Devices
Use the Devices menus to check Nebula Device information, client information, event log messages and summary report for Nebula Devices in the selected site.
Access Points
This screen allows you to view the detailed information about a Nebula Device in the selected site. Click Site-wide > Devices > Access points to access this screen.
Site-wide > Devices > Access points
The following table describes the labels in this screen.
Site-wide > Devices > Access points 
Label
Description
Access points
Select to view device information and connection status in the past two hours, day, week or month.
Click this button to reload the data-related frames on this page.
Action
Perform an action on the selected Nebula Devices.
Reboot
Select this to restart the Nebula Device.
Upgrade
Select this to upgrade the firmware on the Nebula Device.
Change PSK
Select this to generate a random Pre-Shared Key, or use a custom Pre-Shared Key. This allows a user to access the WiFi network through the Nebula Device.
*Programmable SSID must be enabled in Site-wide > Configure > WiFi SSID.
Tag
Select one or multiple Nebula Devices and click this button to create a new tag for the Nebula Devices or delete an existing tag.
Move
Select one or multiple Nebula Devices and click this button to move the Nebula Devices to another site or remove the Nebula Devices from the current site.
AP Role
Select one or multiple Nebula Devices and click this button to enable or disable the Remote AP feature.
Remote Nebula Device enables the site’s Security Appliance to connect to the Nebula Device through a secure VPN tunnel. This allows you to set up VPN-enabled WiFi Nebula Devices in remote locations, such as in a branch office or at home. Clients connected to these Nebula Devices can securely access your network through the VPN tunnel.
*Enabling Remote Nebula Device automatically enables Ethernet and wireless storm control on the Nebula Device.
Search
Specify your desired filter criteria to filter the list of Nebula Devices.
access points
This shows the number of Nebula Devices connected to the site network.
Export
Click this button to save the access point list as a CSV or XML file to your computer.
*
Click this to select all the rows in this table.
Status
This shows the status of the Nebula Device.
Green: The Nebula Device is online and has no alerts.
Amber: The Nebula Device has alerts.
Red: The Nebula Device is offline.
Gray: The Nebula Device has been offline for 7 days or more.
: The Nebula Device is acting as a repeater.
For example, an alert is created and the status color is amber when the Nebula Device is transmitting data at 100 Mbps in full duplex mode or when the Nebula Device is in a Limited Power mode.
Name
This shows the descriptive name of the Nebula Device.
LAN IP
This shows the local (LAN) IP address of the Nebula Device.
Remote AP
This shows whether the Remote Nebula Device function is Enabled or Disabled.
2.4GHz
This shows the number of WiFi clients in the 2.4 GHz band.
5GHz
This shows the number of WiFi clients in the 5 GHz band.
6GHz
This shows the number of WiFi clients in the 6 GHz band.
AP Role Capability
This displays whether the Nebula Device can act as a remote Nebula Device (Remote AP) or not (Standard AP).
Public IP
This shows the global (WAN) IP address of the Nebula Device.
Model
This shows the model number of the Nebula Device.
Client
This shows how many clients are connected to the Nebula Device within the specified time period.
Current client
This shows how many clients are currently connecting to the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device.
Channel
This shows the channel ID the Nebula Device is using.
Channel Utilization 2.4GHz
This shows the percentage of the 2.4 GHz channel ID usage.
Channel Utilization 5GHz
This shows the percentage of the 5 GHz channel ID usage.
Channel Utilization 6GHz
This shows the percentage of the 6 GHz channel ID usage.
Usage
This shows the amount of data consumed by the Nebula Device’s clients.
% Usage
This shows the percentage of the Nebula Device’s data usage.
Description
This shows the user-specified description for the Nebula Device.
Tag
This shows the user-specified tag for the Nebula Device.
Serial number
This shows the serial number of the Nebula Device.
Configuration status
This shows whether the configuration on the Nebula Device is up-to-date.
Connectivity
This shows the access point connection status.
The red time slot indicates the connection to the NCC is down, and the green time slot indicates the connection is up. Move the cursor over a time slot to see the actual date and time when an Nebula Device is connected or disconnected.
Ethernet 1
This shows the speed and duplex mode of the Ethernet connection on the Nebula Device’s up-link port. It shows Down if the Nebula Device is connected to a mesh controller wirelessly.
Neighbor Info
This shows the LLDP information received on the up-link port.
