How do you document a network?

They do have very nice diagram programs out there with network discovery ability, which will detect and "plot" your network devices for you and then you just fill in the information and clean it up so it looks "pretty".

But if you are working with tight budgets like me we need to improvise. I collect my network device information manual (ie. pad and paper) going to each device I write down the critical stats as I call it. This varies on the device.

Example:

1) Record exact model number and s/n for each and every device.

2) As applicable sumarize any added or optional features you/your company purchased/installed for the device. The idea is you need accurate information of the configuration and capabilities each device ACTUALLY has, not just what it COULD do. So if you have a Cisco Switch with an optional fiber GBIC module installed, note that in the documentation.

3) On switches/routers document any static IP addresses they have and note the IOS versions, on servers document their role, their OS, their patch level (ie. Service Pack 928192) and their IP addresses.

After data is collected, I would fire up Visio and begin the diagram process. I make it look "pretty" for both the "awe" value it has on the exec types and to make it easy for me to read.

You document the "pipes" each server takes, noting the connection speed, the duplex and any special information you feel its pertinent. The importance is don't make up stuff just to make it look nice, don't draw lines showing connections if that's not how it really connects in reality.

When someone looks at your documentation they should be able to easily figure out:

1) The topology of your network

2) The bandwidth of your network

3) The class of equipment you have

4) The roles of your servers

5) Identify special areas of your network (IE. if segments of your network are on VLANS, this should be illustrated on your documentation)

6) Security infrastructure...your firewalls, DMZ, proxy servers, gateway...all this stuff should be easy to deduce from looking at your documentation.

Personally, I also note warranty information in my documentation too.

I have my diagram and then there are follow pages as needed to summarize information.

But like I said, I'm sure places with deeper pockets use "fancy" software packages that prepare network documentation for you.

Hi DW,

The first place i start with is a proper network diagram. If you don't have an NMC that will automatically generate it try something like MS Visio. A soft version is always easy to update and you don't need to keep re-inventing the wheel!.
(Diagrams are great for explaing to others how your network is structured).

The rest is up to you but uf you have a network that is constantly changing configuration then its very hard to keep a manual text system updated. Try using something like a spreadsheet layout to record more static details, and keep soft back-ups of equipment configurations for contingencies and disasters!.

Hope this gives youa few pointers.

and if you have to comply with HIPAA, I suggest you start your internet search with HIPAA as a keyword. Learn what is required . I'll give you a hint. There are 3 categories you must address in your plan. Administrative Safeguard, Physical Safeguards and Technical Safeguard. Under these categories, there are specific areas that you must address. Even if only 1 computer is used and only 1 user, you still have to address all areas.

As far as general network documentation, if your the network administrator, then during your job, you will come across instances that you wish you had a book which you can refer to to know what is what. That should be your starting point [baseline] on documentation. After that, any changes, and that means any changes need to included as change pages to your baseline set.

If your running Active Directory, your going to want a complete set of documentation from your DNS zones to your trust relationships. From your Domain structure and delegated administrative roles to your OU structure for users and computers. From that you can create your GPO configuration documentation and templates used.

Think you get the point.

You may want to run a discovery tool of some sort on your network. Find one that will tell you want ports machines are plugged into, one that can do WMI, uses both an agent and can run agentless (ala WMI), and does multiple versions of SNMP.

With that being said, you probably want to look into what you need to know as well. Do you need to know all your clients, servers, routers, switches, hubs, printers, etc or do you just need clients and servers? Also keep in mind disconnected clients.

With that being said are you using something like LanDesk to manage your machines? You can at least get an inventory diagram and build from there.