Site-Wide
Monitor
Use the Monitor menus to check the dashboard, summary report, map and floor plan, network topology and client list of the Nebula devices for the selected site.
Dashboard
If a site is created and selected, the Dashboard is always the first menu you see when you log into the NCC. You can also click Site-Wide > Monitor > Dashboard to access this screen.
The screen varies depending on what you select in the Display field. It shows the status and information for all types of Nebula devices connected to the selected site by default. You can also select to only show information for APs in the site.
Display: All Type
The screen allows you to view:
• AP: how many Nebula APs are assigned and connected, and what percentage of the APs become overloaded, that is, the number of online APs that exceed the maximum client device number (in AP > Configure > Load Balancing) by total number of online APs in the site,
• AP Client: how many WiFi clients are currently connecting to the managed AP(s),
• Switch: how many Nebula switches are assigned and connected, and what percentage of the switches become overloaded, that is, the number of online Nebula switches that exceed 70% of their upstream bandwidth by total number of online Nebula switches in the site,
• PoE Power: the total PoE power budget on the switch and the current amount of power consumed by the powered devices,
• Gateway: how many Nebula security gateways are assigned and connected, and what percentage of the gateway’s processing capability is currently being used if the CPU goes over 93% usage,
• WAN Throughput: the data rate of inbound/outbound traffic in Kbps (kilobits per second) or Mbps (megabits per second) that has been transmitted through the WAN interface. If the security gateway supports multiple WAN interfaces and both of them are active, use the arrow to switch and view the throughput of each WAN interface.
• Traffic Summary: the Internet usage and top ten applications in the past 24 hours,
• Top Gateway Clients: the top five clients of the Nebula security gateway with the highest percentage of bandwidth usage in the past 24 hours.
Display: AP Only
The screen allows you to view:
• AP Status: the total number of online/offline APs in the site, and how many WiFi clients are currently connecting to the managed AP(s).
• Top 5 APs: the top five managed AP(s) with the highest number of WiFi clients or the highest percentage of bandwidth usage in the past 24 hours. You can click an AP’s name to go to the AP > Monitor > Access Point: AP Details screen.
• Top 3 SSIDs: the top three SSIDs with the highest percentage of bandwidth usage in the past 24 hours. You can click a client’s name to go to the AP > Monitor > Summary Report screen.
• Top 5 Clients: the top five WiFi clients (clients of the APs only) with the highest percentage of bandwidth usage in the past 24 hours. You can click a client’s name to go to the AP > Monitor > Client: Client Details screen.
• Top 5 Manufacturers: the top five manufacturers of WiFi client devices in the past 24 hours. You can click a manufacturer name to go to the AP > Monitor > Client screen and view the client devices which are made by the manufacturer.
• Top 5 Operating Systems: the top five operating systems used by WiFi client devices in the past 24 hours. You can click an operating system to go to the AP > Monitor > Client screen and view the client devices which use this operating system.
Summary Report
This screen displays network statistics for the selected site, such as bandwidth usage, power usage, top devices, top clients and/or top SSIDs.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Summary Report | Select to view the report for the past day, week or month. Alternatively, select Select range... to specify a time period the report will span. You can also select the number of results you want to view in a table. |
Email report | Click this button to send summary reports by email, change the logo and set email schedules. |
WAN1/WAN2 usage This section is available when there is at least one Nebula managed security gateway installed in your network. | |
y-axis | The y-axis shows the transmission speed of data sent or received through the WAN connection in kilobits per second (kbps). |
x-axis | The x-axis shows the time period over which the traffic flow occurred. |
Top devices by usage | |
# | This shows the index number of the Nebula device. |
Name | This shows the descriptive name of the Nebula device. |
Model | This shows the model number of the Nebula device. |
Usage | This shows the amount of date transmitted or received by the Nebula device. |
Client | This shows how many clients are currently connecting to the Nebula device. |
Location | This shows the location of the top Nebula devices on the map. |
Top SSIDs by usage | |
# | This shows the index number of the SSID. |
SSID | This shows the SSID network name. |
# Clients | This shows how many WiFi clients are connecting to this SSID. |
% Clients | This shows what percentage of associated WiFi clients are connecting to this SSID. |
Usage | This shows the total amount of data transmitted or received by clients connecting to this SSID. |
% Usage | This shows what percentage of the transmitted data is for this SSID. |
Top switches by power usage | |
# | This shows the index number of the switch. |
Name | This shows the descriptive name of the switch. |
Model | This shows the model number of the switch. |
Power usage | This shows the switch’s energy consumption in watt-hour (Wh). |
Ethernet power | |
Power rate over time | This shows the average, maximum and minimum power consumption of the switches. |
y-axis | The y-axis shows how much power is used in Watts. |
x-axis | The x-axis shows the time period over which the power consumption is recorded. |
Map & Floor Plan
This screen allows you to locate a device on the world map and use a floor plan to show the space and relationship between the Nebula devices.
