Rockwell Automation FactoryTalk Network Manager Quick Start Guide

Quick Start Guide

FactoryTalk Network Manager Quick Start Guide

Important user information

Read this document and the documents listed in the additional resources section about installation, configuration, and operation of this equipment before you install, configure, operate, or maintain this product. Users are required to familiarize themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws, and standards.
Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are required to be carried out by suitably trained personnel in accordance with applicable code of practice. If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may be impaired.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation, Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous environment, which may lead to personal injury or death, property damage, or economic loss.
ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence
Important:
Labels may also be on or inside the equipment to provide specific precautions.
Identifies information that is critical for successful application and understanding of the product.
SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous voltage may be present.
BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may reach dangerous temperatures.
ARC FLASH HAZARD: Labels may be on or inside the equipment, for example, a motor control center, to alert people to potential Arc Flash. Arc Flash will cause severe injury or death. Wear proper Personal Protective Equipment (PPE). Follow ALL Regulatory requirements for safe work practices and for Personal Protective Equipment (PPE).
FactoryTalk Network Installation
First Time Setup
Supported Utilities
Manager

Table of contents

Chapter 1
System Requirements ........................................................................................................... 5
System Prerequisites ............................................................................................................. 6
Chapter 2
Install FactoryTalk Network Manager ............................................................................. 9
Chapter 3
FTNM Application ........................................................................................................... 11
Supported switches ............................................................................................................ 12
Switch configuration for optimal network discovery ................................................. 13
Network Discovery ............................................................................................................ 17
Purchase FactoryTalk Network Manager Node Licenses .......................................... 17
Configure a switch for a FactoryTalk Network Manager node license ................... 18
Upgrade an existing FactoryTalk Network Manager install ..................................... 20
Chapter 4
Reset Database Password .................................................................................................. 23
Reset System Admin Password ........................................................................................ 23
Restore Database Backup ................................................................................................. 24
Rockwell Automation Publication FTNM-QS001B-EN-E 3

System Requirements

Chapter 1
FactoryTalk Network Manager
FactoryTalk® Network Manager™ software provides insight into the design, performance, and health of an industrial automation network. Use FactoryTalk Network Manager to view your network topology and manage switch-level alarms as they happen. Monitor the health of network devices and reduce downtime to improve overall automation equipment efficiency.
FactoryTalk Network Manager:
Discovers both network and end devices including devices across a
controller backplane
Generates an overall topology and a device-centric view of plant floor assets
for increased network visibility
Captures managed switch level alarms and events in real-time for more
precise troubleshooting
Provides historical data and logging for analysis and resolution
Provides configuration backup and firmware revision management of
Stratix™ managed switches for simplified deployment and maintenance
See also
Installation on page 9
First Time Setup on page 11
Supported Utilities on page 23
Hardware requirements
The computer running FactoryTalk Network Manager must meet or exceed these specifications:
Rockwell Automation Publication FTNM-QS001B-EN-E 5
• Quad Core 1.8 Ghz CPU
• 8 GB RAM
• 50 GB Free storage space
Chapter 1
FactoryTalk Network Manager

