM xSeries 330, go to step 8. Use the arrow keys to select Start Options and press Enter. Press Enter again.
  • Page 49: Dell Hardware

    You must configure the BIOS of the Peregrine appliance to use the correct boot sequence. Note: The Dell 1750 and 1650 require some changes. The Dell 1850 and 2650 will work properly with the default settings. For the Dell 1750...
  • Page 50 Network Discovery Verify that the options are set as follows. Do not change options that are not listed here. Use the arrow keys to make changes. Logical Processor Enabled Sequential Memory Access Disabled Press Esc. You see the Main menu again. Use the arrow keys to select Boot Sequence and press Enter.
  • Page 51 All other BIOS settings do not affect Network Discovery and can be set as you prefer (including asset tags, keyboard and security preferences, etc.). For the Dell 1650 To set the BIOS boot sequence In the setup, use the up and down keys to select the items and the right and left keys to configure the options.
  • Page 52 Network Discovery Verify that the options are set as follows. Do not change options that are not listed here. Use the arrow keys to make changes. 1. CD-ROM Device 2. Hard Drive C: 3. Diskette Drive A: Press Esc. You see the Main menu again. Use the arrow keys to select Hard-Disk Drive Sequence and press Enter.
  • Page 53: Hp Hardware

    Use the arrow keys to select Console Redirection and press Enter. Verify that the options are set as follows. Do not change options that are not listed here. Use the arrow keys to make changes. Console Redirection Note: All other BIOS settings do not affect Network Discovery and can be set as you prefer (including asset tags, keyboard and security preferences, etc.).
  • Page 54: Install Network Discovery Software From The Cd

    Network Discovery Press Enter. A confirmation message appears. Press F8 to confirm. A progress message appears that says “Saving Configuration.” When the configuration is saved, press Esc to return to the main menu. Repeat Step 6 When both logical drives are configured, return to the main menu. Use the arrow keys to go to View Logical Drives, and confirm that both drives have been configured properly.
  • Page 55 To install Network Discovery Place the Network Discovery installation disc in the CD-ROM drive of the server and restart the server. Note: Network Discovery will install if you have 1, 1.5, 2, 2.5, or 4GB of memory. If you have more than 4GB, the software will not install. You must have the exact hardware configuration as described in page The system boots from the CD and then prompts you to enter one of two...
  • Page 56: Give The Peregrine Appliance Its Network Information

    Network Discovery Give the Peregrine appliance its network information Working with the configuration interface, you will enter the IPv4 address of the Peregrine appliance, the network mask (also called a netmask), and the IP address of the gateway. This information is on your completed Pre-setup Questionnaire.
  • Page 57 1) Return to main menu 2) IP Networking 3) Appliance system variables 4) Appliance community strings 5) Host name 6) Workgroup 7) Administrator's E-mail Address 8) Mail server 9) Time server 10) Change password Type 2 and press Enter. The screen shows the IP Networking menu: 1) Return to previous menu 2) Refresh 3) IP ADDRESS...
  • Page 58 Network Discovery Type 6 and press Enter. Wait briefly. Important: While you’re waiting, change the Peregrine appliance’s default password for security. To change the Peregrine appliance’s default password On the IP Networking menu: 1) Return to main menu 2) Refresh 3) IP ADDRESS 4) NETMASK 5) GATEWAY...
  • Page 59 To complete the installation Type 1 and press Enter. The screen shows the Appliance Management menu: 1) Settings 2) Actions 3) Appliance hardware information 4) Exit and log off If the Peregrine appliance is in its permanent location, type 4 to exit and log off.
  • Page 60: Connect The Appliance To The Network

    Network Discovery 2) Actions 3) Appliance hardware information 4) Exit and log off Type 2. The screen shows the Appliance Actions menu: 1) Return to main menu 2) Appliance shutdown 3) Appliance restart 4) Set time 5) Synchronize time 6) Add licenses from floppy 7) Copy listener security keys to floppy 8) Copy listener security keys from floppy 9) Check CD...
  • Page 61: Ibm Xseries 335 Peregrine Appliance

    Warning: Peregrine Systems strongly recommends that the Peregrine appliance be placed on the inside of the corporate firewall. The port that allows the Peregrine appliance access to the network must be Ethernet. Network Discovery automatically detects what speed the Ethernet port is and whether it is full- or half-duplex.
  • Page 62: Ibm Xseries 330 Peregrine Appliance