Place devices on map
You can mark spots on the map, that is, the places where the devices are located. Click the Place devices on map tab to display the device list for the selected site. Click Done to hide the device list.
Click the Placed button to show the devices that you have pined on the map and/or the floor plan. Click the Un-placed button to show the devices that remain to be pined on the map. To pin a device, select the device from the Un-placed list, then drag and drop it on to the map.
The pin icon next to a device name is blue (
) if you have marked the device on the map. Otherwise, the pin icon is gray (
). Click the 
icon to remove a device from the map.
) if you have marked the device on the map. Otherwise, the pin icon is gray (). Click the icon to remove a device from the map.Edit floor plans
Click the Edit floor plans tab to display the list of existing floor plan, a drawing that shows the rooms scaled and viewed from above. Click Done to hide the list. Use the Create+ button to upload new floor plans.
Select a floor plan from the list. The floor plan then shows on the Google map at the right side of the screen. Use your mouse to move the floor plan, and use the icons at the top of the map to rotate, change the transparency, resize or hide the floor plan. Click Set position to apply your changes.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Floor plan | This shows the descriptive name of the floor plan. |
Devices | This shows the number of the device(s) marked on this floor plan. |
Edit | Click this icon to open a screen, where you can modify the name, address and/or dimension of the floor plan. |
Remove | Click this icon to delete the floor plan. |
Topology
Use this screen to view the network topology of the site.
The shape of a node in the network topology indicates its device type and the color shows whether the device is online (green), has generated alerts (amber), or goes offline (red). Click a node to view detailed device information, such as its name, model number, number of connected clients, and MAC address.
Configure
Use the Configure menus to set the general and email alert settings for the selected site, or register a new Nebula device and assign it to the site.
General Setting
Use this screen to change the general settings for the site, such as the site name, device login password and firmware upgrade schedule.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Site Information | |
Site name | Enter a descriptive name for the site. |
Local time zone | Choose the time zone of the site’s location. |
Device configuration | |
Local credentials | The default password is generated automatically by the NCC when the site is created. You can specify a new password to access the status page of the device’s built-in web-based configurator. The settings here apply to all Nebula devices in this site. |
AP LED lights | Click to turn on or off the LED(s) on the APs. |
AP Smart Mesh | Click to turn on or off the Nebula Smart Mesh feature on the APs. When Nebula Mesh is enabled, wireless mesh links between managed APs are created automatically. When an AP fails to connect to the gateway in the site through a wired Ethernet connection, it acts as a repeater and wirelessly connects to an available root AP to get configuration updates. The root AP is an AP that can transmit and receive data from the gateway via a wired Ethernet connection. Click Model list to see whether your AP supports the Nebula Smart Mesh feature at the time of writing. |
Captive portal reauthentication | |
For my AD server users | Select how often the user (authenticated by an AD server) has to log in again. |
For my RADIUS server users | Select how often the user (authenticated by an RADIUS server) has to log in again. |
For click-to-continue users | Select how often the user (authenticated via the captive portal) has to log in again. |
For cloud authentication users | Select how often the user (authenticated using the NCC user database) has to log in again. |
SNMP | |
SNMP access | Select V1/V2c to allow SNMP managers using SNMP to access the devices in this site. Otherwise, select Disable. |
SNMP community string | This field is available when you select V1/V2c. Enter the password for the incoming SNMP requests from the management station. |
Reporting | |
Syslog server | Click Add to create a new entry. |
Server IP | Enter the IP address of the server. |
Types | Select the type of logs the server is for. |
Action | Click the Delete icon to remove the entry. |
Firmware upgrades | |
Upgrade time | Select the day of the week and time of the day to install the firmware. |
Access point upgrade | This section is grayed out if there is no AP in this site. It shows if there is a new version of the firmware available for the APs, and the date and time of the last firmware upgrade. Select Follow upgrade time to install the firmware at the time you choose in the Upgrade time field. Select Schedule the upgrade to xx to set a new schedule for the firmware upgrade. Select Perform the upgrade now to install the firmware immediately. |
Switch upgrade | This section is grayed out if there is no switch in this site. It shows if there is a new version of the firmware available for the switches, and the date and time of the last firmware upgrade. Select Follow upgrade time to install the firmware at the time you choose in the Upgrade time field. Select Schedule the upgrade to xx to set a new schedule for the firmware upgrade. Select Perform the upgrade now to install the firmware immediately. |
Gateway upgrade | This section is grayed out if there is no gateway in this site. It shows if there is a new version of the firmware available for the gateways, and the date and time of the last firmware upgrade. Select Follow upgrade time to install the firmware at the time you choose in the Upgrade time field. Select Schedule the upgrade to xx to set a new schedule for the firmware upgrade. Select Perform the upgrade now to install the firmware immediately. |
