OER NetWatch User’s Guide Version 1.6 August 2007 Copyright 2001, 2005, 2007 Fluke Corporation. All rights reserved. All product names are trademarks of their respective companies. w.flukenetworks.
User’s Guide – version 1.6 NetWatch Software License Agreement This is a legal agreement between you (“You”/ “the End User””), and Fluke Corporation, a Washington corporation, its subsidiaries and affiliates, including Fluke Networks (“Fluke”), with offices at 6920 Seaway Boulevard, Everett, Washington, 98203, USA.
User’s Guide – version 1.6 NetWatch written materials accompanying the Product. You shall not remove or alter Fluke’s copyright or other intellectual property rights notices included in the Product or in and any associated documentation. You must notify Fluke forthwith if You become aware of any unauthorized use of the Product by any third party.
User’s Guide – version 1.6 NetWatch 9. TERMINATION Either party shall be entitled forthwith to terminate this Agreement by written notice if the other Party commits any material breach of any of the provisions of this Agreement and, fails to remedy the same within sixty (60) days after receipt of a written notice from the non-breaching Party giving full particulars of the breach and requiring it to be remedied.
User’s Guide – version 1.6 NetWatch 14.2 This Agreement is personal to You and You shall not assign, sub-License or otherwise transfer this Agreement or any part of your rights or obligations hereunder whether in whole or in part save in accordance with this Agreement and with the prior written consent of Fluke and You shall not allow the Product to become the subject of any charge, lien or encumbrance of whatever nature.
User’s Guide – version 1.6 NetWatch Appendix 1 to End User License Terms and Conditions for Fluke Support and Maintenance Service 1. Definitions 1.
User’s Guide – version 1.6 NetWatch foregoing, VAT, excise tax, tax on sales, property or use, import or other duties whether levied in respect of this Agreement, the Support Services or otherwise. 4. Undertakings by You You undertake: 4.1 To maintain accurate and up to date records of the number and location of all copies of the Product supplied to You under the terms of the License Agreement and in relation to the numbers of users of such. 4.
User’s Guide – version 1.6 NetWatch termination and any obligations which expressly or by implication are intended to commence or continue in effect on or after termination. 9. Confidential Information and Security 9.1 During and after this Agreement, the Parties will keep in confidence and use only for the purposes of this Agreement all Confidential Information.
User’s Guide – version 1.6 NetWatch Schedule Support Services 1. Support Hours The Support Hours during which Fluke shall supply the Support Services shall be between 9.30am and 5pm on Working Days. 2. Support Services Fluke shall provide You during the Support Hours with: 2.1. technical advice and assistance by telephone, facsimile, e-mail or other electronic means as shall be necessary to resolve your difficulties and queries in relation to the Product and the Updates which You may require; 2.2.
User’s Guide – version 1.6 NetWatch Contents SOFTWARE LICENSE AGREEMENT 2 CONTENTS 10 CHAPTER 1 – INTRODUCTION 13 Overview Key Product Features Minimum System Requirements Installing NetWatch Accessing the User Interface Service Details Architecture Overview. NetWatch Monitoring System NetWatch Database Alerting System Web Front-end CHAPTER 2 – NETWATCH CONFIGURATION Global System Settings Setting up a Device Step 1. Specifying Devices. Step 2.
User’s Guide – version 1.
User’s Guide – version 1.6 NetWatch The Receive SNMP Notifications service Configuring services CHAPTER 9: SECURITY Levels of Security Enabling Security APPENDIX A: SNMP MIBs OIDs Communities Notifications The Windows snmptrap.
User’s Guide – version 1.6 NetWatch Chapter 1 – Introduction Overview NetWatch is a web based management product that provides a very detailed amount of network information through an intuitive, easy to understand graphical interface. Key Product Features Monitors Network devices reporting on status, alerts and utilisation. Provides a graphical representation of the network where devices are represented as nodes connected by lines on a user definable background.