Production information
This shows the production information of the Nebula Device.
Hop
This shows the hop count of the Nebula Device. For example, “1” means the Nebula Device is connected to a mesh controller directly. “2” means there is another mesh extender between this Nebula Device and the mesh controller.
IP type
This shows whether the IP address was assigned automatically (DHCP), or manually (Static IP).
Uplink AP
This shows the role and descriptive name of the Nebula Device to which this Nebula Device is connected wirelessly.
When Smart Mesh is enabled and the mesh extender losses connection to the mesh controller, click Reconnect to re-establish connection.
*Make sure to enable Manual uplink in Site-wide > Devices > Access points: Details > Status > Smart mesh > Edit. You also need to specify the mesh controller in select an AP. See Site-wide > Devices > Access points: Details for more information.
Uplink signal
Before the slash, this shows the signal strength the uplink Nebula Device (a mesh controller or a mesh extender) receives from this Nebula Device (in repeater mode). After the slash, this shows the signal strength this Nebula Device (in repeater mode) receives from the uplink access point.
Uplink Tx/Rx rate
This is the maximum transmission/reception rate of the mesh controller or mesh extender to which the Nebula Device is connected.
Wireless bridge
This shows whether wireless bridge is enabled on the Nebula Device.
For more information about wireless bridge, see Wireless Bridge.
Uplink
This shows whether the Nebula Device is connected to the gateway through a wired Ethernet connection or WiFi connection.
Power mode
This shows the Nebula Device’s power status.
Full – the Nebula Device receives power using a power adapter and/or through a PoE switch/injector using IEEE 802.3at PoE plus. The PoE device that supports IEEE 802.3at PoE Plus can supply power of up to 30W per Ethernet port.
Limited – the Nebula Device receives power through a PoE switch/injector using IEEE 802.3af PoE even when it is also connected to a power source using a power adapter. The PoE device that supports IEEE 802.3af PoE can supply power of up to 15.4W per Ethernet port.
When the Nebula Device’s power mode is Limited, the Nebula Device throughput decreases and has just one transmitting radio chain.
It always shows Full if the Nebula Device does not support power detection.
Firmware availability
This shows whether the firmware on the Nebula Device is Up to date, there is firmware update available for the Nebula Device (Upgrade available), or a specific version of firmware has been installed by Zyxel customer support (Locked).
Firmware status
This shows whether the firmware installed on the Nebula Device is up-to-date.
Firmware type
This shows Stable when the installed firmware may not have the latest features but has passed Zyxel internal and external testing.
This shows Latest when the installed firmware is the most recent release with the latest features, improvements, and bug fixes.
This shows General Availability when the installed firmware is a release before Latest, but is still undergoing Zyxel external testing.
This shows Dedicated when the installed firmware is locked and Zyxel support is monitoring. Contact Zyxel customer support if you want to unlock the firmware in order to upgrade to a later one.
This shows Beta when the installed firmware is a release version for testing the latest features and is still undergoing Zyxel internal and external testing.
This shows N/A when the Nebula Device is offline and its firmware status is not available.
Current version
This shows the firmware version currently installed on the Nebula Device.
Remote AP VPN
This shows which VPN the Remote Nebula Device tunnel is configured to use.
If Remote Nebula Device is disabled, this field shows Disconnected.
Click this icon to display a greater or lesser number of configuration fields. For faster loading of data, select only the configuration fields listed that do NOT take a long time to fetch data.
Access Point Details
Click a Nebula Device entry in the Site-wide > Devices > Access points screen to display individual Nebula Device statistics.
Site-wide > Devices > Access points: Details Part 1
Site-wide > Devices > Access points: Details Part 2
The following table describes the labels in this screen.
Site-wide > Devices > Access points: Details 
Label
Description
Click this button to reload the data-related frames on this page.
Configuration
Click the edit configuration icon to change the Nebula Device name, description, tags, load balancing, and address. You can also move the Nebula Device to another site or remove.
Remote AP
Click this to enable or disable the Remote AP feature.
Remote AP enables the site’s Security Appliance to connect to the Nebula Device through a secure VPN tunnel. This allows you to set up VPN-enabled WiFi Nebula Devices in remote locations, such as in a branch office or at home. Clients connected to these Nebula Devices can securely access your network through the VPN tunnel.