System Prerequisites

Software requirements
FactoryTalk Network Manager requires this software on the host computer:
Operating system
64-bit versions of the Windows® and Windows Server® operating systems:
Windows 10
Windows 7 Enterprise or Professional with SP2
Windows Server 2012 R2
Windows Server 2016
Important:
32-bit versions of the Windows and Windows Server operating systems are not supported.
Administrator privileges
The user installing FactoryTalk Network Manager must have Windows
Administrator rights on the host computer.
Web browser
Google® Chrome™ browser version 50.0.2661.102 or later
Mozilla® Firefox® version 55.0.3 or later
This software is installed if not already present:
FactoryTalk Diagnostics version 6.11
FactoryTalk Activation Manager version 4.04
• .NET Framework 4.6
Verify all of these are true in your system environment before installing FactoryTalk Network Manager:
6 Rockwell Automation Publication FTNM-QS001B-EN-E
The user installing FactoryTalk Network Manager has Windows
Administrator rights on the host computer.
No other FTP server is running and listening on port 21
No other instance of PostgreSQL database is installed on the system
Device Manager is properly configured
The following ports are open for both inbound and outbound traffic on the
firewall:
TCP Ports 5432, 8088, 8443, 443, 80, 21(FTP), 50000-50050
FactoryTalk Network Manager
Chapter 1
UDP Port 30162 (SNMP)
Rockwell Automation Publication FTNM-QS001B-EN-E 7
Install FactoryTalk Network
Manager
Chapter 2
Installation
The FactoryTalk Network Manager installation file is available for download on the Rockwell Automation Product Compatibility and Download Center (PCDC) web site.
To install FactoryTalk Network Manager
1. Visit the Rockwell Automation Product Compatibility and Download
Center (PCDC) web site at
https://compatibility.rockwellautomation.com/Pages/home.aspx
2. Search "FactoryTalk Network Manager".
3. Select Download to download the FactoryTalk Network Manager
installation file to your system.
4. Locate and run the FactoryTalk Network Manager installation file.
5. In Language Selection, the system language is selected by default. If
necessary, select a different language, then select OK.
6. In Setup Wizard, select Next.
7. In License Agreement, select I Agree.
8. In Installation Directory, browse to select an installation directory, then
select Next to confirm the installation directory.
9. In Ready to Install, select Next to begin installing FactoryTalk Network
Manager.
10. (optional) If the installer detects that TCP port 8443 is already in use, an
error window appears. Enter an available port number, then click OK.
11. (optional) If the installer detects that TCP port 8088 is already in use, an
error window appears. Enter an available port number, then click OK.
Rockwell Automation Publication FTNM-QS001B-EN-E 9
12. (optional) If the installer detects that an existing third-party postgres file is
installed, an error window appears. Remove the existing postgres file, then click OK.
Chapter 2
Installation
13. (optional) FactoryTalk Network Manager Services may take up to 8
minutes to initialize. If shown a progress popup, wait for the initialization progress to complete.
14. When FactoryTalk Network Manager installation completes, a window
appears with:
• Username
• Password
• URL for the application
15. (optional) Select the check box to launch FactoryTalk Network Manager
after installation is complete.
16. Select Finish to close FactoryTalk Network Manager installation. If the
check box was selected, FactoryTalk Network Manager loads in the default browser.
See also
Upgrade an existing FactoryTalk Network Manager install on page 20
10 Rockwell Automation Publication FTNM-QS001B-EN-E

FTNM Application

Chapter 3
First Time Setup
FactoryTalk Network Manager is a server application and can be accessed by any client machine that can connect to the host system.
To connect to FactoryTalk Network Manager
1. On the client machine, open a browser window.
2. Enter the URL <https://a.b.c.d:portNum> provided at the end of the
FTNM install, where <a.b.c.d> is the IP address of the host system and portNum is the port number set during the install.
The default port number is 8443.
3. At the log in page, enter the Username and Password values provided at
completion of the application install or upgrade.
The default username and password are:
Username: systemadmin
Password: admin123
Rockwell Automation Publication FTNM-QS001B-EN-E 11
Chapter 3
First Time Setup

