Recently, we’ve heard from Solarwinds Network Topology Mapper (NTM) users with large networks, that performance during the discovery process is a bit sluggish. How can we improve it? To answer that question, one must understand how the NTM discovery engine works and what goes on behind the scenes before displaying the network diagram.
NTM includes a sophisticated multi-level discovery engine, which uses a combination of protocols and goes through 3 distinct phases in order to discover every node on a network and to produce a highly accurate map.
1. The Node Detection Phase: Uses a combination of ICMP, SNMP and WMI Protocols to detect devices.
2. The Polling Phase: Uses a Poller to collect connection data using CDP, LLDP, Bridge table and also STP to detect the role of each node.
3. The Calculation Phase: Uses complex algorithm to calculate connectivity between nodes.
The completion of these 3 phases of the discovery process can be slowed down by a number of factors. Primarily these:
The size of the network being scanned
The choice of node detection protocols used for the scan
The number of hops specified for the scan
Where the scan is being performed from
With all of that in mind, we have compiled the following recommendations to help you improve the performance of NTM as it discovers devices on your network.
1. Think small – The tendency of most users of NTM is to try discovering their entire network on the 1st scan. The drawback here is, if you have a network with 1200+ nodes you are in for a long wait and at the end of it, the map might look very cluttered. The smaller the range you define to scan, the faster you’ll receive the results and the easier it will be to interpret them. We recommend discovering Class C networks in at least 2 separate scans.
2. Credentials priority - The credentials most commonly used should be at the top of the list, be it SNMP, WMI or VMWare. Performing this simple activity will help enhance the discovery. Also, note that the more credentials there are the longer discovery will take so don’t use any unnecessary credentials.
3. Zero Hop Discovery - As you work your way through the discovery wizard, you will notice that you are prompted to provide the number of hops you wish to use during the scan. We recommend using 0 hops unless you are not finding all of your expected devices. The more hops the scan goes through, the longer it takes and 0 usually gets them all.
4. Scanning Location – Scanning with NTM from within the same Management VLAN of your network can improve the speed of the discovery process significantly. This will reduce polling timeouts compared to scanning over VPN, dial-up or routing through another network.
5. Evening/Weekend Scanning - If you manage a very large network or you see your network growing in the coming months, it would be best to run the discovery process during evening hours or on weekends and have your map ready for Monday morning. The key to this is making sure you have entered the proper credentials into the discovery wizard. Make sure to test your credentials before beginning the discovery process and leaving the building.
And that's pretty much sums it up. Hope that it makes the discovery & mapping of your network a little bit easier.