Admin

Site View > Admin
Label	Description
Operations
Discover Nodes	Use this menu to set an IP address range to discover managed devices, and set a discovery timeout.
Devices Firmware Upgrade	Use this menu to view device firmware upgrade schedules.
Backup Time Frame Setting	Use this menu to set the daily backup time for all devices which are managed by the CNC.
Delete Nodes	Use this menu to stop selected devices being managed by the CNC.
Push CLI Commands	Use this menu to issue commands to devices that support a Command Line Interface (CLI).
Monitor Setting	Use this menu to set a polling interval for all devices connected through this CNA. The polling interval is the time within which a device must reply to a poll.
Authentication & Service Setting
SNMP Settings	Use this menu to set the SNMP community name for a group of devices identified by IP addresses.
User Name/Password	Use this menu to set an IP address range from which a user can log in with their user name and password.
Service Settings	Use this menu to configure FTP, SSH, HTTP, and HTTPs ports for managed devices in specified IP address range(s).
System
Thresholds	Use this menu to set trigger thresholds for events.
Mail Groups	Use this menu to set up mail groups for event email notifications.
Notifications	Use this menu to set up event notifications.
Remote Access
Remote Access Summary	Use this menu to view all managed devices that can be managed directly and related events.
IP Address White List	Use this menu to configure trusted WAN IP addresses that can access managed devices. If your trusted computer has more than one WAN address, enter them manually here.
On/Off settings
Notify me if any notifications	Select this to receive emails about events that occurred on managed devices, then click Update.

Site View > Admin > Discover Nodes > Setting
Label	Description
Configure Discovery
Discover	Click this after you configure the settings below in order for the CNC to search for new managed devices. This may take several minutes.
Cancel	Click this to abort discovery.
Progress	The progress bar displays the status of the discovery.
General settings
Discovery Mode	Fast discovery mode is the default mode that gets quick responses from devices in non-complex network environments. Use Standard discovery mode if you believe there are missing devices in Discovery Result. This may happen in more complex networks with layer-2+, layer-3 devices or multiple subnets.
Timeout (seconds)	This displays how many seconds the CNC will wait for a reply from a managed device after polling it using ICMP and SNMP.
Retry (times)	This displays how many times the CNC will poll a device before it is deemed offline (an outage).
Action	Click the icon to configure the Discovery Mode, Timeout and Retry settings.
Specifics	Use this section to configure specific, non-contiguous IP addresses that can used for discovering managed devices.
Add New	Click this, specify an IPv4 IP address, then click OK to add an IP address for the managed device.
IP Address	This displays the IP addresses configured for managed devices.
Action	Click the icon next to an entry, then click OK to remove this specific IP address for discovering managed devices.
Include Ranges	Use this section to configure contiguous IP addresses that can used for discovering managed devices.
Add New	Click this, specify an IPv4 beginning (Begin IP Address) and end IP address (End IP Address) in a range of contiguous IP addresses, then click OK to add IP addresses for a group of managed devices.
Action	Click the icon next to an entry, then click OK to remove this specific IP address range for discovering managed devices.
Exclude Ranges	Use this section to configure contiguous IP addresses to be ignored when discovering managed devices.
Add New	Click this, specify an IPv4 beginning (Begin IP Address) and end IP address (End IP Address) in a range of contiguous IP addresses, then click OK to add IP addresses to be ignored when discovering managed devices.
Action	Click the icon next to an entry, then click OK to have this IP address range be ignored when discovering managed devices.

Site View > Admin > Discover Nodes > Discovery Result
Label	Description
Add Discovered Nodes
Last Discovery Time:	This displays the date and time the discovered device was found.
Last Discovery Result:	This displays the number of managed devices found and the number of IP failures during discovery.
Add	To allow a discovered device to be managed, select the checkbox next to a discovered device, then click Add. Wait two to six minutes for discovered devices to appear in the Site View menu.
Type	This is the device type discovered.
System Name	This is the name that identifies the discovered device.
Interface	This is the specific interface IP address of the device discovered.
Model	This identifies a specific discovered device.
Description	This shows additional information on the discovered device.
Location	This shows the configured location information on the managed device.
n IP Fail	This displays the number of managed devices that could not be discovered from this site.
IP	This displays the IP address of the managed device.
Fail Message	This displays the message indicating the reason why the managed device failed to be discovered.