Supported switches

4. In Your Password, select the arrow to log in.
5. If this is the first login for this user, a new password is required. Enter a new
password, then select OK. Because a new password was defined, FactoryTalk Network Manager automatically logs out.
6. Reenter the login and password to enter the application.
7. When FactoryTalk Network Manager opens, the Operate > Dashboard
for Group Root page appears.
12 Rockwell Automation Publication FTNM-QS001B-EN-E
8. Learn the features of FactoryTalk Network Manager by selecting the
question (?) mark icon in the top right-hand corner of the screen, then selecting Guided Tours.
See also
Switch configuration for optimal network discovery on page 13
Network Discovery on page 17
FactoryTalk Network Manager supports:
Stratix 8000/8300 Modular Managed Ethernet Switches
Stratix 5800 Industrial Managed Ethernet Switches
Stratix 5700 Industrial Managed Ethernet Switches
First Time Setup
Chapter 3
Switch configuration for
ArmorStratix 5700 Industrial Ethernet Switches
Stratix 5410 Industrial Distribution Switches
Stratix 5400 Industrial Ethernet Switches
Stratix 2500 Lightly Managed Switches
FactoryTalk Network Manager supports Stratix S8000/8300, 5700, 5400, and 5410 switches running these IOS versions:
• IOS version 15.2(7)E1a
• IOS version 15.2(7)E
IOS version 15.2(6)E2A
• IOS version 15.2(6)E2
• IOS version 15.2(6)E1
• IOS version 15.2(6)E0a
• IOS version 15.2(5)E2
• IOS version 15.2(5)E1
optimal network discovery
• IOS version 15.2(5)E
• IOS version 15.2(4)EC2(ED)
• IOS version 15.2(4)EA5
• IOS version 15.2(4)EA2
• IOS version 15.2(4)EA1
• IOS version 15.2(3)E3
• IOS version 15.2(3)E2
FactoryTalk Network Manager supports Stratix S2500 switches running these SPA versions:
• SPA 1.6
• SPA 1.7.0
• SPA 1.8.0
SNMP enabled switches must be configured for optimal network discovery. This includes Stratix managed switches. Stratix switches can be configured for SNMP v2 or SNMP v3.
Rockwell Automation Publication FTNM-QS001B-EN-E 13
Chapter 3
First Time Setup
Tip:
It is recommended to perform express setup on a Stratix switch prior to making these changes.
Configure SNMP v2c via Device Manager for Stratix 5400/5410, Stratix
5700, Stratix 8000/8300, and Armor Stratix 5700:
1. In Device Manager, navigate to Configure SNMP.
2. Select Enable SNMP, then select Submit.
3. Under Community Strings, select Add, then enter the shared community
string.
4. Select in RO/RW, select Read-Only (RO), then select OK.
Tip:
For more information on SNMP, access the
1783-UM007K .
Stratix User Manual Publication
Configure SNMP v2c via CLI for Stratix 5400/5410, Stratix 5700, Stratix
8000/8300, Armor Stratix 5700, and Stratix 5800:
To enable SNMP v2 discovery, open the command-line interface to the
supported device. Type these commands, ignoring lines starting with # symbols:
enable
14 Rockwell Automation Publication FTNM-QS001B-EN-E
First Time Setup
Chapter 3
configure terminal # Device Prerequisite Configuration for SNMPv2 snmp-server community <read-community> RO exit
