Infoblox recommends reading the topics in About Network Discovery before running the Setup Wizard for the first time.

The Setup Wizard (Settings icon –> Setup –> Setup Wizard) provides a multistep process for installing and configuring NetMRI. As shown in the table below, steps in the Wizard depend on whether it is run during installation or from Settings, and whether you choose to use Auto Discovery.

Setup Wizard: Admin Setup

This step is present during initial NetMRI setup. It does not appear after NetMRI is successfully configured and the wizard subsequently accessed via the Settings icon –> Setup –> Setup Wizard.

The primary administrative account is used by the NetMRI administrator to create user accounts and configure NetMRI. This account's user name and password are also required to access the administrative shell (a command line interface). Other NetMRI users do not have the special privileges available to the administrator. The administrator account is the "superuser" account in the NetMRI appliance.

The primary administrative account's user name is "admin" and cannot be changed. Since this user name is easy to guess, it is essential to assign a strong password to prevent unauthorized users from impersonating the administrator.

Enter and confirm the password for the NetMRI administrative account. Requirements for the password are listed at the bottom of the screen.
Click Next.

Setup Wizard: License Install

This step is present during initial NetMRI setup. It does not appear after successfully configuring NetMRI and running the setup wizard via Settings icon –> Setup –> Setup Wizard, or installing the license using the Admin Shell. Subsequent license installations can be carried out by going to Settings icon –> Setup –> Settings Summary and clicking the Install link above License Configuration.

A license is required to use NetMRI for production or evaluation purposes. Each license is keyed to a specific NetMRI serial number and specifies the maximum number of devices and interfaces that NetMRI can monitor, as well as which software modules are enabled.

You can apply a new license file or modify the existing license using the license generate command. When you receive the file, save it in a location you can access from the Setup Wizard.

Browse to the location of the NetMRI license file, then select the license file. The license file ends with the extension .gpg.
Click Next.

Setup Wizard: Welcome

Infoblox recommends enabling automatic discovery during the Setup Wizard.

With automatic discovery, NetMRI attempts to discover devices on the network using SNMP and terminal command-line discovery methods. Less configuration is required by using automatic discovery, but it may take longer to completely discover all the devices you expect to be detected and managed.

Disabling discovery means that NetMRI will manage devices that are manually entered during configuration. Devices known to exist, but not explicitly configured, are not included in any reports or topology data. Configuring NetMRI with discovery disabled may take longer depending on the number of devices in the network.

After this step, you specify Discovery Ranges, where you specify the devices, networks, and subnetworks that NetMRI communicates with when executing Discovery.

Enable or disable auto discovery.
Click Next.

Setup Wizard: Discovery Ranges

You can add new IP address ranges and seed routers at any time after initial NetMRI setup. IPv4 and IPv6 are supported. For more in-depth information, see the Configuring Discovery Ranges topic.

Discovery ranges define the scope of the network that NetMRI explores by defining CIDR address blocks, IP address ranges and IP address wildcards. NetMRI limits its network exploration to the set of ranges defined in this tab. You can also exclude values and ranges from the Discovery process and hence from monitoring by NetMRI.

A CIDR address block is defined by a network address and bit mask (for example 192.168.1.0/24).
An IP address range defines a start and ending IP address. For instance, you could define 192.168.1.0 as the start of the IP range and 192.168.1.255 as the end of the IP range.
An IP address wildcard pattern defines a single IP address range using a wildcard character or range for a specific set of octets. For example, you could define either 192.168.1.* or 192.168.1.0-255 as the IP address wildcard pattern. An IP address wildcard pattern can substitute an asterisk or range for any single octet in the definition.
A desired set of values can also be imported from a *.CSV file.
Every discovery range must be associated with a network view. For more information, see Configuring Network Views.

Ranges included in discovery indicate that any device found matching that range is discovered and managed by NetMRI. Ranges excluded for discovery indicate that any device found matching that range is excluded from discovery. Ranges marked Exclude from Management indicate that any device found matching that range is discovered, but NetMRI will not manage/collect data from the device.

Specify IP address ranges to include or exclude during discovery.
- Click New, select CIDR, IP Range, or IP Pattern and enter the new values according to your selection. Use the CIDR selection to enter an IP prefix with its CIDR mask value, or an IP range with a beginning and ending range of IP addresses. IP Pattern lets you enter a value with a wildcard (* or -) character. Many users will prefer to use the CIDR option.
- To use a ping sweep for the discovery range, check the Enable Discovery Ping Sweep check box.
- Ensure that the Network 1 network view is selected from the Network View drop-down list. This network view is automatically created when you run configureserver to perform initial setup on the appliance. You can rename this network view at a later time on the Settings icon –> Setup –>Network Views page.

If you want to select another network view, ensure the view you select is associated with a scan interface. If the view you pick is not associated with a scan interface, it will show a caution () icon by its name. The Network 1 network view is automatically associated with the SCAN1 port.