With the Remote AP feature (in the Secure WiFi license) the connection is from the Nebula Device to a managed access point using NVGRE (Network Virtualization using Generic Routing Encapsulation) over IPSec tunnel. This encapsulates and encrypts traffic from the remote access point to the Nebula Device. The clients connected to the remote access point do not need IPSec client software installed.
*Enabling Remote AP automatically enables Ethernet and wireless storm control on the Nebula Device.
At the time of writing, Ethernet Secure Tunnel Setting for Remote AP Setting is available for WAC500H only.
Configure and enable up to two SSID(s) in Local SSID Setting. WiFi clients connected to these SSIDs are forwarded to the local network of the remote site. The Local SSID Setting are different from the SSIDs you configured in Site-wide > Configure > Access points > SSID advanced settings. See SSID Advanced Settings for the description of the fields.
Select from the available LAN or VLAN interface in Tunnel to gateway interface to enable it, and click Save.
Name
This shows the descriptive name of the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device.
Serial number
This shows the serial number of the Nebula Device.
Description
This shows the user-specified description for the Nebula Device.
Address
This shows the user-specified address for the Nebula Device.
Tag
This shows the user-specified tag for the Nebula Device.
Load balancing
This shows the load balancing group name that the Nebula Device belongs (up to two groups per access point). Nebula Devices in the same group should be within the proximity. This allows them to share the load.
Status
LAN IP
This shows the local (LAN) IP address of the Nebula Device. It also shows the IP addresses of the gateway and DNS server.
Click the edit icon to open a screen where you can change the IP addresses, VLAN ID number and tagging setting.
Public IP
This shows the global (WAN) IP address of the Nebula Device.
Usage
This shows the amount of data consumed by the clients.
Current clients
This shows the number of clients which are currently connecting to the Nebula Device and its details.
Topology
Click Show to go to the Site-Wide > Topology screen. See Topology.
Neighbor info
This shows the LLDP information received on the up-link port.
Link
This shows the speed and duplex mode of the Ethernet connection on the Nebula Device’s ports.
It shows Uplink: Wireless if the access point is an mesh extender and connected to a mesh controller wirelessly.
A warning icon displays when the Nebula Device is running at 100 Mbps or a lower speed.
Ports
This is available only for the Nebula Device that has one or more than one Ethernet LAN port (except the uplink port).
This shows the PVID of the LAN port and the ID number of VLANs to which the LAN port belongs. See AP & Port Settings for how to change the port’s VLAN settings.
Storm control
Storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets received per second on the Nebula Device’s Ethernet ports. When the maximum number of allowable broadcast, multicast and/or DLF packets is reached per second, the subsequent packets are discarded. Enabling this feature reduces broadcast, multicast and/or DLF packets in your network.
Channel (Band)
This shows the channel ID and WiFi frequency band currently being used by the Nebula Device.
Channel utilization
This shows the percentage of the channel ID usage.
Power mode
This shows Full when the Nebula Device receives power directly through a power outlet.
This shows Full (Power by DC) when the Nebula Device receives power using a power adapter.
This shows Full (Power by PoE) when the Nebula Device receives power through a PoE switch/injector using IEEE 802.3at PoE plus. The PoE device that supports IEEE 802.3at PoE Plus can supply power of up to 30W per Ethernet port.
This shows Limited (Require 802.3bt power) when the Nebula Device receives power through a PoE switch/injector using IEEE 802.3bt PoE even when it is also connected to a power source using a power adapter. The PoE device that supports IEEE 802.3bt PoE can supply power of up to 71.3W per Ethernet port.
This shows Limited (Require 802.3at power) when the Nebula Device receives power through a PoE switch/injector using IEEE 802.3at PoE even when it is also connected to a power source using a power adapter. The PoE device that supports IEEE 802.3at PoE can supply power of up to 15.4W per Ethernet port.
This field is blank when the access point’s firmware is older than version 5.50 or (WAX650S / WAX510D firmware is older than version 6.00P4C0). Or when the access point is offline.
Click the edit icon to open a screen where you can enable full power mode.
*As of this writing, the following is a list of models that will show the edit icon for enabling full power mode: NAP303, NAP353, NWA1302-AC, NWA1123-AC HD, NWA5123-AC HD, WAC6303D-S, WAC6502D-E, WAC6502D-S, WAC6503D-S, WAC6552D-S, WAC6553D-S, WAX650S, NWA110AX, WAX510D.