    Network Discovery IBM xSeries 330 Peregrine appliance On the IBM xSeries 330 Peregrine appliance, connect the top-of-the-network device to the Peregrine appliance’s Ethernet port 1, the top left port. Use Ethernet port 1 IBM xSeries 336 Peregrine appliance On the IBM xSeries 336 Peregrine appliance, connect the top-of-the-network device to the Peregrine appliance’s Ethernet port 1, the left port.
  • Page 63: Dell 1750 Peregrine Appliance

    Peregrine appliance’s Ethernet port 1, the left port. Use Ethernet port 1 Dell 1650/1850/2650 Peregrine appliance On the Dell 1650, 1850, or 2650 Server, connect the top-of-the-network device to the Peregrine appliance’s Ethernet port 1, the right port. Setup Guide Use Ethernet...
  • Page 64: Hp Dl360/Dl380 Peregrine Appliance

    Network Discovery HP DL360/DL380 Peregrine appliance On the HP Server, connect the top-of-the-network device to the Peregrine appliance’s Ethernet port 1, the right port. Connect a management workstation to the network You will use the management workstation to access Network Discovery through the browser interface once Network Discovery is up and running.
  • Page 65: (Optional) Connect Data Backup Equipment And Pager Hardware

    Note: To suppress this warning, you need to turn off the “UPS warning,” see Disabling UPS warnings on page (Optional) Connect data backup equipment and pager hardware Connecting data backup equipment is optional. Connecting pager hardware is also optional. If you choose to connect an external modem for paging or a tape drive for data backup, you should do so now.
  • Page 66: (Optional) Using Terminal Emulation Software

    Network Discovery Note: If you decide to perform this procedure, you must have purchased an internal modem according to the specifications in on page To connect the Peregrine appliance to a telephone line Plug one end of a telephone line cable into the modem connector on the back of the Peregrine appliance.
  • Page 67 Item Speed Bits Parity Stop Bits Terminal type Requirement 9600 None vt100 (Optional) Using terminal emulation software | 67 Setup Guide...
  • Page 68 Network Discovery 68 | Install and Start Network Discovery...
  • Page 69: Chapter 6 Appliance Management

    Appliance Management CHAPTER The following flowchart shows all the important tasks that must be completed to set up your appliance. There are other optional tasks described throughout the chapter. Log in to Network Discovery Assign system name, contact, location Change community strings Set time zone Set domain name Set host name...
  • Page 70: Log In To Network Discovery

    Network Discovery Log in to Network Discovery To log in to Network Discovery, you must have the following: access to a web browser with Sun Java 1.4.2 or 1.5 enabled Javascript enabled pop-up windows enabled the IP address or domain name of the Peregrine appliance a valid Network Discovery account name and password Network Discovery is shipped with four pre-defined accounts.
  • Page 71: Troubleshooting When Logging In For The First Time

    Note: Account names are all lowercase. Passwords are case-sensitive. “PASSWORD” and “password” are two different passwords. Once the account name and password are accepted, the Network Discovery Home page and Toolbar appear. After the Toolbar appears, but before it is activated for use, your browser will display one or more security warnings.
  • Page 72 Network Discovery concentrator, switch, or router as the Peregrine appliance, at least during your first use of Network Discovery. Try pinging the IP address of your Peregrine appliance. If the Peregrine appliance does not respond, try pinging the concentrator or switch to which the Peregrine appliance is attached.
  • Page 73: The Home Page

    Your management workstation and the Peregrine appliance are on opposite sides of your corporate firewall. You should see a dialog box that explains that Network Discovery is trying to connect and shows an error message. To resolve the problem, do one of the following: Ensure that your management workstation and the Peregrine appliance are on the same side of the firewall.
  • Page 74 Network Discovery Three rows of navigation hyperlinks appear at the bottom of the Home page (as well as at the bottom of the Report, Status, Administration, and Help windows). Links to major features First row of hyperlinks shows where you have been Bottom rows are is Toolbar buttons...
  • Page 75: The Toolbar

    The Toolbar The Toolbar provides a way to navigate through Network Discovery. The Toolbar has three main parts: banner or title bar buttons status window There are three groups of Toolbar buttons. Some buttons may be unavailable, depending on your license. Buttons link to major features.
  • Page 76: Assign A System Name, Contact, And Location

    Network Discovery Assign a system name, contact, and location “System name” is the name of the network or part of the network that Network Discovery is currently managing. The system name is displayed in the Toolbar banner. “System contact” is the Network Discovery Administrator. “System location”...
  • Page 77: Change The Peregrine Appliance Community Strings