Site View > Admin > Devices Firmware Upgrade
Label	Description
Device Firmware Upgrade
Add New Schedule	Select this to configure a schedule to update firmware to a specific model.
Delete Schedules	Select a schedule and click this to remove it.
Delete All Completed Schedules	Click this button to remove all completed schedule tasks.
Firmware Upgrade Task List
Time	This is the date (yyyy-mm-dd) and time (hh:mm:ss) the upload will occur.
Model	This is the device type to which the firmware will be uploaded.
Interfaces	These are the specific devices (of the same type) identified by IP address to which the firmware will be uploaded.
Target Firmware Information	This is the firmware version that will be uploaded. The firmware version is in ‘trunk-version(model-code.release#)’ format. For example, V4.11(AAHY.1) means that the firmware trunk version is 4.11, AAHY identifies the NWA5123-NI model and .1 is the second firmware release (.0 is the first) for this model. Firmware versions followed by a date and time means ‘date version’ firmware which may be patch firmware to fix a bug and is not officially released yet.
Action	Click Result icon to see the status of the firmware upgrade. This screen shows the status of the firmware upgrade task. • Green indicates the number of devices that have completed firmware upgrade. • Red indicates the number of devices that have failed to complete their firmware upgrade. • Blue indicates the total number of devices in this firmware upgrade task. The Update Time shows the time when the table was last updated. Click Events to view the logs regarding this firmware upgrade task.

Site View > Admin > Firmware Upgrade > Add
Label	Description
Add New Firmware Upgrade Schedule
Model	Select one device type to which the firmware will be uploaded.
Nodes	Select the specific devices (of the type selected) to which the firmware will be uploaded.
Firmware	Select either an official or date firmware version that will be uploaded. The firmware version is in ‘trunk-version(model-code.release#)’ format. For example, V4.11(AAHY.1) means that the firmware trunk version is 4.11, AAHY identifies the NWA5123-NI model and .1 is the second firmware release (.0 is the first) for this model. A firmware version followed by a date and time means ‘date’ firmware which may be patch firmware to fix a bug and is not officially released yet.
Release Note	Click this to download the selected firmware related release note from the Zyxel website.
Upload	First download the ‘date’ firmware to your computer and then click this to upload it to the CNC.
Description	Type some optional information on the firmware upgrade schedule that may be helpful to other administrators.
Download Firmware Setting	The following two settings are related to the firmware download from CNC to the CNA. These are the steps to upgrade firmware. • CNA downloads firmware from the CNC within the specified timeout and number of attempts allowed (retries). • CNA uploads firmware to its managed device(s). The managed device(s) reboots to complete the firmware upgrade. • After the managed device(s) reboots, the CNA polls it and send the result to the CNC.
Timeout	Select how long the CNA should retry uploading firmware to a device before the CNC considers the firmware upload task failed.
Retries	Select how many times the CNA should retry uploading firmware within the Timeout period before the CNC considers the firmware download failed.
	The following two settings are related to the firmware upload from the CNC to the device(s).
Upgrade Now	Select this to update firmware to the device after clicking OK below.
Schedule Time	Select this and then the calendar icon to set a date for the upload. Select the clock icon within the calendar screen to set the time.
Cancel	Click this to return to the previous menu without saving any changes.
OK	Click this to save your changes and proceed.

Site View > Admin > Backup Time Frame Setting
Label	Description
Backup Setting
Backup Time	This displays the time (hh:mm with time zone offset) configured for the backup.
Action	Click the Setting icon to configure a backup time.
Backup Result	Click this to go to the Events menu

Site View > Admin > Operations > Backup Time Frame Setting: Edit
Label	Description
Set Backup Time
Time	Select the time to perform the backup.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Site View > Admin > Delete Nodes
Label	Description
Delete Nodes
Delete	Select device(s), click Delete, then Yes in the confirm dialog to stop the selected device(s) being managed by CNC. All threshold, backup and monitoring data for that device is removed.
Type	This displays an icon representing the type of SNMP-enabled managed device. • Zyxel devices, such as a switch, AP, ZyWALL/USG/UAG use the device icon. • Non-Zyxel devices use a generic device icon. • Nebula devices have a nebula icon next to the device icon.
Selected Nodes	This shows how many devices have been selected.
System Name	This is the name that identifies the managed device.
Interface	This is the IP address of the managed device is using to connect to the CNA.
Status	Green indicates that the managed device is online and being managed by the CNC. Red indicates that the managed device is offline and although discovered, cannot be managed by the CNC. Check events and notifications for possible reasons why.
Model	This identifies a specific managed device type.
Location	This shows the configured location information on the device.