Antenna
This displays the antenna orientation settings for the Nebula Device that comes with internal antennas and also has an antenna switch.
Smart mesh
This shows whether Nebula Smart Mesh is enabled on the Nebula Device.
For more information about Smart Mesh, see Nebula Smart Mesh.
To view the list of Nebula Devices that support smart mesh, go to Help > Device function table.
Edit
Edit the Nebula Device’s Smart Mesh settings.
Enabled
Enable or disable Smart Mesh on the Nebula Device.
This setting overrides the Smart Mesh settings configured for the Nebula Device’s site in NCC.
Lock
When enabled, the Nebula Device’s local Smart Mesh settings overrides the Smart Mesh settings configured for the Nebula Device’s site in NCC.
Example 1: If Smart Mesh is enabled for the site in NCC, you can disable Smart Mesh on the Nebula Device by setting Lock to on and Enabled to off.
Example 2: If Smart Mesh is disabled for the site in NCC, you can enable Smart Mesh on the Nebula Device by setting Lock to on and Enabled to on.
Band
This setting will apply to mesh extender.
Select Auto (high band preferred) to allow the mesh extender to select a higher radio band mesh controller.
Select 2.4 GHz to use the 2.4 GHz band for regular Internet surfing and downloading.
Select 5 GHz or 6 GHz to use the 5 or 6 GHz band for time sensitive traffic like high-definition video, music, and gaming.
*6 GHz will display only for mesh extender that support it.
Downlink
When enabled, the mesh extender can provide downlink capability to another mesh extender.
Manual uplink
When enabled, this allows you to select a mesh controller or mesh extender.
Uplink auto failover
When enabled, an mesh extender that cannot connect to the selected mesh controller after 5 tries, will automatically connect to another mesh controller or mesh extender.
select a AP
Select a mesh controller or mesh extender.
Wireless bridge
This shows whether wireless bridge is enabled on the Nebula Device.
For more information about wireless bridge, see Wireless Bridge.
*Wireless bridge can only work when smart mesh is enabled in this screen.
Edit
Edit the Nebula Device’s wireless bridge settings.
Enabled
Enable or disable wireless bridge on the Nebula Device.
*If Smart Mesh is disabled for the site in NCC, then enabling wireless bridge automatically enables Smart Mesh on the Nebula Device.
Allowed VLANs
Enter the IDs of the VLANs that the Nebula Device will forward over the wireless bridge.
By default, this field uses the VLANs allowed for LAN1 at Site-wide > Configure > Access points > AP & port settings. For details, see AP & Port Settings.
History
Click Event log to go to the Site-wide > Monitor > Access points > Event log screen.
Configuration status
This shows whether the configuration on the Nebula Device is up-to-date.
Firmware availability
This shows whether the firmware on the Nebula Device is up-to-date or there is firmware update available for the Nebula Device.
Current version
This shows the firmware version currently installed on the Nebula Device.
Map
This shows the location of the Nebula Device on Google map (Map view or Satellite imagery view) or on a floor plan. Click Floor plan to display a list of existing floor plans. Each floor plan has a drawing that shows the rooms scaled and viewed from above. Drag-and-drop your Nebula Device directly on the Google map or click Position device to update the Nebula Device’s address (physical location).
Select GEO IP to use the public IP address of the Nebula Device.
Select Get my location from web browser to use the public IP address of the computer accessing the NCC portal.
Select Use the following address or coordinates to enter the complete address or coordinates of the Nebula Device.
*Nebula Devices that are offline cannot use GEO IP.
Photo
This shows the photo of the Nebula Device. Click Add to upload one or more photos. Click x to remove a photo.
Live tools
Traffic
This shows the Nebula Device traffic statistics.
Current stations
This shows the Nebula Device’s connected WiFi clients’ MAC address, SSID name, IPv4 Address, Signal strength, Security, Channel, Tx rate, Rx rate, Association time, and Capability.
Ping
Enter the domain name or IP address of a computer that you want to perform ping from the Nebula Device in order to test a connection and click Ping.
This can be used to determine if the Nebula Device and the computer are able to communicate with each other.
Traceroute
Enter the domain name or IP address of a computer that you want to perform traceroute from the Nebula Device and click Run. This determines the path a packet takes to the specified computer.
Reboot AP
Click the Reboot button to restart the Nebula Device.