    Change the Peregrine appliance community strings We recommend that you: Change the Peregrine appliance’s read-only string to the one used by the rest of the devices in your network. The read-only community string allows read access to the Peregrine appliance MIB. Change the Peregrine appliance’s read/write community string (for security reasons).
  • Page 78: Set The Time Zone

    Network Discovery Type the new read-only or read/write community string in the appropriate field. Click Change. Set the time zone Note: You must set the time zone when you first configure Network Discovery . Changing to the appropriate time zone will allow Network Discovery to adjust the local time relative to Coordinated Universal Time.
  • Page 79: Enter The Domain Name Server

    Note: When you change the time zone, some software modules restart and you may see a Start Log message. This is normal. Network Discovery may not be available for a couple of minutes. (If you change it later, when there is more data, Network Discovery could be unavailable for 20 to 30 minutes.) Select the correct time zone...
  • Page 80 Network Discovery To enter the domain search order Click Administration > Appliance management > Domain name servers. Type the new domain search order in the bottom field. When you enter the domain names in either field, separate the entries with commas.
  • Page 81: Enter The Host Name

    Enter the host name A host name allows you to refer to a device by a name rather than an IP address. Network Discovery uses the host name to refer to itself in the e-mails it sends. Note: Define a domain name server before changing the host name. The Host name page has two modes: prompted and manual.
  • Page 82: (Optional) Enter The Workgroup Name

    Network Discovery (Optional) Enter the Workgroup name Enables you to change the NetBIOS workgroup name. Workgroups are used primarily by Microsoft Windows. The workgroup name determines where in your Network Neighborhood you will find the Peregrine appliance. The Peregrine appliance has a shared directory into which you can deposit: license files when you receive them from Peregrine Customer Support updated software components scan files...
  • Page 83: (Optional) Enter The Administrator E-Mail Address

    (Optional) Enter the Administrator e-mail address Enter the e-mail address of the Network Discovery Administrator, and that address will receive information on mail delivery problems. If you enter an e-mail address that is not valid, you will cause “message undeliverable” e-mails to be sent to the account of the administrator for the mail server.
  • Page 84: (Optional) Enter The Smtp Server

    Network Discovery (Optional) Enter the SMTP server An SMTP server handles standard Internet e-mail. Network Discovery can use this server when it generates e-mail messages to tell you what is going on in your network or with other processes such as a daily backup. If you do not enter an SMTP server, e-mail from Network Discovery will go to the default SMTP mail server for the domain.
  • Page 85: Set The System Time

    Enter the Host name or IPv4 address of the SMTP server. Click Change. Set the system time Network Discovery uses the system time to monitor your network, to generate reports, and to adjust to daylight savings time automatically. Perform one of the two following procedures, not both. Set the date and time on page 85 Synchronize the time on page 86 time (continually) on page...
  • Page 86: Synchronize The Time

    Network Discovery Note: Seconds are not set explicitly. When you click the Set Time button, seconds are set to 0. To set the time and date Make sure the time zone is set (see Click Administration > Appliance management > Set time. Enter the Year, Month, Day, Hours, and Minutes in the appropriate fields.
  • Page 87: Enter An Ntp Server To Synchronize The Time (Continually)

    Enter the IPv4 address of the server with which you want to synchronize time. Click Synchronize Time. The time is now the same as the server you synchronized with, but the times may diverge later. Enter an NTP server to synchronize the time (continually) Entering an NTP server is optional.
  • Page 88: Change The Default Admin Password

    Network Discovery Change the default Admin password Note: You should change the password for the default admin account as soon as possible for security reasons. For additional security suggestions, see Security Checklist on page Note: When you change the password for the admin account, you will have to log in again.
  • Page 89: About Disabling Warnings

    About disabling warnings The use of a UPS (Uninterruptible Power Supply), an internal modem and regular backups of Network Discovery data are all highly recommended. Network Discovery generates warnings if it does not detect a UPS or modem or if daily backups have been configured but are not occurring. You can, however, choose to turn these warnings off.
  • Page 90: Disabling Modem Warnings

    Network Discovery To enable or disable the UPS warning Click Administration > System preferences > Display warnings. For UPS warnings enabled, click Yes or click No. Click Change. Disabling modem warnings Network Discovery generates warnings if it does not detect an internal modem. If you have chosen to receive customer support through the Internet, over a Virtual Private Network or over a Remote Access Server, you can disable this modem warning.
  • Page 91: Chapter 7 Licenses

