Orion NTA Customer Training Part II

Introduction  A big “Howdy” from SolarWinds based in Austin, Texas » Josh Stephens - Head Geek, Monster Blogger, Constant Tweeter » Nikki Jennings – SE Manager » Jason Matthews – SolarWinds Lab Manager  Today’s Topic: Part #2 - Training on the Orion NetFlow Traffic Analyzer  Who is SolarWinds? » Dude, if you don’t’ know this you’re on the wrong webcast…

Housekeeping  Can you hear me now?  If not, use the GoToWebinar chat or Q&A panel to let us know.  How do you win the free stuff?  How do you ask questions?  Will this thing be recorded?  Ask lots of questions – Today’s content is based on the feedback from part #1

Agenda  Refresher – NetFlow Basics from Part #1  Configuring Flow Export on Network Devices  Understanding Orion NTA Events  Troubleshooting Flow Reception  Where to Learn More and Q&A

Basics of Traffic Flow Technologies  Keeps track of the traffic flowing from place to place  Traditionally leveraged on to monitor layer 3 (routed) traffic flows  Recent addition of layer 2 (switched) traffic detail

What is a “Flow”  A flow is identified by NetFlow v5 Key Fields combining a set of key Source IP Address Destination IP Address fields from the network Source Port Number packets Destination Port Number Layer 3 Protocol Type ToS byte  A flow has a set of Logical Interface Index statistical data NetFlow v5 Flow Statistics System uptime start of flow System uptime end of flow # of packets in flow # of bytes in flow

Shared Technical Details  Transport Protocol is UDP » Some newer versions optionally support TCP and SCTP » UDP Port numbers are generally configurable  Technology included within router/switch software » Check your IOS feature set if using Cisco gear » Some implementations in software, some on ASIC  Easy to configure/enable on network gear » Usually only a few CLI commands » Some devices configurable via SNMP and/or web services interface

Agenda  Refresher – NetFlow Basics from Part #1  Configuring Flow Export on Network Devices  Understanding Orion NTA Events  Troubleshooting Flow Reception  Where to Learn More and Q&A  Q&A

Configuring Devices for Flow Export  NetFlow » Cisco 2951 (ISR G2) » Cisco ASA 5505 » Adtran NetVanta 3448  sFlow » HP Procurve 5406 » Foundry Fast Iron 4802 » Extreme Alpine 3808  JFlow » Juniper J2300

Understanding Orion NTA Events

Troubleshooting Flow Reception

Where to get learn more…  Documentation » New to Networking Volume III – NetFlow Basics and Deployment Strategies • http://thwack.com/media/p/83695.aspx » Guide to Enabling NetFlow on Cisco Catalyst Switches • http://www.solarwinds.com/support/Netflow/docs/OrionNetFlowSwitches.pdf » Orion NTA Administrator’s Guide • http://www.solarwinds.com/support/NetFlow/docs/NetFlowAdministratorGui de.pdf  Videos • http://www.solarwinds.com/geek  Community • http://www.thwack.com  Technical Support • http://www.solarwinds.com/support/

Summary and Q&A Thank you for attending! To learn more or to download free 30-day trials of SolarWinds products visit: www.SolarWinds.com Contact information Josh Stephens, Head Geek headgeek@solarwinds.com twitter: sw_headgeek Blog: http://thwack.com/blogs/geekspeak/ p.s. Remember to renew your maintenance!!!

Orion NTA Customer Training Part II

by SolarWinds on Nov 25, 2009

Accessibility

Categories

Upload Details

Usage Rights

1 Embed 6

Statistics