*All connected clients will be temporarily disconnected during reboot.
Locator LED
Enter a time interval between 1 and 60 minutes. The locator LED will blink for the number of minutes set here once you turn on the locator LED.
Click the button to turn on the locator feature, which shows the actual location of the Nebula Device between several devices in the network.
Remote Access
This allows you to establish a remote connection to this Nebula Device by specifying the port number. Then click Establish.
This feature is available to the organization owner, organization administrators with full privileges, and site administrators with full privileges.
Wired stations
This shows the Nebula Device’s connected wired clients’ MAC address, IPv4 Address, Port number, and the VLAN ID assigned to the wired station.
*At the time of writing Wired stations is available for WAC500H only.
Access point usage and connectivity
Move the cursor over the chart to see the transmission rate at a specific time.
Zoom
Select to view the statistics in the past 2 hours, day, week, or month.
Pan
Click to move backward or forward by one day or week.
Switches
This screen allows you to view the detailed information about a Nebula Device in the selected site. Click Site-wide > Devices > Switches to access this screen.
Site-wide > Devices > Switches
The following table describes the labels in this screen.
Site-wide > Devices > Switches 
Label
Description
Switches
Select to view the Nebula Device information and connection status in the past two hours, day, week or month.
Click this button to reload the data-related frames on this page.
Action
Perform an action on the selected Nebula Devices.
Reboot
Restart the Nebula Device.
Upgrade
Upgrade the firmware on the Nebula Device.
Tag
Select one or multiple Nebula Devices and click this button to create a new tag for the Nebula Devices or delete an existing tag.
Move
Select one or multiple Nebula Devices and click this button to move the Nebula Device to another site or remove the Nebula Device from the current site.
Search
Specify your desired filter criteria to filter the list of Nebula Devices.
Switch
This shows the number of Nebula Devices connected to the site network.
Export
Click this button to save the Nebula Device list as a CSV or XML file to your computer.
Status
This shows the status of the Nebula Device. Hover the mouse over the icon for a brief description.
Green: The Nebula Device is online and has no alerts.
Amber: The Nebula Device has alerts.
Red: The Nebula Device is offline.
Gray: The Nebula Device has been offline for 7 days or more.
With lock: The Nebula Device is locked by Auto Configuration Recovery. See Site-wide > Configure > Switches > Switch settings for more information.
Move the cursor over an amber alert icon to view the alerts the NCC generates when an error or something abnormal is detected on the IPTV network.
Name
This shows the descriptive name of the Nebula Device.
Tag
This shows the user-specified tag for the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device.
LAN IP
This shows the local (LAN) IP address of the Nebula Device.
Public IP
This shows the global (WAN) IP address of the Nebula Device.
Model
This shows the model number of the Nebula Device.
# Port
This shows the number of the Nebula Device port which is connected to the NCC.
Configuration status
This shows whether the configuration on the Nebula Device is up-to-date.
Bandwidth Utilization (Uplink port)
This shows what percentage of the upstream/downstream bandwidth is currently being used by the Nebula Device’s uplink port.
Production information
This shows the Nebula Device’s product description to explain what this Nebula Device is and also provides information about its features.
Connectivity
This shows the Nebula Device connection status. Nothing displays if the Nebula Device is offline.
The gray time slot indicates the connection to the NCC is down, and the green time slot indicates the connection is up. Move the cursor over a time slot to see the actual date and time when a Nebula Device is connected or disconnected.
Description
This shows the user-specified description for the Nebula Device.
Serial number
This shows the serial number of the Nebula Device.
Firmware status
This shows whether the firmware installed on the Nebula Device is up-to-date.
Firmware type
This shows Stable when the installed firmware may not have the latest features but has passed Zyxel internal and external testing.
This shows Latest when the installed firmware is the most recent release with the latest features, improvements, and bug fixes.
This shows General Availability when the installed firmware is a release before Latest, but is still undergoing Zyxel external testing.
This shows Dedicated when the installed firmware is locked and Zyxel support is monitoring. Contact Zyxel customer support if you want to unlock the firmware in order to upgrade to a later one.
This shows Beta when the installed firmware is a release version for testing the latest features and is still undergoing Zyxel internal and external testing.
This shows N/A when the Nebula Device is offline and its firmware status is not available.