    Licenses CHAPTER Peregrine Systems makes increased functionality available through license files you can install once you receive them from Peregrine Customer Support. How it works To see what licenses are currently installed on your Peregrine appliance, see Status > Current Settings > Installed Licenses. You request a license upgrade from Peregrine Systems, directly through Network Discovery.
  • Page 92 Network Discovery You can use Network Discovery with this default license temporarily, or you can go ahead and request the license that will give you the full functionality you purchased, as well as the most up-to-date software components. Maintenance contracts entitling you to periods of support from Peregrine Systems Customer Support are also distributed in the form of licenses.
  • Page 93: Request A New License

    Environment poller Mapping engine (connectivity) Request a new license If you purchased Network Discovery from an Original Equipment Manufacturer or a Value-Added Reseller, follow your OEM/VAR’s instructions to obtain a license. You can send a request for a new license in two ways: The Peregrine appliance can send an e-mail message directly to Peregrine Systems Customer Support.
  • Page 94: Install The New License

    Network Discovery Install the new license Peregrine Systems Customer Support generates your new license file and sends it to you attached to an e-mail. Note: If the license asks the Peregrine appliance to do too much, (for example, a license for more devices than the Peregrine appliance can support) the Peregrine appliance will take the maximum it can do.
  • Page 95: Set Up Network Discovery

    Set up Network Discovery CHAPTER The following flowchart shows all the important tasks that must be completed to set up Network Discovery. There are other optional tasks described throughout the chapter. Run Router Discovery Set up IPv4 Ranges to Discover Set up IPv4 Ranges to Avoid Set up Specialty IPv4 Ranges (DHCP and unmanaged routers)
  • Page 96: How It Works

    Network Discovery Important: If you are using Network Discovery with Desktop Inventory, you must follow the steps outlined in Using Network Discovery with Desktop Inventory and Desktop Administration. How it works Essentially, network configuration works as follows. You add IPv4 ranges that you want Network Discovery to monitor.
  • Page 97: Set Up The Ipv4 Range(S) To Discover

    Note: The list of community strings must be separated by commas (for example, “public,private,string1,string2”). Click Change. Note: Hop 0 (zero) is always the Peregrine appliance itself, and hop 1 is always the default gateway. Run Router Discovery Click Administration > Router discovery > Run router discovery. Click Confirm.
  • Page 98: Import Your Ipv4 Ranges From A Csv File

    Network Discovery Import your IPv4 ranges from a CSV file Instead of entering all your IP ranges manually, you can import them from a CSV file. The file must be set up properly, as in the example below. State whether this Starting IP is a range or a address...
  • Page 99: View An Ipv4 Range

    Groups/Sets in the CSV file, and you do not select a default, the IP range will not be imported. Click Import. Once you import the CSV file, you will see a report explaining whether or not the import was successful. Read the report carefully to ensure that all your IPv4 ranges have been imported properly.
  • Page 100: Add An Ipv4 Range

    Network Discovery To delete an IPv4 range From Administration > Network configuration > List IPv4 ranges. Select the IPv4 range. If the range has subranges, Network Discovery gives you a choice of deleting only the range or of deleting the range plus all of its subranges. Click Delete this IPv4 range.
  • Page 101: Set Up The Ipv4 Range(S) To Avoid

    For Property Set/Group, select Network: Active Discovery. Network Discovery will perform network discovery (ping, poll, and table read) on the range you have entered. Click Submit. Repeat step 1 to step 4, if necessary, for all your subnets. You have added the range(s) to discover to your proposed new configuration, but your changes will not take effect until after you have reviewed and activated your changes.
  • Page 102: Add Ranges For Dhcp Servers And Unmanaged Routers

    Network Discovery Add ranges for DHCP servers and unmanaged routers If you have one or more DHCP servers or you have unmanaged routers, add their IPv4 addresses and apply the appropriate Property Group so that Network Discovery will monitor the ranges differently. To add IPv4 addresses to be treated as DHCP servers or unmanaged routers Click Administration >...
  • Page 103 Here’s how it works. You give community strings to a Community Property Group and then apply the Community Property Group to an IPv4 range. For now, just add all your community strings to one Property Group, the “global” Community Property Group. Note: Community strings are case-sensitive.
  • Page 104: Activate Your Proposed Changes

