Document toolboxDocument toolbox

NetMRI Advanced Settings

NetMRI Advanced Settings (located on the Settings icon > General Settings > Advanced Settings page) provides a multi-page grouping of configuration settings for many NetMRI features. Advanced Settings are designed so NetMRI users can run a fully functioning system without changing any default settings in this category.

To modify items in Advanced Settings, click the Action icon for any setting and choose Edit. To reset the Advanced Setting to its defaults, choose Reset.

Settings GroupDescription
Configuration Management

Job Self Approval: Allows or disables the ability of job authors to approve the jobs they create.

Job Requires User Credentials: Defines when job script execution needs command-line credentials for the devices against which the job runs.

Concurrent Jobs: This is the number of maximum concurrent device sessions per job. 20 is the default value for regular performance. For IB-4000 and VMs with at least 64Gb RAM, you can set this value up to 120. For other units, it cannot exceed the default value.

Config Syslog Change Filter Usernames: This is a comma-separated list of usernames to ignore for config file changes, reported by syslog messages.

Fully Qualified Domain Name or IP: This is the FQDN or IP to use in links instead of Management IP.

Data Collection

A group of settings to determine how NetMRI reacts to large data sets.

ARP Aggregate Limit: The maximum number of ARP records with the same MAC address that can be collected from one device. If their number is equal to or exceeds the specified limit, all records with that MAC address are excluded from the ARP table of the device.

Route Limit: Defines the threshold for NetMRI to switch to CLI data collection for the collection of large routing tables (typically but not exclusively compiled by BGP4 routers with connections to the external Internet). Routing table collection can also be enabled or disabled.

Route Collection: Allows enabling or disabling route table collection. Note that disabling route table collection can negatively affect discovery and will prevent some network analysis, including layer 3 topology, from being performed.

CatOS Configuration Command: Allows you to specify show config or show config all when collecting switch configurations.

Interface Live Viewer Polling Interval and Interface Live Viewer Poller Limit: These settings define the polling interval in seconds, and limit the number of concurrent polling instances triggered by Interface Live Viewer.

Force SSH v1: This setting forces SSH CLI access to use SSH v1.

Enter Enable Mode: Determines whether the Configuration Management and Job Management systems in NetMRI should enter the Enable mode on managed devices before entering device commands.

Extended Device Discovery Support: This is a Cisco Discovery Service setting that allows some extended levels of SNMP data to be gathered by CDS from Cisco devices. Off by default, this setting potentially improves download times when the CDS user requests the data collection for a report.

SNMPv1 Data Collection Fallback: This setting enables or disables the use of SNMPv1 if the device does not support SNMPv2c for any reason.

Collect Virtual Device Context (VDC) Data: This is a setting for virtual device context data collection. For more information, see Viewing Virtual Device Contexts.

Maximum SNMP Table Rows: Limits the number of SNMP table rows collected from the device.

DNS Lookup Options: Determines what type of devices the DNS processor operates on.

DNS Lookup Capacity ThrottleDetermines what percentage of available capacity the DNS processor operates at.

CPU Utilization: Defines the method for CPU utilization calculation for the device CPU utilization issue. This can be "max" or "average". The default value is "max". That means the maximum value from all CPU utilization values is used as the indicator for the device CPU utilization issue. If the "average" method is used, the average value from all CPU utilization values is used as the indicator for the device CPU utilization issue.

Polling Frequency Modifier: This is the coefficient that allows you to slow down or speed up the device polling frequency relative to the default NetMRI setting. This setting applies globally. For more information, see Setting Polling Frequency for a Device Group.

Note

Setting a custom polling frequency may affect performance. High modifier coefficient results in polling performed more frequently, so the NetMRI unit may be more busy than usual.

Cisco Model NamePermits models name collection from EntPhysical table for some Cisco devices.

Deduplication

Settings related to the deduplication of devices discovered from multiple collectors.

Enable the load balancer: Turns on the load balancing feature for moving devices from highly-loaded collectors to less-loaded collectors.

Minimum capacity utilization: Sets the minimum percentage of devices, from the collector's total capacity in terms of managed devices, at which moving devices from such collectors is allowed.

Minimum capacity utilization difference: Sets the minimum difference, in percentage, in the current device's utilization by collectors, at which devices can be moved to the less loaded collector.

Timeout for choosing the collector: Sets the maximum allowable time, in hours, for choosing the best management collector for the device.