2. Select the Discovery Mode. For the first network you discover, use the Include in Discovery selection.

3. Click Add.

To edit an item, select an entry and click Edit. Change the value in the Network field above the table, including the subnet mask if necessary (the mask value is a dropdown menu), and then click Save.
To delete an item, select an entry, click Delete, and then confirm the deletion.
To import discovery setting data, click Import. In the dialog, click Browse to select the CSV file, then click Import. See Discovery Settings Import Formats for information on import file syntax.

4. Click Next.

See Running Network Discovery for more information on the NetMRI Discovery process.

Setup Wizard: Static IPs

You can specify individual IPs that you explicitly want NetMRI to manage. Adding values to this Wizard step prioritizes the specified addresses over other IPs or subnets specified for Discovery. Static IP entry supports IPv6 and IPv4 values.

Specify IP addresses that you want NetMRI to manage.
- Click New, enter the new IP address in the IP Address field (subnet is not necessary), and choose the Discovery Mode. For the first network you discover, use the Include in Discovery selection.
- Ensure that the network view chosen in the Wizard step Setup Wizard: Discovery Ranges is selected from the Network View drop-down list. For example, you may use the Network 1 network view.
Click Add.
- To edit an item, select an entry and click Edit. Change the value in the IP Address field above the table or change the Discovery Mode (by default it is set to Include in Discovery), then click Save.
- To delete an item, select an entry, click Delete, then confirm the deletion.
- To import discovery setting data, click Import. In the dialog, click Browse to select the CSV file, then click Import. See Discovery Settings Import Formats for information on import file syntax.

3. Click Next.

Setup Wizard: CLI Credentials

For more information about credential definitions, see Adding and Editing Device Credentials and its subsections.

NetMRI needs the ENABLE password to access configuration files on some devices and to run the Configuration Command Scripts and Perl scripts. To ensure easier identification of NetMRI actions, we recommend the creation of a username and password on your network equipment specifically for NetMRI.

Discovery of VRF configurations and VRF-aware devices requires CLI credentials.

NetMRI attempts site-specific username/passwords, in priority order, when first logging into a device via an SSH or telnet CLI connection. When NetMRI determines a password, it saves it as information specific to the device. Lacking a site-specific password, the system will try vendor default credentials in priority order, and use site-specific username/password combinations when trying to determine the new login credentials for a device. They will not be used for vendor default credential checks.

Enter the CLI credentials used by the devices specified in the Discovery Ranges and Static IPs steps. NetMRI will automatically determine which credentials are associated with each device.

To add an item, click New, enter the values for the Priority, Password Type (User or Enable), Username, and Password fields, and then click Add.
To edit an item, select the item, click Edit, change the values for the Priority, Password Type, Username, and Password fields, and then click Save.
To test an item, select the item, then click Test. In the test dialog, select the Hostname or IP, and then click Start.
To delete an item, select the item, click Delete, and then confirm the deletion.
To import credential data, click Import. In the dialog, click Browse to select the CSV file, then click Import. See the Adding and Editing Device Credentials topic for import file syntax.

2. Click Next.

Setup Wizard: SNMPv1/2 Credentials

For more information about credential definitions and NetMRI, see Adding and Editing Device Credentials and its subsections.

NetMRI uses SNMP read-only community strings to collect data for analysis. The system is pre-configured with several commonly used community strings taken from the list of default community strings configured by the device vendor at delivery time. If the community strings provided during NetMRI installation do not work for a given device, the system tries well-known vendor defaults. If a default community string works for the device, NetMRI begins normal SNMP processing and the "Weak Community String" issue is fired to alert to this condition.

If you are using the optional Compliance Module, the Default Credentials Report shows all vendor default community strings that were able to return SNMP data for a device.

Manually entered community strings are used first, in priority order, then the default community strings are tried in priority order if the Use Vendor Default Community Strings option is enabled in Settings icon –> Setup –> Collection and Groups –> Global tab –> Network Polling panel. Here, you can disable the use of the vendor default community strings for determination of which strings NetMRI can use. This is typically done in installations having tight security setups that have removed all vendor defaults from their installation. Note that this option does not prevent the vendor default from running.

Enter the SNMP v1/2 credentials used by any devices specified in the Discovery Ranges and Static IPs steps. NetMRI will automatically determine credentials associated with each device.
- To add an item, click New, fill in the Priority and Community fields above the table, then click Add.
- To edit an item, select the item, click Edit, change the fields above the table, then click Save.
- To test an item, select the item, then click Test. In the test dialog, select the Hostname or IP, then click Start.
- To delete an item, select the item, click Delete, then confirm the deletion.
- To import credential data, click Import. In the dialog, click Browse to select the CSV file, then click Import. See the Discovery Settings Import Formats topic for import file syntax.