    Network Discovery Activate your proposed changes The Activate Changes page allows you to review all the changes you have proposed for Network Discovery network configuration before actually making those changes take effect. Note: Changes to network configuration do not take effect if you do not activate them.
  • Page 105: Are Devices Appearing On The Network Map

    Peregrine Systems recommends waiting at least 48 hours while Network Discovery is first discovering your network. If you have concerns after that, call customer support. Are devices appearing on the Network Map? Within the next few minutes, you can check that network discovery is occurring. To check that network discovery is occurring Click Status >...
  • Page 106: Check The Device Modeling Queue

    Network Discovery To check the Device Filters Report Click Status > Filtered devices To see a full list of possible filters, click Help > Classifications > Device Filters. Check the Device Modeling Queue During the initial discovery of your network, the modeling queue may show devices, depending on the size of your network and how quickly Network Discovery is discovering and modelling devices.
  • Page 107: Refining Network Discovery

    Refining Network Discovery CHAPTER The procedures in this chapter are optional. You may wish to come back to this chapter after Network Discovery has been up and running for a while. Here you will learn how to take advantage of the precision Network Discovery offers you for setting up Network Discovery.
  • Page 108: A Tree Of Ipv4 Ranges

    Network Discovery You can leave discovery set up that way, if it is satisfactory to you. In fact, if there is a lot of change in your network, leaving it alone may be the best thing to do. However, you can set discovery up more precisely. For instance, you may want to reduce overhead on the network, or you may have a lot of community strings for security reasons and want to set up separate ranges for them.
  • Page 109 You will be creating a tree of ranges and the tree can be as complicated as necessary to have Network Discovery monitor your network the way you want. Note: A range can consist of one device. The starting and ending IPv4 addresses are the same.
  • Page 110: Property Groups

    Network Discovery To merge IPv4 ranges Administration > Network configuration > Merge IPv4 ranges. Network Discovery displays all adjacent ranges sharing identical properties along with what the results of merge will be. Click Merge. You have merged any adjacent identical IPv4 ranges in your proposed new configuration.
  • Page 111: The Properties

    Administration > Network configuration > Network Property Groups > List Network Property Groups The list is a table with the names of the groups on the left and the names of the properties across the top. Here is a list of default Network Property Groups: global Active discovery Do not allow discovery...
  • Page 112 Network Discovery The following properties are in every Network Property Group: Property Purpose Allow devices Allow devices to be added Actively ping Actively ping devices for discovery Off NetBIOS query Query devices for their NetBIOS names (the computer user names) Resource/Environment Query devices for resource manage...
  • Page 113: How To Use Network Property Groups

    How to use Network Property Groups Some of the property groups cause Network Discovery to give you more data than others, but in doing so they also generate more traffic on the network and cause more load on the device being monitored. It can be a trade-off, a balance between efficiency and performance.
  • Page 114: Making Changes To Network Property Groups

    Network Discovery Property Group Passive Discovery Restrict to scanned-only Remove Address All off Making changes to Network Property Groups You are unlikely to need to know how to create, modify, or delete Network Property Groups. The default Network Property Groups will almost certainly meet your needs, but if they don’t, here are the instructions.
  • Page 115: Create A Network Property Group

    Create a Network Property Group Add a Network Property Group Administration > Network configuration > Network Property Groups > Add a Network Property Group. Give your new Property Group a name. Give your new Property Group a description. For each parameter, click On or Off or leave it at the default value, Inherit. Click Submit.
  • Page 116: Apply A Network Property Group To A Range

    Network Discovery Apply a Network Property Group to a range You might think of it as adding ranges that you want to subtract in some way from the preceding range. Each successive range that you add takes all its properties from the range of which it is a subset—except the properties you specify for it.
  • Page 117 To create a Community Property Group Administration > Network configuration > Community Property Group > Add a community property group. Give a name to the Community Property Group. Use a name that is meaningful to you. Add a description. Under the heading Add a Community String enter a string name, and select the appropriate Type (read or write, or both).
  • Page 118: More On Community Strings

    Network Discovery More on community strings If you do not add any community strings, but keep “public” (the default) in the list, Network Discovery will attempt to read the MIB of all devices in the defined IP range or set of ranges using only “public.” Note: If you do not add any community strings and delete “public”...
  • Page 119: Directed Community Strings

    either disable all such traps or use only a single correct community string for each device that issues a trap. Note: If another network management system is used in the same network with Network Discovery, this other system may generate alarms due to these traps.
  • Page 120: Property Sets Are A Shortcut