Firmware availability
This shows whether the firmware on the Nebula Device is Up to date, there is firmware update available for the Nebula Device (Upgrade available), or a specific version of firmware has been installed by Zyxel customer support (Locked).
Current version
This shows the firmware version currently installed on the Nebula Device.
Usage
This shows the amount of data that has been transmitted or received by the Nebula Device’s clients.
IP type
This shows whether the IP address was assigned automatically (DHCP), or manually (Static IP).
Click this icon to display a greater or lesser number of configuration fields. For faster loading of data, select only the configuration fields listed that do NOT take a long time to fetch data.
Switch Details
Click a Nebula Device entry in the Site-wide > Devices > Switches screen to display individual Nebula Device statistics.
Site-wide > Devices > Switches: Switch Details
*The banner This switch is currently protected by Auto Configuration Recovery will display when this Nebula Device is locked by NCC. Click the Unlock button to continue using the Nebula Device.
The following table describes the labels in this screen.
Site-wide > Devices > Switches: Switch Details 
Label
Description
Click this button to reload the data-related frames on this page.
Unlock
This button only appears when the Nebula Device is locked by NCC.
Click this button to continue using the Nebula Device.
Configuration
Click the edit icon to change the Nebula Device name, description, tags and address. You can also move the Nebula Device to another site. After modifying a Nebula Device name, the new name will be synchronized to the Nebula Device and can be seen by protocols such as SNMP and LLDP.
Name
This shows the descriptive name of the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device.
Serial number
This shows the serial number of the Nebula Device.
Description
This shows the user-specified description for the Nebula Device.
Address
This shows the user-specified address for the Nebula Device.
Tag
This shows the user-specified tag for the Nebula Device.
Status
LAN IP
This shows the local (LAN) IP address of the Nebula Device. It also shows the IP addresses of the gateway and DNS servers.
Click the edit icon to open a screen where you can change the IP address, VLAN ID number and DNS server settings.
DHCP server
This shows the IP address of the DHCP server.
Public IP
This shows the global (WAN) IP address of the Nebula Device.
Topology
Click Show to go to the Site-wide > Topology screen. See Topology.
RSTP status
This shows Disabled when RSTP is disabled on the Nebula Device. Otherwise, it shows the name or MAC address of the Nebula Device that is the root bridge of the spanning tree, and the bridge priority.
IGMP status
This shows whether IGMP is enabled on the Nebula Device. If IGMP is enabled, it also shows the ID number of the VLAN on which the Nebula Device learns the multicast group membership and the IP address of the Nebula Device interface in IGMP querier mode.
PoE status
This shows the power management mode, the amount of power the Nebula Device is currently supplying to the connected PoE-enabled devices and the total power the Nebula Device can provide to the connected PoE-enabled devices on the PoE ports. N/A displays if the Nebula Device does not support PoE.
Click the edit icon to open the PoE Configuration screen. See PoE Configuration.
History
Click Event log to go to the Site-wide > Monitor > Switches > Event log screen.
Configuration status
This shows whether the configuration on the Nebula Device is up-to-date.
Firmware availability
This shows whether the firmware on the Nebula Device is up-to-date or there is firmware update available for the Nebula Device.
Current version
This shows the firmware version currently installed on the Nebula Device.
Map
This shows the location of the Nebula Device on Google map (Map view or Satellite imagery view) or on a floor plan. Click Floor plan to display a list of existing floor plans. Each floor plan has a drawing that shows the rooms scaled and viewed from above. Drag-and-drop your Nebula Device directly on the Google map or click Position device to update the Nebula Device’s address (physical location).
Select GEO IP to use the public IP address of the Nebula Device.
Select Get my location from web browser to use the public IP address of the computer accessing the NCC portal.
Select Use the following address or coordinates to enter the complete address or coordinates of the Nebula Device.
*Nebula Devices that are offline cannot use GEO IP.
Photo
This shows the photo of the Nebula Device. Click Add to upload one or more photos. Click x to remove a photo.
Ports
This shows the ports on the Nebula Device. You can click a port to see the individual port statistics. See Switch Port Details. Move the pointer over a port to see additional port information. The port color indicates the connection status of the port.
Gray (#888888): The port is disconnected.
Orange (#FF8900): The port is connected and is transmitting data at 10 or 100 Mbps.
Green (#64BE00): The port is connected and is transmitting data at 1000 Mbps (1 Gbps).