User’s Guide – version 1.6 NetWatch NetWatch uses the MySQL database to store configuration and historical information. This is the largest part of NetWatch, so you may wish to install it on a drive other then your system drive. To do this select "custom" from the set-up type screen. Then choose "MySQL" and change the destination drive/directory. When the installation completes NetWatch will be successfully installed and can be used by accessing the User Interface.
User’s Guide – version 1.6 NetWatch NetWatch Monitoring System The monitoring system is the core element within NetWatch. It performs the work of monitoring the status of the services provided by a device and keeps track of the amount of traffic going in and out of various channels on that device. It also acts as a receiver to SNMP traps and syslog messages, which are generated by various network devices.
User’s Guide – version 1.6 NetWatch NetWatch Database MySQL was strategically chosen as the database for NetWatch because of the speed with which it performs SQL queries. It also handles connections very efficiently, thus making it ideal for a web based product like NetWatch. The database stores all NetWatch configuration data and logs. Alerting System NetWatch contains a complex alerting system, which alerts the user to certain situations on a device.
User’s Guide – version 1.6 NetWatch Chapter 2 – NetWatch Configuration To configure NetWatch click the “Administration” button on the welcome screen. Global System Settings These are settings that affect the operation of the whole NetWatch system. If you installed NetWatch into a folder other than the default, please ensure these settings are correct. To access the System Settings page click on the “System Settings” button.
User’s Guide – version 1.6 NetWatch Setting up a Device The process of setting of a network device for monitoring is done in a very intuitive and easy to use ‘Configuration Wizard’ with five simple steps. ‘Next’ and ‘Previous’ buttons are provided for navigation within the wizard. Step 1. Specifying Devices. This step involves specifying the devices you wish to monitor. Devices that are set up together will all contain the same configuration.
User’s Guide – version 1.6 NetWatch If you are unhappy with the devices you have added, clicking on the ‘Reset Device List’ button will clear the list. Once you have loaded your device(s) you may proceed to step 2 by clicking the ‘Next’ button. Step 2. Select Service Types This step involves selecting the types of NetWatch service that you wish to use to monitor the device(s). There are four individual service types: Ping A simple ping operation to test whether or not the device is responding.
User’s Guide – version 1.6 NetWatch For more information on SNMP for the Interface Test or Trap Reception, see Appendix B: SNMP. Further details of each service type can be found be clicking its related ‘info’ link. To change the default values for timeouts and expected response times, click the ‘configure’ link beside the service type. For more detailed information on service types see Chapter 8: Services, Discovery and Polling. Step 3. Alarms.
User’s Guide – version 1.6 NetWatch At any time before you finish the wizard, the Configured? Column on Step 4 keeps track of what devices have been edited in this session. The Editing Device window, described below, will pop up when you edit a device or devices; if you edit any devices you must click on ‘Finish’ on this screen when you are finally finished in order to save the changes you have made. Step 5. Editing Devices This step shows a listing of all the services discovered for a set of devices.
User’s Guide – version 1.6 NetWatch A service can be managed or unmanaged using the provided checkbox. If a service is unmanaged this means it will not be polled for status information. The polling interval is the amount of time between polls. You can increase this to reduce the amount of network traffic created by NetWatch. The Average and Maximum response times of services can also be set. These response times are set in milliseconds. (1000 milliseconds=1 Second).
User’s Guide – version 1.6 NetWatch Chapter 3 – NetWatch Visualisation NetWatch provides a unique way to visualise your network, by creating a network visual over a background image. The background can be any image in the form of a gif, jpg or jpeg file. Managing Visual Backgrounds A visual can use any graphic image as a background. These background images can be uploaded into the visualisation section and used for a new visual setup.
User’s Guide – version 1.6 NetWatch To Change the Background image of a Visual - Navigate to the Background Admin section - Click the Change Map button next the visual whose background you wish to change. - Select the desired background image and click OK. Drawing the Visual A NetWatch visual allows your Network to be viewed in a unique way where each configured device is considered a network node.
User’s Guide – version 1.6 NetWatch Set the default action taken on clicking a Node\Link. The default action taken when left-clicking a node\link in viewer mode can be defined here in edit mode. This can be a built-in or user defined action. - Right-click the node and select Set Default Action. - Select the action to be executed when a user right clicks that node. - If you select Display Map then select a map from the list that appears. Align Node Descriptions.