Site View > Admin > Push CLI Commands
Label	Description
Push CLI Commands
Add New Schedule	Click this to configure the model type, nodes, commands and command transfer settings.
Delete Schedules	Select a schedule and click this to remove it.
Delete All Completed Schedules	Click this button to remove all completed schedule tasks.
Push Commands Task List	This shows an overview of the command transfer tasks completed or in progress
Status	This displays COMPLETE for finished tasks, RUNNING for tasks in progress and READY for tasks where the schedule is yet to begin or recurring.
Type	This displays whether the task is scheduled to occur once or is recurring.
Trigger Time	This displays the schedule for the task.
Model	This displays the model for the command transfer. Commands may be uploaded to many nodes of the same model in a task.
Interfaces	This displays the IP address of the device to which the command is transferred.
Expire Time	This displays the date and time that recurring schedules will end.
Action	Use the Delete icon to remove the schedule. Click the Result icon to see the status of the task.

Site View > Admin > Push CLI Commands > Add New Schedule
Label	Description
Push Commands Schedule
Model	In order to issue commands to a managed device, make sure to select a model that supports SSH and has a Command Line Interface.
Firmware	Select the firmware version to display nodes with that firmware version in the Nodes table below.
Nodes	Nodes display according to the model and firmware version you chose. Commands may be uploaded to up to 100 nodes of the same model in a task. Use the check boxes to select one or more nodes to which commands will be issued.
Interface	This displays the IP address of the device to which the command will be transferred.
System Name	This displays the identification name configured on this model.
Firmware Version	This displays the schedule for the task.
Location	This shows the configured location information on the device.
Description	Type some text to describe the purpose of this command execution task.
Commands	See the model CLI Reference Guide for command syntax. Each command must be on a separate row. • Type set timeout N (N = 1 to 1800 seconds) to set the timeout time limit on the expect commands. • Expect is to wait for a specific word string in a period of time configured with set timeout command. If the expected word string doesn’t show up, the next command written in the script will be implemented. Type expect “Router>” to wait for the keyword “Router>”. • Send is the responding action when the expected word string configured with expect command shows up. Type send “show version\r” to show the version of CNA, and type \r which means to enter, in the end of the command string when finished. • If a particular command needs more time to execute, type sleep N (N = 1 to 1800 seconds) after the command to delay execution of the following command by N seconds.
Command Setting	Configure how commands should be transferred here.
SSH Port	Commands are transferred using the SSH protocol. If you changes the default SSH protocol on the device, then enter the new protocol number here.
Inter Command Delay	Select how long to wait between execution of each command.
Schedule Setting	Configure when the commands should be transferred here.
Push Now	Select this, then click OK to transfer the commands immediately.
Scheduled	Select this to configure a date and time when the commands should be transferred.
Type	Select if the command transfer should recur Daily, Weekly, Monthly or just Once.
Start Date / End Date	If you select a recurring type, then enter the beginning and end dates for transfer here (or select from the calendar). Date format should be yyyy-mm-dd.
Every / Day	If you select Weekly, then select which day Every week it should occur. if you select Monthly, then select which Day of the month it should occur.
Time	Select the time in hour-month format for when the command transfer should occur.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Site View > Admin > Monitor Setting
Label	Description
Monitor Setting
Interval Setting	Click the Setting icon to change the polling interval. Select an interval of from 5 to 30 minutes depending on your network bandwidth and CNA location.