Alert Setting
Use this screen to set which alerts are created and emailed. You can also set the email address(es) to which an alert is sent.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Send alerts via email to | |
All site administrators | Click On to send alerts to all site administrators in the selected site. |
Custom email addresses | Enter the email address(es) to which you want to send alerts. |
Alert types | |
Wireless alerts | Select the check box to have the NCC generate and send an alert by email (Email) and/or have the Zyxel Nebula Mobile app send notifications (In-app push notifications) when the event occurs. If you select In-app push notifications, you can use the Zyxel Nebula Mobile app to decide whether the smart phone should receive or ignore notifications. You can also specify how long in minutes the NCC waits before generating and sending an alert when an AP becomes off-line. |
Switch alerts | Select the check box to have the NCC generate and send an alert by email (Email) and/or have the Zyxel Nebula Mobile app send notifications (In-app push notifications) when the event occurs. If you select In-app push notifications, you can use the Zyxel Nebula Mobile app to decide whether the smart phone should receive or ignore notifications. You can also specify how long in minutes the NCC waits before generating and sending an alert when a port or a switch goes down. |
Security gateway alerts | Select the check box to have the NCC generate and send an alert by email (Email) and/or have the Zyxel Nebula Mobile app send notifications (In-app push notifications) when the event occurs. If you select In-app push notifications, you can use the Zyxel Nebula Mobile app to decide whether the smart phone should receive or ignore notifications. You can also specify how long in minutes the NCC waits before generating and sending an alert when a gateway becomes off-line. |
Other alerts | Select the check box to have the NCC generate and send an alert by email when the event occurs. |
Add Device
Use this screen to register a device and add it to the site.
Note: You have to contact Zyxel customer support if you need to change the device owner at myZyxel or remove an Organization from the NCC. Please configure your device owners and organizations carefully. See also License Management.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Add to this site | Click this button to assign the selected device(s) to the site. |
Unused device | This shows the number of registered devices which have not been assigned to a site. |
+ Register | This button is available only for an organization administrator or site administrator that has full access. Click this button to pop up a window where you can enter a device’s serial number and MAC address to register it at the NCC. You can click template in the pop-up window to download the template (an example Excel file), add device information in the Excel file, and then click import to register multiple devices quickly by importing the Excel file. |
Select the check box of the device that you want to add to the selected site. | |
Device name | This shows the descriptive name of the device. |
Serial number | This shows the serial number of the device. |
MAC address | This shows the MAC address of the device. |
Model | This shows the model name of the device. |
Firmware Management
Use this screen to schedule a firmware upgrade. You can make different schedules for different types of Nebula devices in the site or even create a schedule for a specific device.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Upgrade time | Select the day of the week and time of the day to install the firmware. The changes you make here also apply to the Site-Wide > Configure > General setting screen after you click Save. |
All APs | This section is grayed out if there is no AP in this site. Set a new schedule for the firmware upgrade and select On to enable the schedule. The changes you make here also apply to the Site-Wide > Configure > General setting screen after you click Save. |
All Switches | This section is grayed out if there is no switch in this site. Set a new schedule for the firmware upgrade and select On to enable the schedule. The changes you make here also apply to the Site-Wide > Configure > General setting screen after you click Save. |
Security Gateway | This section is grayed out if there is no gateway in this site. Set a new schedule for the firmware upgrade and select On to enable the schedule. The changes you make here also apply to the Site-Wide > Configure > General setting screen after you click Save. |
Status/Device Type/Tag/Model/Current Version/Firmware Status/Locked | Specify your desired filter criteria to filter the list of devices. |
Upgrade Now | Click this to immediately install the firmware on the selected device(s). This button is clickable only when there is firmware update available for all the selected devices. |
Schedule Upgrade | Click this to pop up a window where you can create a new schedule for the selected device(s). You can select to upgrade firmware according to the side-wide schedule configured for all devices in the site, create a recurring schedule, or edit the schedule with a specific date and time when firmware update is available for all the selected devices. With a recurring schedule, the NCC will check and perform a firmware update when a new firmware release is available for any of the selected devices. If the NCC service is downgraded from Nebula Professional Pack to Nebula, the device(s) automatically changes to adhere to the side-wide schedule. |