    Network Discovery You have deleted a single community string from a Community Property Group in your proposed configuration, but your change will not take place until you activate changes. To delete a Community Property Group Click Administration > Network configuration > Community Property Groups >...
  • Page 121: Reviewing And Activating Your Configuration Changes

    the strings you added. It’s a shortcut to save you from entering IPv4 ranges more than once. You should always give your Property Sets meaningful names, for example “servers” or “routers” so you can apply it to specific portions of your network. You can list, add, modify and delete Property Sets, the same way you do with Property Groups.
  • Page 122 Network Discovery If you wish to see details on the proposed changes to the IPv4 ranges, you can click on the tree diagram to expand it. New ranges appear in green. Changes to existing ranges are in yellow. Removed ranges are in grey. Review the changes to make sure the new configuration is correct.
  • Page 123: Setting Up Accounts

    Setting up Accounts CHAPTER Once you have set up the Peregrine appliance and configured Network Discovery, you will want to set up accounts. For each account, you can set the name, password, and other important information. Make sure anyone who needs to work with Network Discovery has an account, and knows the limits of their account level.
  • Page 124: How Many People Can Use Network Discovery At Once

    Network Discovery How many people can use Network Discovery at once Network Discovery supports a maximum of 250 accounts. More than one account can be used at a time. Up to six accounts can view a Network Map simultaneously. Up to 20 accounts can use any part of Network Discovery other than the Network Map simultaneously.
  • Page 125 You should also modify the capabilities of the account and the contact data for the person who owns the account. You can also modify the properties of the account, but this is optional; the account owner can perform these actions on his or her own account. Whether you just create an account or whether you customize each account for each owner is your decision.
  • Page 126 Network Discovery After you create an account, a shortcut menu appears. You can use the shortcut menus to continue working with the account. To create a password for an account Note: Alternative: If you see a brief menu on the screen, click Modify account password, then skip to Click Administration >...
  • Page 127: (Optional) More Account Administration

    To change an account type Click Administration > Account administration > Account capabilities. Select the account from the list box. Click Modify Capabilities. Select the account type from the list box. Note: You should have a single Administrator account. That account should be reserved for use by the Network Discovery Administrator.
  • Page 128 Network Discovery Note: You can make changes to your own account at Administration > My account administration. 128 | Setting up Accounts...
  • Page 129: Backup And Restore

    Backup and Restore CHAPTER Every day, after midnight, Network Discovery saves its data to a backup partition on the Peregrine appliance. In addition, you have the option of saving the data externally to an FTP site or to a tape. If necessary, you can restore the data from either the internal or the external backup or, if necessary, from another Peregrine appliance.
  • Page 130: Choosing Tape Or An Ftp Site For Your External Backup

    Network Discovery internal backup. Once the internal backup is complete, Network Discovery sends that internal backup to the FTP site and/or to the USB tape drive. When you restore data, you also have two options. You can restore either from the internal backup or from the external backup.
  • Page 131: Configuring An External Backup

    Windows 2000 Professional (IIS 4) Red Hat Linux: Kernel 2.2.12, ProFTPD version 1.2.6 For a recommended USB tape drive, see page 157. Note: For FTP backups, you must have read/write permission on the repository device. Tip: For increased security on FTP backups, create a special account on the repository device with very few security privileges.
  • Page 132 Network Discovery The default is Off. Note: The tape option does not appear if you do not have a tape drive connected. However, the tape option does still appear, if you disconnect the tape drive after you have configured the external backup as “Tape On”.
  • Page 133 valid characters: A–Z, a–z, 0–9 @ (at symbol), . (period), - (hyphen) length of input: 4–50 characters Enter the password for the FTP server (required). length of input: 4–20 characters Enter the host name or IPv4 address of the FTP server (required). valid characters: A–Z, a–z, 0–9 @ (at symbol), .
  • Page 134: Testing Your External Backup And Restore

    Network Discovery Choose whether or not you will back up scan files. (Scan files will take up a lot of space.) Click Submit. Network Discovery will now back up its data to the FTP site once a day. You can check the backup log at any time by clicking Administration > Backup and restore >...
  • Page 135: To Run An Internal Or External Backup Immediately

    To test your external FTP backup Click Administration > Backup and restore > Test external backup. Select FTP. Click Test. A screen appears showing your FTP configuration information. Click Confirm. A message appears, telling you if the test was successful or not. To test your external tape backup Important: Testing an external tape backup erases any data previously stored...
  • Page 136: Restoring Your Data