User’s Guide – version 1.6 NetWatch View Traffic between 2 Nodes - Right click on the desired link - Select ‘Show Utilisation’ from the menu. Node Colour Code System Green: No alarms Present and all managed services are currently up. Yellow: Alarms are Present. (View Node Alarms.) Red: One or more of the managed services of this device are down. Link Colour Code System Grey: The Link is not being managed. Dark Green: Utilisation is less than 10%.
User’s Guide – version 1.6 NetWatch Chapter 4- The Alerting System How NetWatch Alerting Works NetWatch can throw alerts when certain events occur or if thresholds are exceeded on the network. When an alert is thrown, it is logged to the database and displayed on the http reports and indicated on the NetWatch visuals. It can also be forwarded to various recipients.
User’s Guide – version 1.6 NetWatch To add or edit a service alert for a new device, when you get to the Discovery stage with discovery complete, edit the required devices and select the services on which you want to configure the alerts. Click Edit Services to show the Configure Services window. The bottom section of this window deals with alerts. The type of alert shown depends on the type of services that you are editing.
User’s Guide – version 1.6 NetWatch Setting up Alert Controllers To set up Alert Controllers go to the Configure Alarms page in the Admin section. This will give you the following options SNMP Notification Alerts Service List Alerts Response Time Alerts Status Change Alerts Utilisation Alerts The options within each alert controller are always the same. An alert will be handled by one alert controller, depending on the type of alert indicated by its name.
User’s Guide – version 1.6 NetWatch Chapter 5: The Reporting System NetWatch prides itself on its ability to report on network status anywhere at anytime. All NetWatch reports can be viewed through an Internet browser and are 100% web based. This enables the user to view reports on the move instead of being tied down to a centralized monitoring machine based in head office or the computer department. Alerts NetWatch alert reports show the current alerts triggered by the system.
User’s Guide – version 1.6 NetWatch and press the show configuration button. This will show all the managed – unmanaged interfaces and services on the device in a report format along with its configured elements, such as alerting options. Syslog Messages NetWatch syslog reports show a list of syslog messages received by the system. The All Syslogs button shows a report on all syslogs received by the system.
User’s Guide – version 1.6 NetWatch Chapter 6: Syslogs The Syslog protocol is an event notification protocol that allows a machine be it a Server, Hub, Switch or Router to send event notification messages to ‘event message collectors’ -also known as ‘Syslog servers’. Syslogs and NetWatch NetWatch has its own built in fully featured Syslog server. Any Syslog messages sent to the NetWatch Server will be stored in a Syslog message event database.
User’s Guide – version 1.6 NetWatch Chapter 7: Utilities Backing up the database from the web interface To back up your database from the web front end you need to open the backup control from the utilities section. This brings up Netwatch Backup screen. Enter in a folder on the server to backup to, or you can leave this blank and the default folder will be used. The default folder is set-up in the system settings section and defaults to “c:\NetWatchbackup”.
User’s Guide – version 1.6 NetWatch of maps containing a device with this address will be displayed. The device name corresponding to that IP address will also be shown. Setting up a licence A NetWatch licence is required to run NetWatch continuously. You will receive the licence, either in a binary file or in ASCII hex code format. To load the licence, go to the Licensing page in the Utilities section.
User’s Guide – version 1.6 NetWatch Chapter 8: Services, Discovery and Polling If you are new to configuring NetWatch, please refer to Chapter 2, “Configuration” for a step-by-step guide to setting up devices before reading this chapter. This chapter describes in detail the operation and advanced configuration of the various types of monitoring NetWatch can carry out on a device.
User’s Guide – version 1.6 NetWatch This service type is one of the most powerful supported by NetWatch. Along with testing the status of an interface, a service can be configured to read usage information for the interface. This allows you to create graphs of bandwidth utilisation for an interface, and allows the map applet to colour links according to their percentage utilisation.