Configure SNMP v3 via CLI for Stratix 5400/5410, Stratix 5700, Stratix 8000/8300, Armor Stratix 5700, and Stratix 5800:
To enable SNMP v3 discovery, open the command-line interface to the
supported device. Type these commands, ignoring lines starting with # symbols:
enable configure terminal
# <mode> values are [noauth, auth, priv]: # noauth: authenticate using only username. # auth: authenticate using md5 or sha algorithm. # priv: authenticate using md5 or sha algorithm and aes
128 or des encryption. snmp-server group <group-name> v3 <mode>
# <authentication-type> values are [sha, md5], use only if using auth or priv snmp <mode>.
# <privacy-type> values are [aes 128, des], use only if using priv snmp <mode>.
# <authentication-password> sets the string that enables the agent to receive packets from the host.
# <privacy-password> sets the privacy user password. Must not exceed 64 characters.
snmp-server user <user-name> <group-name> v3 auth <authentication-type> <authentication-password> priv <privacy-type> <privacy-password>
exit
After configuring the SNMP server, enter one of the UNLICENSED to LICENSED State configurations.
For more information on SNMP v3 configuration, see the
SNMPv3
Community MIB Support document available from Cisco.
To configure remote security above and beyond user and group authentication requires implementing Access Control Lists (ACLs). For more information on implementing Access Control Lists, see the
Configuring Network Security with ACLs document
available from Cisco.
Rockwell Automation Publication FTNM-QS001B-EN-E 15
Chapter 3
First Time Setup
Configure SNMP v2c via Device Manager for Stratix S2500 Switch
1. Log in to the S2500 Device Manager.
2. Leave the Username field blank and enter switch as the Password.
3. Select Admin > Users.
4. Create a Device Access User and use the same user in the Access Profile
on the system.
5. Configure SNMP community string for Read Only (ro):
6. Select Configure > SNMP. Click OK in the pop-up window to confirm
enabling SNMP.
7. Select the check box to enable SNMP Mode globally. Select Submit.
8. Select Community Strings tab. Add a public Community String with read
only access. (By default, this is a Read Only (ro) string).
9. Select Submit.
Configure SNMP v3 via Device Manager for Stratix S2500 Switch
1. Log in to the S2500 Device Manager.
2. Leave the Username field blank and enter switch as the Password.
3. Select Admin > Users.
4. Create a Device Access User and use the same user in the Access Profile
on the system.
5. Configure SNMP community string for Read Only (ro):
6. Select Configure > SNMP. Click OK in the pop-up window to confirm
enabling SNMP.
7. Select the check box to enable SNMP Mode globally. Select Submit.
8. Select Community Strings tab. Add a public Community String with read
only access. (By default, this is a Read Only (ro) string).
16 Rockwell Automation Publication FTNM-QS001B-EN-E
First Time Setup
Chapter 3