Status | This shows whether the device is online (green), has generated alerts (amber), or goes off-line during the past day (red) or has been off-line for at least one week (gray). |
Device Type | This shows the type of the device. |
Model | This shows the model number of the device. |
Tag | This shows the tag created and added to the device. |
Name | This shows the descriptive name of the device. |
MAC | This shows the MAC address of the device. |
S/N | This shows the serial number of the device. |
Current version | This shows the version number of the firmware the device is currently running. It shows N/A when the device goes off-line and its firmware version is not available. |
Firmware status | This shows whether the firmware on the device is Up to date, there is firmware update available for the device (Upgrade available), custom firmware was installed manually (Custom), a specific version of firmware has been installed by Zyxel customer support (Dedicated) or the device goes off-line and its firmware status is not available (N/A). The status changes to Upgrading... after you click Upgrade Now to install the firmware immediately. |
Upgrade scheduled | This shows the date and time when a new firmware upgrade is scheduled to occur. Otherwise, it shows Follow upgrade time and the device sticks to the site-wide schedule or No when the firmware on the device is up-to-date or the device goes off-line and its firmware status is not available. A lock icon displays if a specific schedule is created for the device, which means the device firmware will not be upgraded according to the schedule configured for all devices in the site. |
Last upgrade time | This shows the last date and time the firmware was upgraded on the device. |
Schedule upgrade version | This shows the version number of the firmware which is scheduled to be installed. |
Cloud Authentication
Use this screen to view and manage the user accounts which are authenticated using the NCC user database.
The changes you made in this screen apply only to the selected site. To change the cloud authentication settings for all sites in the organization, go to Organization > Configure > Cloud Authentication (see Cloud Authentication).
The following table describes the labels in this screen.
Label | Description |
|---|---|
Account Type | Select the type of user accounts that you want to view, manage or create. User - an internal user that can gain access to the networks by authenticating with a RADIUS server via the IEEE 802.1x or WPA2 authentication method or the captive portal. MAC - an internal user that can gain access to the networks by authenticating with a RADIUS server via the MAC-based authentication method. Guest - a guest that can gain access to the networks via the captive portal. VPN User - a L2TP VPN client that can gain access to the networks by authenticating with the Nebula cloud authentication server. |
Authorization | This button is available only when your administrator account has full access or Guest Ambassador access to the site and at least one of the selected accounts is not granted access to all sites in the organization. Select one or more than one user account and click this button to configure the authorization settings for the selected user account(s) in this site. If you authorize the user’s access to the network, it shows Yes in the Authorized field. If you cancel access authorization for the selected account(s), it shows No in the Authorized field. The account will not be able to access this site, but can still access other sites to which the user access is authorized. |
Search | Enter a key word as the filter criteria to filter the list of user accounts. |
Users | This shows how many user accounts of the selected type displayed in the list and how many user accounts match the filter criteria. |
Import | Click this button to create user accounts in bulk by importing a complete list of all new users in an Excel file. |
Add | Click this button to create a new user account. See Create/Update User. To remove a user account, you need to go to Organization > Configure > Cloud Authentication (see Cloud Authentication). |
Export | Click this button to save the account list as a CSV or XML file to your computer. |
Email | This field is available only when the account type is set to User, Guest or VPN User. This shows the email address of the user account. |
Username | This field is available only when the account type is set to User, Guest or VPN User. This shows the user name of the user account. |
Description | This shows the descriptive name of the user account. |
MAC address | This field is available only when the account type is set to MAC. This shows the MAC address of the user account. |
Account type | This shows the type of the user account. |
Authorized | This shows whether the user’s access to this site has been authorized or not. It shows All sites if the user account is granted access to all sites in the organization. To change the user’s cloud authentication setting, go to Organization > Configure > Cloud Authentication (see Cloud Authentication). |
Authorized by | This shows the email address of the administrator account that authorized the user. |
Expire in | This shows the date and time that the account expires. This shows - if authentication is disabled for this account. This shows Never if the account never expires. |
Login by | This field is available only when the account type is set to User, Guest or VPN User. This shows whether the user needs to log in with the email address and/or user name. |
Created by | This shows the email address of the administrator account that created the user. |
Created at | This shows the date and time that the account was created. |
 | Click this icon to display a greater or lesser number of configuration fields. |