Solarwinds NetFlow Traffic Analyzer: How to: Group your NetFlow Traffic with IP Address Groups Advanced Reporting

 This is a part of my “How To” series on tackling common issues that IT Administrators deal with on a daily basis. This will include a single scenario, and how to use Solarwinds software to address these issues in a short time.

SCENARIO:

One outstanding feature that is little well known is IP Address Groups in NetFlow. IP Address Groups will allow you to group your IP Address ranges or specific IPs into a group to see what areas of the network are using what percentage of traffic. This is great for seeing what Remote Location is using the Internet Link, but this will also help in understanding your Network Performance as a whole.

WHAT INFORMATION WILL I NEED BEFORE I BEGIN?

Know your IP address Ranges or Specific IP Addresses

Before I begin I will tell you how I setup my network. The Network that I will show is my Internal Lab. IP Address range is fairly simple.

.1-.9 is reserved for Network Devices. DNS and Solarwinds Server happen to fall into this range since this was an earlier existing infrastructure which can be common with older Networks.

.10-.19 – Reserved for Servers

.20-.22 – Special Workstations

.50-.249 is Hosts

.250-.254 is Access Points.

.255 and 255.255.255.255 – Broadcast does not sound necessary, but when you have a broadcast Storm or Multicast issue, this will help later on.

8.8.8.8 and 8.8.4.4 (Google DNS) I also grabbed my Root DNS Servers to monitor DNS Traffic flow.

Adding IP Address Groups

You will need to go into Settings> NTA Settings> Manage IP Address Groups.

Select Add and add in your Ranges and create your Groups. Make sure to enable “ Enable display in Top XX IP Address Groups Resource. “  Here is a sample of what I created.

What am I seeing now:

So what does this give me?

This will give you 2 things

1. Proper grouping of your Network Devices.
2. A new view called the IP Address Group Page.

IP Address Group View

This view will get you the same resources the Interface Details page does, but only for the grouped devices. The information will include:

• IP Address Group Details
• Top Transmitters
• Top Receivers
• Top Applications (Ports)

• Total Bytes Transferred
• Top Conversations

When examining my Network, I now use IP Address Groups to see how well the Network is performing. I noticed as I set my groups that my connection to my Root DNS Servers was using more of my Internet Link than I realized. Now I can go into my DNS Configuration and see if there are any Network Improvements I can do to reduce my overall load.

Solarwinds: Database Permissions for Solarwinds Orion Products

The Configuration Wizard says I do not have required permissions to the database, how do I fix this?

The Solarwinds Configuration Wizard is reporting this error because the SQL account you have assigned to your Orion installation has not been configured with appropriate permissions to access your Orion database. You must create a new SQL account with required permissions for your Orion installation, as indicated in the following procedure.

Note: To create a new SQL account, you must have access to the following:

• Microsoft SQL Server Management Studio on the SQL Server hosting your Orion database.

• sa credentials to the SQL Server hosting your your Orion database.

To create a new SQL account with required permissions for your Orion database:

1. Using sa credentials, log in to SQL Server Management Studio on the SQL Server hosting your Orion database (Start > All Programs > Microsoft SQL Server > SQL Server Management Studio).

2. Click + to expand Security > Logins.

3. Delete all existing SolarWinds Orion database accounts, as follows:
   Warning:You must be logged-in as the sa user. Do not delete the sa user.

1. Right-click the account name, and then click Delete.

2. Confirm that the account to be deleted is highlighted, and then click OK.

3. Click OK to accept the user deletion warning.

4. Create a new user, as follows:

1. Right-click Logins, and then select New Login.
2. Click General in the Select a page pane on the left.
3. Provide an appropriate Login name.
4. Select SQL Server authentication.

5. Enter and confirm an appropriate Password
   Note: The password provided must meet at least three of the following criteria:
• Contains at least one uppercase letter.
• Contains at least one lowercase letter.
• Contains at least one number.
• Contains at least one non-alphanumeric character, e.g., #, %, or ^.

6. Confirm that Enforce Password Policy is cleared.
7. In the Default database field, select your Orion database.
   Note: The default Orion database name is NetPerfMon.

8. Click Server Roles in the Select a page pane on the left.
9. Confirm that both public and sysadmin are checked.

10. Click User Mapping in the Select a page pane on the left.

11. Check your Orion database.
    Note: The default Orion database name is NetPerfMon.
12. In the corresponding Default Schema field, click Browse (...), enter dbo
13. Click Check Names, and then click OK.
14. On the Login - New window, click OK.

5. To verify the new user, click + to expand Databases > OrionDatabaseName > Security > Users.. Your newly created user should display in the Users list.
   Note: If your newly created user does not display in the Users list, the account you used to initially log in to the SQL Server Management Studio does not have permission to create database accounts.