Azure (#0079FF): The port is connected and is transmitting data at 2.5 Gbps.
Violet (#8800FF): The port is connected and is transmitting data at 5 Gbps.
Blue (#004FEE): The port is connected and is transmitting data at 10000 Mbps (10 Gbps).
When the port is in the STP blocking state, failed LACP negotiation state, or failed port authentication state, a blocked icon displays on top of the port ( for example) in the diagram.
Name
This shows the Nebula Device name configured in NCC.
Status
This shows the connection status of the port.
Type
This shows the port type (Trunk or Access), PVID, and allowed VLANs.
Speed
This shows the current connection speed of the port. If the speed is unavailable, this displays “Ethernet”.
LLDP
This shows the LLDP information received on the port.
Reset
This button only appears when the PoE port is connected to a PD (powered device). Follow the prompt and click Confirm to reboot the PD connected to this port.
*This button is not available for an uplink port.
Configure ports
Click this button to go to the Site-wide > Configure > Switches > Switch ports screen, where you can view port summary. See Switch Ports.
Live tools
Ping
Enter the host name or IP address of a computer that you want to perform ping in order to test a connection and click Ping.
Port Power Cycle
Enter the number of the ports and click the Reset button to disable and enable the ports again.
MAC table
This shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which ports.
You can define how it displays and arrange the data in the summary table below.
*This tab will appear for NSW100 and NSW200 Series only.
Switch tables
Import the following data into NCC:
MAC table. Click Run to show what device MAC address, belonging to what VLAN group (if any) is forwarded to which ports. You can define how it displays and arrange the data in the summary table.
Routing table. Click Run to show the routing destination, gateway, interface IP addresses, hop count, and routing methods. The routing table is only displayed for L3 Nebula Devices.
ARP table. Click Run to show the IP-to-MAC address mappings. The ARP table is only displayed for L3 Nebula Devices.
IP source guard. Click Run to show the static, DHCP snooping, blocked client entries, and expiration time of DHCP snooping and blocked entries on the Nebula Device.
After clicking Run in IP source guard, the IPSG (IP source guard) table could be empty if:
It takes about 5 minutes to refresh the address table after you apply the Nebula Device settings
Protected port is not specified
NCC may not get completed data from Nebula Device due to unstable network. Please retry.
Reboot switch
Click the Reboot button to restart the Nebula Device.
Locator LED
Enter a time interval between 1 and 60 minutes to stop the locator LED from blinking. The locator LED will start to blink for the number of minutes set here.
Click the button to turn on the locator feature, which shows the actual location of the Nebula Device between several Nebula Devices in the network.
Remote Access
Select to use TCP (Transmission Control Protocol) Port 22 or 443 to establish a remote connection to this Nebula Device. The Nebula Device will create a reverse SSH (Secure SHell) connection. Then click Establish.
After clicking Ok, NCC will provide a remote connection IPv4 address and service port number. For example, Remote connection: 34.247.173.104:27086. Use this IPv4 address and port to connect to the Nebula Device using an SSH terminal emulator (for example, Putty). The remote session will be available for 30 minutes.
In case the connection cannot be established, confirm that the network allows Port 22 or 443.
*Use Remote Access for troubleshooting only.
Uplink usage
Move the cursor over the chart to see the transmission rate at a specific time.
Zoom
Select to view the statistics in the past 12 hours, day, week, month, 3 months or 6 months.
Pan
Click to move backward or forward by one day or week.
Power Consumption
 
Select to view the Nebula Device power consumption in the past two hours, day, week or month.
 
This shows the current, total, maximum and minimum power consumption of the Nebula Device.
y-axis
The y-axis shows how much power is used in Watts.
x-axis
The x-axis shows the time period over which the power consumption is recorded.
PoE Configuration
Use this screen to set the PoE settings for the Nebula Device. To access this screen, click the edit icon next to PoE Status in the Site-wide > Devices > Switches: Switch Details screen.
*To set PoE settings for an individual port, such as schedule, priority, and power mode, edit the Nebula Device’s port settings. For details, see Switch Ports.
Site-wide > Devices > Switches: Switch Details: PoE Configuration
The following table describes the labels in this screen.
Site-wide > Devices > Switches: Switch Details: PoE Configuration 
Label
Description
PoE Mode
Select the power management mode you want the Nebula Device to use.