Site View > Admin > SNMP Settings
Label	Description
Add New Setting	Click this to create an SNMP community name for a group of devices identified by IP address(es)
SNMP Setting
Begin IP Address	This displays the beginning IP address in a range of IP addresses for which devices will have the following SNMP settings.
End IP Address	This displays the end IP address in a range of IP addresses for which will have the following SNMP settings.
Community Get	This displays the Get Community string, which is the password for Get- and GetNext- requests from the CNC to the managed device. The Get Community string is only used by SNMP managers using SNMP version 2c or lower.
Community Set	This displays the Set Community, which is the password for Set- requests from the management station to the managed device. The Set Community string is only used by SNMP managers using SNMP version 2c or lower.
Version	This displays the SNMP version CNC will use for the managed devices. The CNC supports SNMP version 1 (SNMPv1), SNMP version 2c (v2c) and SNMP version 3 (v3). SNMP version 2c is backwards compatible with SNMP version 1. The SNMP version on the CNC must match the version on the device. • When using SNMPv1 or SNMPv2c, you can manage up to 250 devices via a CNA. • When using SNMPv3, you can manage up to 125 devices via a CNA.
Timeout(s)	This displays how long the CNC will wait for a reply before resending a Get or Set request.
Retries	This displays how many times the CNC will send a Get or Set request to the managed device before the request is terminated.
Port	This displays the port number upon which the CNC sends SNMP requests.
Username	This displays the user name used for SNMPv3 authentication.
Auth	This displays whether an authentication algorithm (MD5 or SHA) is implemented for SNMP communication with the managed device.
Privacy	This displays whether data encryption (DES or AES) is implemented for SNMP communication with the managed device.
Actions	Click the Setting icon to reconfigure this entry. Click the Delete icon to remove this entry.

Site View > Admin > SNMP Settings: Add / Edit
Label	Description
Edit Authentication User Setting
Begin IP Address	Type the beginning IP address in a range of IP addresses for which devices will have the following SNMP settings.
End IP Address	Type the end IP address in a range of IP addresses for which devices will have the following SNMP settings.
Community Get	Type the Get Community string, which is the password for Get- and GetNext- requests from the CNC to the managed device. The managed device must use the same community string. The Get Community string is only used by SNMP managers using SNMP version 2c or lower.
Community Set	Type the Set Community, which is the password for Set- requests from the management station to the managed device. The managed device must use the same community string. The Set Community string is only used by SNMP managers using SNMP version 2c or lower.
Timeout	Select how long (in seconds) the CNC will wait for a reply before resending a Get or Set request.
Retries	Select how many times the CNC will send a Get or Set request to the managed device before the request is terminated.
Port	Type the port number the CNC will use to send SNMP requests. The managed device must use the same port number.
Version	Select the SNMP version CNC will use for the managed devices. The CNC supports SNMP version 1 (v1), SNMP version 2c (v2c) and SNMP version 3 (v3). The SNMP version on the CNC must match the version on the device.
Username	Enter the user name for SNMPv3 authentication.
Authentication	Select whether you want to implement password authentication for SNMP communication with the managed device. MD5 (Message Digest 5) and SHA (Secure Hash Algorithm) are hash algorithms used to authenticate SNMP data. SHA authentication is generally considered stronger than MD5, but is slower. If you select MD5 or SHA, enter the password of between 8 and 100 ASCII characters for SNMP user authentication.
Privacy	Select whether you want to implement encryption for SNMP communication with the managed device. • DES - Data Encryption Standard is a widely used (but breakable) method of data encryption. It applies a 56-bit key to each 64-bit block of data. • AES - Advanced Encryption Standard is another method for data encryption that also uses a secret key. AES applies a 128-bit key to 128-bit blocks of data. If you select DES or AES, enter the password of between 8 and 100 ASCII characters for encrypting SNMP packets.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Site View > Admin > User Name / Password
Label	Description
Add New Setting	Click this to create an allowed range of IP address(es) from which the specified user must use to log in.
User Name/Password List
Begin IP Address	This displays the beginning IP address in a range of IP addresses from which the specified user must use to log in.
End IP Address	This displays the end IP address in a range of IP addresses from which the specified user must use to log in.
Username	The user must use this user name to log in from one of the IP addresses in the allowed range.
Password	The user must use this password to log in from one of the IP addresses in the allowed range.
Action	Click the Setting icon to reconfigure this entry. Click the Delete icon to remove this entry.