    Network Discovery Warning: If tape backup is selected, the tape in the drive will be erased. To back up your data immediately Click Administration > Backup and restore > Run external backup now. Click Backup now. Creating an internal backup If you select this option, you will send the active data to the backup partition immediately.
  • Page 137: Restoring From An Ftp Site

    To restore your data from an internal backup Click Administration > Backup and restore > Restore from internal backup. You can choose whether or not you will keep your current scan files if there are none in the backup. If Network Discovery has been set up for e-mail, choose whether or not an e-mail notification will be sent and to whose account.
  • Page 138: Restoring From Tape

    Network Discovery Restoring from tape If you have configured a backup USB tape drive, you can use this procedure to restore your data. To restore your data from a tape Click Administration > Backup and restore > Restore from tape. You can choose whether or not you will keep your current scan files if there are none in the backup.
  • Page 139 Step 1: Setup your new Peregrine appliance Perform the procedures as detailed in this Setup Guide, Start Network Discovery. If your new appliance will have the same IP address as the old appliance, do not connect the new appliance to the network yet. You will do that later in this process.
  • Page 140 Network Discovery Step 3: Connect the crossover cable between the two appliances Connect a cross over cable to Ethernet port 2 on the Peregrine appliance. Ethernet Port 2 on the IBM xSeries 335: Ethernet Port 2 on the IBM xSeries 330: Use Ethernet port 2 for the cross over cable 140 | Backup and Restore...
  • Page 141 Ethernet port 2 on the IBM 336: Ethernet port 2 on the Dell 1750: Ethernet port 2 on the Dell 1650/1850/2650: Use Ethernet port 2 for the crossover cable Setup Guide Use Ethernet port 2 for the crossover cable Use Ethernet port 2...
  • Page 142 Network Discovery Ethernet port 2 on the HP DL360/DL380: Use Ethernet port 2 for the crossover cable Step 4: Check the connection between the two appliances To check the connection between the two appliances On the new appliance, click Administration > Backup and restore > Test external backup and restore.
  • Page 143 Step 8: Restore on new appliance To restore your data from another appliance On the new appliance, click Administration > Backup and restore > Restore from another appliance. If Network Discovery has been set up for e-mail, choose whether or not an e-mail notification will be sent and to whose account.
  • Page 144 Network Discovery 144 | Backup and Restore...
  • Page 145: Shutting Down The Peregrine Appliance

    Shutting down the Peregrine Appliance CHAPTER How to shut down the Peregrine appliance Warning: Tip: Be sure to inform the people who clean and make repairs in the room where you keep your Peregrine appliance that it must be shut down properly.
  • Page 146 Network Discovery 146 | Shutting down the Peregrine Appliance...
  • Page 147: Appendix A Before You Call

    Before you call... CHAPTER You can save yourself some time, if you make sure your Peregrine appliance has the most up-to-date software before you contact Peregrine Systems Customer Support. Topics in this chapter include: Overview on page 147 Check that your maintenance license is current on page 148 Check that you have the latest software components on page 148 Download the new component(s) on page 149 Install the new component(s) on page 149...
  • Page 148: Check That Your Maintenance License Is Current

    Network Discovery Check that your maintenance license is current To check that you are still entitled to support Click Status > Current Settings > Installed Licenses See the value of the attribute, “Maintenance valid until:” Check that you have the latest software components Peregrine continually improves Network Discovery with new software components to handle new devices on the market and in your network.
  • Page 149: Download The New Component(S)

    Download the new component(s) If the packages posted on the web site are newer than those currently installed on your Peregrine Appliance, download the latest software component(s) to your workstation. Install the new component(s) Pick a time to perform the upgrade when users are unlikely to be accessing Network Discovery.
  • Page 150: After You Install New Components

    Network Discovery After you install new components To check that the latest software component is installed Status > Current Settings > Installed components. If you installed jay or rulebase components, changes are not instantaneous. You will not see changes in your data until the Device Modeler has updated. You can check to see when the Device Modeler last updated.
  • Page 151 The device goes to the top of the device modeler’s queue. Note: There may be a delay of as much as 1–2 hours before the device appears on the Network Map. If you still have a problem after the latest software components have been installed, and the device model has been updated, contact Peregrine Systems Customer Support.
  • Page 152 Network Discovery 152 | Before you call...
  • Page 153: Appendix B Security Checklist