Network Discovery

Purchase FactoryTalk
9. Select the Users tab, then add an snmpv3 user with name, security level,
authentication protocol, authentication password, privacy protocol, and privacy password. Select OK.
10. Select the Group tab, select the created user, and specify the group name.
Select OK.
11. Select Submit.
See also
Network Manager Node Licenses
Network Discovery on page 17
FactoryTalk Network Manager discovers all devices on the network and presents them graphically in the Operate > Topology screen.
For best network discovery results, complete the switch configuration before performing network discovery.
To perform Network Discovery
Create a Discovery Profile and an Access Profile. Use the Create Device
Access Profile and Discover Assets guided tours for step by step
instructions.
See also
Switch configuration for optimal network discovery on page 13
FactoryTalk Network Manager basic features are available at no charge. FactoryTalk Network Manager does not require a license to download. Some features such as Managed Switch View, switch port parameter configuration, and switch configuration backups are enabled with a node license. A node license is applied to a licensable device (also known as a node). Licenses are available as a 1
year subscription.
Rockwell Automation Publication FTNM-QS001B-EN-E 17
To purchase FactoryTalk Network Manager Node Licenses:
1. Visit https://portal.rockwellsoftware.com.
2. Log in or register as a new user.
3. Locate FactoryTalk Network Manager, then select Continue.
4. Select a package, support level, and quantity.
5. Select Add to Cart.
Chapter 3
First Time Setup
Configure a switch for a
6. From the shopping cart, select Checkout, then complete the checkout and
billing process.
7. When you receive the Serial Number and Product Key, open FactoryTalk
Activation Manager on the FactoryTalk Network Manager host computer.
8. Select Get New Activations.
9. Enter the Serial Number and Product Key, then select Validate Activation.
10. Enter the number of licenses to download to the host computer, then select
Download activation.
11. Once complete, select Find Available Activations, then select Refresh.
The activation is now listed under Available Activations.
For troubleshooting or more assistance with FactoryTalk Activation Manager, view FactoryTalk Activation Manager Help.
See also
FactoryTalk Network Manager node license
Configure a switch for a FactoryTalk Network Manager node license page 18
Switches that can be licensed (also known as nodes) must be configured to communicate with FactoryTalk Network Manager and accept a license. Configuration may occur using the command line, Device Manager, or WebUI.
Follow these steps to update the switch configuration so that FactoryTalk Network Manager can transition a switch from the UNLICENSED to LICENSED state to access additional features.
Configure Telnet/SSH for all supported switches via Device Manager:
1. Select Admin > Access Management.
2. Check the box to enable SSH for secure communications over HTTPS or
Telnet for HTTP.
Configure Stratix 5400/5410, Stratix 5700, Stratix 8000/8300, Armor Stratix
5700, and Stratix 5800 switches for node licenses via CLI:
Using TELNET/HTTP, to transition the supported device from
UNLICENSED to LICENSED state, open the command-line interface to the supported device. Type these commands, ignoring lines starting with # symbols:
on
18 Rockwell Automation Publication FTNM-QS001B-EN-E
# Configure user account with privilege level 15
First Time Setup
Chapter 3
# This should match the device access username and password specified in the system Access Profile
username <username> privilege 15 password 0 <password> # Configure AAA aaa new-model aaa authentication login default local aaa authorization exec default local # Configure HTTP server ip http server ip http authentication aaa login-authentication default # Configure VTY line vty 0 15 login authentication default transport input all transport output all
Using SSH/HTTPS, to transition the supported device from
UNLICENSED to LICENSED state, open the command-line interface to the supported device. Type these commands, ignoring lines starting with # symbols:
# Configure user account with privilege level 15 # This should match the device access username & password
specified in the system Access Profile username <username> privilege 15 password 0 <password>
# Configure AAA aaa new-model aaa authentication login default local aaa authorization exec default local
# Configure SSH server ip ssh version 2
# Configure HTTPS server ip http secure-server ip http authentication aaa login-authentication default ip http secure-ciphersuite aes-256-cbc-sha
# Configure VTY line vty 0 15 login authentication default transport input all transport output all
Rockwell Automation Publication FTNM-QS001B-EN-E 19
Chapter 3
First Time Setup
Upgrade an existing
See also
FactoryTalk Network Manager install
Purchase FactoryTalk Network Manager Node Licenses on page 17
The FactoryTalk Network Manager installation file is available for download on
the Rockwell Automation Product Compatibility and Download Center
(PCDC) web site.
To upgrade an existing FactoryTalk Network Manager install
1. Visit the Rockwell Automation Product Compatibility and Download
Center (PCDC) web site at
https://compatibility.rockwellautomation.com/Pages/home.aspx
2. Search "FactoryTalk Network Manager".
3. Select Download to download the FactoryTalk Network Manager
installation file to your system.
4. Locate and run the FactoryTalk Network Manager installation file.
5. In Language Selection, the system language is selected by default. If
necessary, select a different language, then select OK.
6. A pop up window appears, asking you to confirm you want to upgrade your
current FTNM application to a new version. Click Yes to upgrade. Click No to cancel the upgrade.
7. In Setup Wizard, select Next.
8. In License Agreement, select I Agree.
9. In Ready to Install, select Next to begin installing FactoryTalk Network
Manager.
10. (optional) FactoryTalk Network Manager Services may take up to 8
minutes to initialize. If shown a progress popup, wait for the initialization progress to complete.
11. When FactoryTalk Network Manager installation completes, a window
appears with:
URL for the application
Important:
Be sure to record this information before you exit the screen.
20 Rockwell Automation Publication FTNM-QS001B-EN-E
12. (optional) Select the check box to launch FactoryTalk Network Manager
after installation is complete.
First Time Setup
Chapter 3
13. Select Finish to close FactoryTalk Network Manager installation. If the
check box was selected, FactoryTalk Network Manager loads in the default browser.
See also
Install FactoryTalk Network Manager on page 9
Rockwell Automation Publication FTNM-QS001B-EN-E 21