2. Click Next.

For VRF-aware Juniper devices, to ensure device reachability for VRF configurations, prefix a second community string using the "@" character, such as @snmpnet, along with the normal community string (for example, snmpnet) you define for the device. For more information, see Vendor-Specific Requirements for Virtual Device Discovery.

Setup Wizard: SNMPv3 Credentials (Rare)

NetMRI may use SNMPv3 encrypted community strings to collect data for analysis if SNMPv3 credentials exist for any devices in the network. If SNMPv3 strings are provided for devices, v3 credentials are used before any SNMPv2 credentials.

You can also define SNMPv3 credentials within NetMRI Settings at a later time.

Enter the SNMP v3 credentials used by any devices specified in the Discovery Ranges and Static IPs steps. NetMRI will automatically determine which credentials are associated with each device.
- To add an item, click New, fill in the Priority and Community fields above the table along with the required Authentication and Privacy protocols and passwords, then click Add.
- To edit an item, select the item, click Edit, change the fields above the table, then click Save.
- To test an item, select the item, then click Test. In the test dialog, select the Hostname or IP, then click Start.
- To delete an item, select the item, click Delete, then confirm the deletion.
- To import credential data, click Import. In the dialog, click Browse to select the CSV file, then click Import. See the Adding and Editing Device Credentials topic for import file syntax.

2. Click Next.

Setup Wizard: Seed Routers

Definition of seed routers is highly recommended for IPv4 networks and is required for IPv6 networks. For more in-depth information, see the Adding Seed Routers topic.

NetMRI uses seed routers to quickly perform network discovery. Seed routers are also given priority (like static IP definitions) for determining which devices are counted toward NetMRI's license limits.

The table lists each defined seed router with its discovery status (as defined in the Network Explorer –> Discovery tab). By reviewing the discovery status for each seed router you can determine whether NetMRI should be able to discover the network successfully, or if there are possible configuration errors preventing network discovery, without having to wait to see what NetMRI finds.

Enter IP addresses for seed routers.
- Click New, enter the value in the Seed Router IP Address field, then click Add.
- Ensure that the network view chosen in the Wizard step Setup Wizard: Discovery Ranges is selected from the Network View drop-down list. For example, you may use the Network 1 network view.
Click Add or Add & Discover.
- To edit an item, select the item, click Edit, change the fields above the table, then click Save.
- To force immediate discovery, click Add & Discover.
- To delete an item, select the item, click Delete, then confirm the deletion.
- To import discovery setting data, click Import. In the dialog, click Browse to select the CSV file, then click Import. See Discovery Settings Import Formats for information on import file syntax. The imported file data are applied as a set of one or more Seed Routers. Ensure that the values are correct before importing.
Click Next.

Setup Wizard: Device Type Hints

Device hints help NetMRI's discovery engine locate specific types of network devices using IP address patterns and DNS name patterns. For instance, if most routers are found at an IP address ending with ".10", specifying "*.*.*.10", and associating the Router device type for an IP address hint, allows NetMRI to prioritize any discovered devices matching that hint, higher in its credential collection queue to help speed discovery. This hint is considered when NetMRI attempts to determine a device's type. You can also specify the device type itself — router, switch, switch-router, firewall, and numerous other choices.

Valid IP address patterns are either the numeric values of the octet, or an asterisk for any number of octets in the IP address. For device name matches, valid DNS characters and the asterisk character are valid definitions. For instance, rtr will match any device name with "rtr" in its definition.

Device hints are optional and used in helping to speed network discovery and to assist with the determination of device types absent other discovery data.

Enter information for device type hints, if necessary.
- To add an item, click New, select the type in the Device Type dropdown list, enter the required value in the IP Address field, then click Add.
- To edit an item, select the item, click Edit, change the fields above the table, then click Save.
- To delete an item, select the item, click Delete, then confirm the deletion.

2. Click Next.

Setup Wizard: Device Interrogation Techniques

This Wizard step defines the methods by which NetMRI polls network devices for information. Those protocols are based upon three methods: CLI, SNMP, and ARP.

Select desired interrogation options (descriptions are provided in the Wizard step, and in the Defining Group Data Collection Settings topic). Enable any options you consider applicable for your network.
Click Next.

Setup Wizard: Configuration Collection

This Wizard step defines the methods by which NetMRI obtains information such as routing tables, ARP tables, and device configuration files.

Select desired configuration collection options (descriptions are provided in the Wizard step). Under most circumstances, it should not be necessary to modify settings in this step.
Click Next.

Setup Wizard: Summary

The final step of the Setup Wizard summarizes the steps you have taken during setup.

Study the summary information in this final Wizard page before finishing the setup. For any item flagged as a possible configuration problem, click the Edit link to go directly to the corresponding step in the wizard to make changes. After making changes, return to the Summary step.
Click Finish.