For more information, see Deduplication and Load Balancing Settings.

Discovery

Several Discovery settings that affect how devices are collected in the NetMRI database.

Device Expiration in Days: Governs the "stickiness" of device records in the database.

Device Name Priority: Allows the setting of DNS or SNMP as the primary protocol for naming devices when added to the database.

Ping Sweep Frequency: Determines the elapsed time period, in hours, between ping sweeps within IP address ranges (default value 24).

Discovery Ignore Duplicate MACs: Enabling this setting forces NetMRI to delete pre-existing records for a switch identified by a specific MAC address should the device change its assigned IP. Discovery Truncate IP History prevents IPs that aren't assigned to interfaces from being assigned in NetMRI to particular devices, which preserves the functions of the Cisco ip alias command where needed.

Discovery Truncate IP History: When enabled NetMRI will no longer attempt to associate IP addresses to devices for IP addresses that aren't assigned to interfaces. This is typically found with the use of the Cisco "ip alias" command and would mean that those IP alias addresses will show up as distinct devices.

SNMPv1/SNMPv2c Discovery Version: Setting allows a choice between three options: Use SNMPv1 for credential discovery; Use SNMPv2c for credential discovery; or Use both SNMPv2c and SNMPv1 for credential discovery. For more information, see Choosing SNMP Protocol Preferences.

Discovery Status PrecedenceSets Discovery Status Precedence.

End Host Expiration Hours: The number of hours an end host must be off the network before it is removed from the database.

Poll ARP with SPMIncludes ARP tables in Switch Port Management polling schedules.

TCP Scan TechniqueSets the TCP scan technique.

Ping TimeoutSets the ping timeout in milliseconds.

Ping RetriesSets the number of ping retries.

MAC Address Exclusion ListA comma-delimited list of MAC addresses or OUIs to exclude from the Discovery, Neighbor, and Forwarding processes.

Syslog Discover Now FilterFilters to exclude DHCPACK syslog messages without sysname values of 'autoconfig'.

Way to determine duplicates: Sets the way to determine whether found devices are duplicates or not using major device system variables or chassis/serial number.

Low-Rank Device Expiration Days: Sets the low-rank device expiration time in days.

SDN Engine MAX Pool Size: Sets the maximum number of SDN Engine worker processes.

IPAM Sync

Exclude Devices with Unmapped VRFs. When the setting is turned on, it excludes VRF-aware devices and related subnets from IPAM Sync in the following cases:

  • The CLI credentials of the device are not guessed.
  • The VRF data of the device is not collected.
  • The VRF of the device is not mapped to a network view.
Job Management

DIS max timeout: The maximum allowable timeout for the DIS session, in hours.

Max Discovery Processes: The maximum number of DiscoverNow processes.

NIOS Administration

NIOS User NameName of a Grid administrator with privileges sufficient to validate DHCP servers found by NetMRI discovery.

NIOS PasswordPassword of the Grid administrator account.

Notification

Syslog FacilityControls the facility used to tag syslog notifications. For example, log audit, log alert, kernel message, mail system, and so on.

Log All CLI SessionsSpecifies whether or not to log all CLI sessions to the Device Audit Log.

Prune CLI Session DurationSpecifies the retention time to keep data in the Device CLI Audit Log, in days.

Performance Dashboard

Show Advanced Categories: If this is set to false then only the standard performance dashboard categories will be displayed. If set to true then standard as well as advanced performance dashboard categories will be displayed.

Add Performance tables to the backup: Includes performance dashboard tables to the database backup.

Policy CompliancePolicy Rule Timeout: Timeout for the current processing policy rule to move to the next policy rule (in seconds).
Reports

Concurrent Running Reports: Limits the total number of simultaneous running reports on the system. The default is 2 and should be retained in most cases.

SecurityHide Password FieldsAllows hiding CLI credentials passwords. Note that choosing to hide passwords permanently disables this setting and requires contacting technical support for re-enabling the setting.
Security ControlHit Count PeriodThe amount of time in days to be used in calculating the hit count for a device filter.
Switch Port Management

Convert Free Ports to Available: Number of days a port has to be Free before it becomes Available.

ARP Cache Refresh Period: Sets the refresh period for ARP cache (in seconds).

ARP Cache Refresh Device History: Sets the ARP cache refresh device history (in days). This enables pinging of devices from older tables compiled from previous polling days, prior to the most recently compiled End Host data tables. The default value is 14 days and the minimum value is one day. This feature helps rediscover devices that move off the managed network and eventually rejoin, such as laptops returning from travel.