Site View > Admin > User Name / Password: Edit / Add New Setting
Label	Description
Edit Authentication User Setting
Begin IP Address	Type the beginning IP address in a range of IP addresses from which the specified user must use to log in.
End IP Address	Type the end IP address in a range of IP addresses from which the specified user must use to log in.
Username	Type the user name to log in from one of the IP addresses in the allowed range. You can use up to 64 characters.
Password	Type the associated password to log in from one of the IP addresses in the allowed range.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Site View > Admin > Service Settings
Label	Description
Add New Setting	Click this to configure custom FTP, SSH, HTTP, and HTTPs ports for managed devices in a specified IP address range.
Service Setting List
Begin IP Address	This displays the beginning IP address in a range of IP addresses where the custom ports apply.
End IP Address	This displays the end IP address in a range of IP addresses where the custom ports apply.
SSH Port	This displays the (custom) port to be used to access devices in this IP address range by SSH.
FTP Port	This displays the (custom) port to be used to access devices in this IP address range by FTP.
Web Protocol	This displays whether HTTP or HTTPs is to be used to access devices in this IP address range.
Web Port	This displays the port to be used for HTTP or HTTPs access to devices in this IP address range.
Action	Click the Setting icon to reconfigure this entry. Click the Delete icon to remove this entry.

Site View > Admin > Service Settings > Add/Edit
Label	Description
Node Service Setting
Begin IP Address	Configure the beginning IPv4 address in a range of IP addresses where the custom ports apply.
End IP Address	Configure the end IPv4 address in a range of IP addresses where the custom ports apply.
SSH Port	Configure the custom port to be used to access devices in this IP address range by SSH.
FTP Port	Configure the custom port to be used to access devices in this IP address range by FTP.
Web Protocol	Select whether HTTP or HTTPs is to be used to access devices in this IP address range.
Web Port	Configure the custom port to be used for HTTP or HTTPs access to devices in this IP address range.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Example Thresholds
Threshold	Severity	Related Event
HIGH CPU UTIL THRESHOLD EXCEEDED	WARNING	Threshold Event: highCpuUtilThresholdExceeded
HIGH CPU UTIL THRESHOLD REARMED	NORMAL	Threshold Event: highCpuUtilThresholdRearmed
HIGH CPU UTIL THRESHOLD EDITED	NORMAL	Threshold Event: highCpuUtilThresholdEdited
HIGH SNMP RESP THRESHOLD EXCEEDED	WARNING	Threshold Event: highSnmpRespThresholdExceeded
HIGH SNMP RESP THRESHOLD REARMED	NORMAL	Threshold Event: highSnmpRespThresholdRearmed
HIGH SNMP RESP THRESHOLD EDITED	NORMAL	Threshold Event: highSnmpRespThresholdEdited
HIGH ICMP RESP THRESHOLD EXCEEDED	WARNING	Threshold Event: highIcmpRespThresholdExceeded
HIGH ICMP RESP THRESHOLD REARMED	NORMAL	Threshold Event: highIcmpRespThresholdRearmed
HIGH ICMP RESP THRESHOLD EDITED	NORMAL	Threshold Event: highIcmpRespThresholdEdited
HIGH IF UTIL THRESHOLD EXCEEDED	WARNING	Threshold Event: highIfUtilThresholdExceeded
HIGH IF UTIL THRESHOLD REARMED	NORMAL	Threshold Event: highIfUtilThresholdRearmed
HIGH IF UTIL THRESHOLD EDITED	NORMAL	Threshold Event: highIfUtilThresholdEdited
HIGH MEM UTIL THRESHOLD EXCEEDED	WARNING	Threshold Event: highMemUtilThresholdExceeded
HIGH MEM UTIL THRESHOLD REARMED	NORMAL	Threshold Event: highMemUtilThresholdRearmed
HIGH MEM UTIL THRESHOLD EDITED	NORMAL	Threshold Event: highMemUtilThresholdEdited

Site View > Admin > Thresholds
Label	Description
Manage Thresholds
Description	This shows what type of threshold it is.
Value	This is an upper boundary value.
Re-arm	This is a lower boundary value.
Trigger	When a monitored value exceeds Value or falls lower than Re-arm by more than the Trigger an event is created.
Triggered Event	This is the name of the event when a monitored value exceeds Value by the amount set in Trigger.
Re-armed Event	This is the name of the event when a monitored value falls lower than Re-arm by the amount set in Trigger.
Action	Click the Setting icon to adjust the Value, Re-arm and Trigger values.
Apply	Click this to save your changes.