User’s Guide – version 1.6 NetWatch Test Community: This performs a simple ‘SNMP Get’ to ensure the correct SNMP community string has been configured for this particular device. Management Policy: This allows you to decide what tasks will be carried out by each service created by the agent. You can choose which services are managed and whether utilisation statistics are gathered. You can easily change these settings for each service at a later date.
User’s Guide – version 1.6 NetWatch The Ping Response Test service This is one of the simplest service types NetWatch supports. On discovery a single service is created that checks the device is responding to an ICMP echo request. This is the same test carried out when you use the “ping” command line tool present in virtually every operating system.
User’s Guide – version 1.6 NetWatch Chapter 9: Security Three levels of security are available in NetWatch. Each level allows access to different NetWatch functions. Levels of Security The levels of security are Administrator, Operator and Viewer. The Administrator has access to all NetWatch functions, including security administration. The Operator can view network visuals and has full access to all reports. The Viewer can view network visuals and reports.
User’s Guide – version 1.6 NetWatch Appendix A: SNMP SNMP, or Simple Network Management Protocol, is a widely used standard that allows network management software to query network devices for status and information regardless of the type of device and the software it runs. The original SNMP developed in 1988 is defined in RFC 1157, and the current version 3 is fully backwards compatible. NetWatch uses SNMP version 2c when available; otherwise it reverts to version 1.
User’s Guide – version 1.6 NetWatch the device with each SNMP request. If you are not sure of the communities on a particular device a good guess for the read-only community is “public”. Notifications A notification or trap is a small message sent by an SNMP agent to a management station to inform the management station of an event that has just happened. Traps can be used to reduce the network traffic and load on the device caused by rapidly polling values.
User’s Guide – version 1.6 NetWatch Configuring SNMP on a Cisco Router The following instructions describe how to configure SNMP on a Cisco router running IOS. Care must always be taken when editing router configuration. If in doubt, consult your network engineer. 1. Telnet to the router: C:\> telnet User Access Verification Password: 2. Enter enable mode (note that the password may be different to the login password): Router>enable Password: 3.
User’s Guide – version 1.6 NetWatch Cisco Information on SNMP - www.cisco.com/warp/public/535/3.
User’s Guide – version 1.6 NetWatch Appendix B: NetWatch And IIS NetWatch can be configured to use IIS as its default web server. To achieve this the following instructions must be completed. We strongly recommend that, if the IIS server is to be accessible from the internet, that all service packs and security patches are applied before making the server available. For more information see http://support.microsoft.com 1. Install IIS. 2. Stop Tomcat Service 3.
User’s Guide – version 1.6 NetWatch 11. Due to the security considerations with IIS, we strongly recommend that you install all of the available IIS security patches available from Microsoft. More information on this can be found from http://support.microsoft.
User’s Guide – version 1.6 NetWatch Appendix C: Integrating Netwatch and Netflow Tracker Firstly it is important to note that Netwatch and Netflow Tracker must be installed on two separate server machines. The integration of the two products is done thru the use of Netwatch Visuals. Once both Netflow Tracker and Netwatch are fully configured and your Netwatch visual is complete integration can begin. The following example will guide you through the process: 1.
User’s Guide – version 1.6 NetWatch Appendix D: Auto Discovery Given a starting IP address and appropriate community strings NetWatch will automatically discover your network and allow you to add devices found as NetWatch devices. Netwatch uses 2 different methods to discover your network. One can use one of the methods individually or you can use both together. These two methods are described below: Discovery Methods CDP Discovery CDP is a Cisco proprietary protocol.
User’s Guide – version 1.6 NetWatch IP Address Range Filters With this type of filter only devices within a specified IP address range will be discovered.
User’s Guide – version 1.6 NetWatch Appendix E: Third Party Software NetWatch makes use of some third party libraries, distributed under various licenses. jspSmartUpload This product includes software developed by Advantys (http://www.advantys.com), distributed under the Advantys Freeware license contract, a copy of which is available at http://www.jspsmart.com/liblocal/docs/legal.htm#free. MySQL NetWatch uses MM.MySQL v2.0.13 for database access, available at http://sourceforge.net/projects/mmmysql/ .