    Security Checklist CHAPTER Although your Peregrine appliance will operate even if you do not follow these procedures, we strongly recommend that you take the following steps to reduce risk. Step 1 The Peregrine appliance stores a lot of information about your network. You do not want this information to be publicly available.
  • Page 154 Network Discovery Step 3 Eliminate known account names “admin” “itmanager”, “itemployee”, and “demo.” Create a new Admin account for the Network Discovery Administrator. (optional) Create a new Demo account for training users. Log into the new Admin account. Delete the accounts named “admin”, “itmanager”, “itemployee”, and “demo.”...
  • Page 155 There is information about accounts in Chapter 10, page 123 and there is information about event filters in the Network Discovery User Guide. Step 5 Change the Peregrine appliance’s default password (“Appliance”) in the configuration interface. This is a documented password, known to: Admin accounts at your site existing and prospective Network Discovery customers Anyone who knows the default password will be able to change the SNMP MIB...
  • Page 156 Network Discovery 156 | Security Checklist...
  • Page 157: Appendix C Extra Hardware

    Extra Hardware CHAPTER The following hardware is not supplied with the Peregrine appliance but is either required to provide extra functionality or is recommended. Note: To connect all three pieces of equipment—a UPS, backup equipment and pager hardware—attach a Universal Serial Bus (USB) hub. Uninterruptible Power Supply (UPS) units Used for Protection against electrical service interruptions and fluctuations.
  • Page 158: Recommended Ups Units For Africa, Asia, Europe, Australia, The Middle

    Network Discovery Note: The Smart-UPS 1000 USB is the smallest recommended UPS, but larger ones may be used. Recommended UPS units for Africa, Asia, Europe, Australia, the Middle East, and the South Pacific Customers in Africa, Asia, Europe, Australia, the Middle East, and the South Pacific require a 230 volt UPS.
  • Page 159: External Modem

    330 or Dell 1650 version of the Peregrine appliance to increase its capacity from a maximum of 4,000 to a maximum of 8,000 devices. You can add a second CPU to an IBM xSeries 335 or Dell 1750 version of the Peregrine appliance to improve its performance.
  • Page 160: Use The Cd And Reboot The Peregrine Appliance

    You can add an internal modem to the IBM xSeries 335 or the IBM xSeries 330, Dell 1750, Dell 1650, or HP360. An internal modem is used with an analog telephone line to give access to Peregrine Systems Customer Support.
  • Page 161 required for Network Discovery will be used. After the packages have been installed, the CD ejects, and the server reboots. Remove the CD and store it in a safe place. Network Discovery can now use the added CPU or modem. If you see an error message telling you that there is a problem with the hardware, contact Peregrine Systems Customer Support.
  • Page 162 Network Discovery 162 | Extra Hardware...
  • Page 163: Index

    Index PEREGRINE AC power connecting 47 account change type 127 create a password 126 creating 124 how many can access Network Discovery 124 pre-installed 123 setup 123 types Administrator 124 Demo 124 IT Employee 124 IT Manager 124 activate changes 104 Administrator account 124 password, changing 88 alarms...
  • Page 164 158 connect hardware 65 date and time setting 85 synchronizing continually 87 once 86 Dell 1650 63 Dell 1750 63 Dell 1850 63 Dell 2650 63 Demo account 123 device filters report 105 device model status report 105...
  • Page 165 Internet Explorer minimum version 42 IPv4 address 16 of the appliance 56 IT Employee account 123 IT Manager account 123 Java enable 43 JavaScript enable 43 license 91–94 basic discovery 92 default 91 disaster recovery 92 Evaluation 92 install 94 maintenance 92 check if current 148 request 93...
  • Page 166 Network Discovery Peregrine Systems Customer Support access 17 access options 27–30 Internet 27 Remote Access Server 28 telephone line 28 Virtual Private Network 28 power connecting 47 pre-installation 11 checking the management workstation 42 preparing the network 23 questionnaire 15 pre-installed accounts 123 preliminary work 12 preparation 12...
  • Page 167 troubleshooting at startup 104 Exceptions reports 105 when logging in 71 unmanaged routers 102 upgrading software 147–151 UPS 157 acceptable units 157 connecting 64 warning, enable/disable 89, 90 Virtual Private Network 28 workgroup name, entering 82 Setup Guide | 167...
  • Page 168 Network Discovery 168 | Index...
  • Page 170 1/21/05...

This manual is also suitable for:

Network discovery 5.2.3

Table of Contents