Reset Database Password

Reset System Admin
Chapter 4
Supported Utilities
FTNM supports these three utilities:
Reset Database Password
• Reset System Admin Password
• Restore Database Backup
To reset the database password
Password
1. In Windows, run the
reset the FTNM Database password.
2. Select Reset Database Password. A window appears asking you to confirm
that you want to reset the database password.
3. Select Yes, then click Next.
4. At the prompt, enter a new database password and confirm that entry.
5. Select Save to save the password.
See also

Reset System Admin Password on page 23

Restore Database Backup on page 24
As a System Admin, you can reset the password when you are locked out of
FTNM because you have either forgotten your credentials or your credentials have
expired.
To reset the system admin password
ftnm-resetdatabasepassword.exe utility to
Rockwell Automation Publication FTNM-QS001B-EN-E 23
1. In Windows, run the
FTNM System Admin password.
2. Select Reset System Admin Password.
3. In the password change confirmation panel, click Next.
ftnm-resetpassword.exe utility to reset the
Chapter 4
Supported Utilities

Restore Database Backup

4. In Reset System Admin Password, enter the new password in both the
Enter Password and Confirm Password fields.
Tip:
For guidelines on creating FactoryTalk Network Manager passwords, select the i icon next to the New Password field. A panel with password requirements displays.
5. Select Next.
6. Select Save to save the password.
See also
Reset Database Password on page 23
Restore Database Backup on page 24
To restore an FTNM database from a previous FTNM backup, you must have
administrative rights to the Windows location where the FTNM application is installed.
Important:
Restoring from backup overwrites any data currently present in FactoryTalk Network Manager.
To restore a database backup
1. In Windows, run the
ftnm-restore.exe utility to restore an FTNM
database from a previous FTNM database backup.
2. Select Restore.
3. Select Yes to confirm.
24 Rockwell Automation Publication FTNM-QS001B-EN-E
Supported Utilities
Chapter 4
4. Enter or browse to the location of the database backup file, then select
Next.
See also
Reset Database Password on page 23
Reset System Admin Password on page 23
Rockwell Automation Publication FTNM-QS001B-EN-E 25
Rockwell Automation support
Use the following resources to access support information.
Technical Support Center
Knowledgebase Articles, How-to Videos, FAQs,
https://rockwellautomation.custhelp.com
Chat, User Forums, and Product Notification Updates
Local Technical Support Phone Numbers
Direct Dial Codes
Locate the phone number for your country. http://www.rockwellautomation.com/global/support/get-support-now.page
Find the Direct Dial Code for your product. Use
http://www.rockwellautomation.com/global/support/direct-dial.page
the code to route your call directly to a technical support engineer.
Literature Library
Installation Instructions, Manuals, Brochures,
http://www.rockwellautomation.com/global/literature-library/overview.page
and Technical Data.
Product Compatibility and Download Center (PCDC)
Get help determining how products interact, check features and capabilities, and find
http://www.rockwellautomation.com/global/support/pcdc.page
associated firmware.
Documentation feedback
Your comments will help us serve your documentation needs better. If you have any suggestions on how to improve this document, complete the How Are We Doing? form at http://literature.rockwellautomation.com/idc/groups/literature/documents/du/ra-du002_-en-e.pdf
.
Rockwell Automation maintains current product environmental information on its website at http://www.rockwellautomation.com/rockwellautomation/ab out-us/sustainability-ethics/product-environmental-compliance. page.
Allen-Bradley, Rockwell Automation, and Rockwell Software are trademarks of Rockwell Automation, Inc.
Trademarks not belonging to Rockwell Automation are property of their respective companies.
Rockwell Automation Publication FTNM-QS001B-EN-E
Supersedes Publication FTNM-QS001A-EN-E Copyright © 2020 Rockwell Autom ation Technologies, Inc. All Rights Reserved. Printed in the U.S.A.
Loading...