ARP Cache Refresh Ignore Discovery RangesIgnores discovery ranges during the ARP cache refresh. This helps to optimize the discovery of end hosts by disabling pinging of such devices outside of specified discovery ranges. By default, this feature is set to False, which means that devices outside the configured discovery ranges will be pinged by NetMRI. Set this value to True if deemed necessary.

Include voice vlans in DownstreamHubOrSwitch issue analysisIncludes voice VLANs in the issue analysis.

System

Slow Query Length: Controls the time a query needs to take before it is logged to the slow query log.

Maximum Number of Database Archives: Sets the number of database archives to keep.

Maximum JVM Memory: Max amount of memory to use for collection. Using 0 in this field will calculate the value based on system memory.

Maximum JVM Configuration Server Memory: Max memory setting for the configuration server. Using 0 in this field will calculate the value based on system memory.

Maximum JVM Report Server Memory: Max memory setting for the report server. Using 0 in this field will calculate the value based on system memory.

Note

The JVM server settings that default to zero and should only be modified if the NetMRI appliance is a VM running under VMware.

IPAM Sync RetriesThis setting determines how many times the NIOS IPAM Sync operation will retry in the event of an intermittent failure. After the number of retries is exceeded, the operation will not be attempted again until the next scheduled sync, or the Sync Now button is pressed. Enter 0 to disable retries.

IPAM Sync Retry IntervalThis setting determines how many seconds the NIOS IPAM Sync operation will wait between retries in the event of an intermittent failure.

Synchronization TimeoutInactivity timeout value for rsync (in seconds).

System Message Period: The number of days of system messages to display. Lower values improve the page performance.

Firewall Access Module Setting: Controls the standard Firewall Access Module feature setting. The initial setting is "default".

Note

If you set this value to "Permanently disable" and then wish to reverse it, contact Infoblox Technical Support.

Block Device Prompt access: Prohibits the use of device prompts (shell) through the web UI and Admin Shell. You may need this to prevent access to your devices from anywhere except your jump hostsIf you are running NetMRI in redundant mode, contact support to disable this setting. Once disabled, this setting can only be reverted by the Infoblox Support team.

Perform reboot after Weekly Maintenance: Performs system reboot after Weekly Maintenance.

History Table Timeout: An interval in hours at which the history table cache is cleared.

User Administration

Password Expiration: The number of days a password is valid before it expires. Using 0 in this field will cause all passwords to never expire.

Consecutive Failed Login Limit: The number of successive failed login attempts allowed for any user account before the NetMRI UI account is locked. The number of successive failed login attempts is set to zero by default. Infoblox recommends setting Consecutive Failed Login Limit to a nonzero number. Note that the user is only locked out of their NetMRI UI account but can still log in to the administrative shell with the correct password. For more information, see the description of the Lockout Duration feature below.

Lockout Duration: The number of minutes that a locked-out NetMRI UI account remains locked out before automatically becoming unlocked. The lockout duration is set to zero by default, which indicates that there is no lockout time period. Infoblox recommends setting the lockout duration to 15 minutes or more.

Password Length: The minimum password length for access to the NetMRI.

Password Numeric: Controls the requirement that a password contain at least one of both an alpha and numeric character in passwords.

Password Non-Alphanumeric: Controls the requirement that a password contain at least one special character.

Password Mixed Case: Controls the requirement that a password contain at least one upper case character and at least one lower case character.

Send audit to syslog: Sends all audit log entries to the syslog.

For more information, see Advanced User Administration Settings.

User Interface

Password Banner: Controls the message displayed on the login page.

Minimum Table Size: Controls the default number of rows displayed on most NetMRI tables.

Maximum Visualization Objects: The number of objects (nodes + edges) that the Visualization will attempt to render before stopping so as to not cause memory problems with your browser.

Inactivity Timer: The amount of time in minutes for which no activity from the NetMRI UI or administrative shell results in an automatic logout of the user.

Long Running Request Timer: The amount of time in seconds before prompting the user to cancel or wait for a long-running data request.

Device Picker Offer Limit: Controls the number of matching devices offered by the Device Picker.

Hide Empty Device Groups: Hides the device groups that have no members.

Custom views are visible for creating user only: Defines if custom views are visible for creating user only.