Site View > Admin > Thresholds: Edit
Label	Description
Edit Threshold
Value	Type an upper boundary for this monitored value.
Re-arm	Type a lower boundary for this monitored value.
Trigger	Type the variance for this monitored value above Value and below Re-arm causing an event to be created.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Site View > Admin > Mail Groups
Label	Description
Mail Groups
Add New Mail Group	Click this to create a new email group to which event notifications are sent.
Event Notifications	This displays email group to which event notifications are sent.
Group Name	This displays the group name.
Mails	This displays the email addresses in the group.
Action	Click the Setting icon to reconfigure this entry. Click the Delete icon to remove this entry.

Site View > Admin > Mail Groups: Add / Edit Mail Group
Label	Description
Edit mail group
Name	Type a name of up to 32 characters to identify the group
Mails
Name	Type a valid email address.
Status	Select On for event notifications email to be sent to this email address. Select Off for event notifications email not to be sent to this email address. Select Auto for event notifications email to be sent to this email address and have the event automatically acknowledged.
Action	Click the Delete icon to remove this entry from the email group.
Add New Mail	Click this to create a new entry in the email group.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.

Site View > Admin > Notifications
Label	Description
Event Notifications
Notification	This is the name of the notification.
Event	This is the name of the event that caused the notification.
Mail Group	This is the email group to which this notification type will be sent.
Action	Click the Setting icon to configure who gets emails about events and set an email subject and body text.
Apply	Click this to save your changes.

Site View > Admin > Notifications: Edit
Label	Description
Edit notification content and choose mail group
Name	Type a name of up to 32 characters to describe this type of notification.
Description	Type some extra text to describe this type of notification.
Event Name	This is the system name of the event that will cause this notification.
Mail Group	Select a pre-configured mail group to which to send this notification.
Email Subject	Type the subject for the email notification here.
Text Message	Type the body text for the email notification here.
Special Values	Use these variables to build a body text message. For example, ‘Firmware upgrade complete : %logMessage%’ will send log messages along with the ‘Firmware upgrade complete’ text. Use ‘%tenantId%’ to dynamically specify the CNA site name for this notification.
Cancel	Click this to return to the previous menu without saving any changes.
OK	Click this to save your changes and proceed.

Site View > Admin > Remote Connection Summary
Label	Description
Current Remote Access Nodes
Refresh	Click this to update the remote device connection status and events.
Stop Remote Access	Click this button to stop the connection to selected ‘current connected nodes’ links.
Remote Access Link	This shows the remote access link information.
Status	This shows whether direct access is currently up or down.
Since	This shows how long direct access has been up.
System Name	This shows the name of the device being accessed.
Interface	This shows the IP address of the device being accessed.
Protocol	This shows whether the device is being accessed via HTTPS or SSH.
Remote Access Events
Time	This shows the date and time the event occurred.
System Name	This shows the name of the device on which the event occurred.
Interface	This shows the IP address of the device on which the event occurred.
Message	This shows a brief description of the event that occurred.
More	Click this to go the Events menu.

Label	Description
IP Address White List
Add New IP Address	Click this to add a trusted WAN IP address that can access managed devices. If your trusted computer has more than one WAN address, enter them manually here.
Remote-accessible IPs	This table displays the configured list of safe IP addresses from which administrators can access managed devices.
Name	This is a system name for the safe IP address.
IP	This displays the safe IP address.
Action	Click Edit to change the IP address or Delete to remove the entry.

Label	Description
Add IP Address
New IP	Type a valid WAN IP address of a trusted computer that can access managed devices directly. If your trusted computer has more than one WAN address, enter them manually here.
OK	Click this to save your changes and proceed.
Cancel	Click this to return to the previous menu without saving any changes.