Classification mode – Select this if you want the Nebula Device to reserve the Max Power (mW) to each powered device (PD) according to the priority level. If the total power supply runs out, PDs with lower priority do not get power to function.
Consumption mode – Select this if you want the Nebula Device to manage the total power supply so that each connected PD gets a resource. However, the power allocated by the Nebula Device may be less than the Max Power (mW) of the PD. PDs with higher priority also get more power than those with lower priority levels.
Close
Click this button to exit this screen without saving.
Saving
Click this button to save your changes and close the screen.
Switch Port Details
Use this to view individual Nebula Device port statistics. To access this screen, click a port in the Ports section of the Site-wide > Devices > Switches: Switch Details screen or click the details link next to a port in the Site-wide > Configure > Switches > Switch ports screen.
Site-wide > Devices > Switches: Switch Details: Port Details
The following table describes the labels in this screen.
Site-wide > Devices > Switches: Switch Details: Port Details 
Label
Description
Click this button to reload the data-related frames on this page.
Switch / Port
Select to view the port information and connection status in the past two hours, day, week or month.
Port
This figure shows the ports on the Nebula Device.
Click a port to go to the corresponding port details screen. The selected port is highlighted. Move the pointer over a port to see additional port information, such as its name, MAC address, type, and connection speed.
The port color indicates the connection status of the port.
Gray (#888888): The port is disconnected.
Orange (#FF8900): The port is connected and is transmitting data at 10 or 100 Mbps.
Green (#64BE00): The port is connected and is transmitting data at 1000 Mbps (1 Gbps).
Azure (#0079FF): The port is connected and is transmitting data at 2.5 Gbps.
Violet (#8800FF): The port is connected and is transmitting data at 5 Gbps.
Blue (#004FEE): The port is connected and is transmitting data at 10000 Mbps (10 Gbps).
When the port is in the STP blocking state, failed LACP negotiation state, or failed port authentication state, a blocked icon displays on top of the port ( for example) in the diagram.
Name
This shows the descriptive name of the port.
Status
This shows the connection status of the port.
MAC address
This shows the MAC address of the port.
Type
This shows the port type (Trunk or Access), PVID, and allowed VLANs.
Speed
This shows the current connection speed of the port. If the speed is unavailable, this displays “Ethernet”.
LLDP
This shows the LLDP information received on the port.
Configuration
Click the edit icon to open the Switch ports screen and show the ports that match the filter criteria (the selected port number). See Switch Ports.
Summary
This shows the port’s VLAN settings.
RSTP
This shows whether RSTP is disabled or enabled on the port.
Port mirroring
This shows whether traffic is mirrored on the port.
Status
Name
This shows the name of the port.
Status
This shows the status of the port.
LLDP
This shows the LLDP (Link Layer Discovery Protocol) information received on the port.
History
Click Event log to go to the Site-wide > Monitor > Switches > Event log screen.
Bandwidth Utilization
Current Utilization
This shows what percentage of the upstream/downstream bandwidth is currently being used by the port.
Maximum Utilization
This shows the maximum upstream/downstream bandwidth utilization (in percentage).
Minimum Utilization
This shows the minimum upstream/downstream bandwidth utilization (in percentage).
y-axis
The y-axis represents the transmission rate in Kbps (kilobits per second).
x-axis
The x-axis shows the time period over which the traffic flow occurred.
Power Consumption
Total
This shows the total power consumption of the port.
Current Consumption
This shows the current power consumption of the port.
Maximum Consumption
This shows the maximum power consumption of the port.
Minimum Consumption
This shows the minimum power consumption of the port.
y-axis
The y-axis shows how much power is used in Watts.
x-axis
The x-axis shows the time period over which the power consumption is recorded.
Packets Counters
TX/RX Unicast
This shows the number of good unicast packets transmitted/received on the port.
TX/RX Multicast
This shows the number of good multicast packets transmitted/received on the port.
TX/RX Broadcast
This shows the number of good broadcast packets transmitted/received on the port.
TX/RX Pause
This shows the number of 802.3x Pause packets transmitted/received on the port.
IGMP V2/V3
Query Rx
This shows the number of IGMP query packets received on the port.
Report Rx
This shows the number of IGMP report packets received on the port.
Report Tx
This shows the number of IGMP report packets transmitted on the port.
Report Drops
This shows the number of IGMP report packets dropped on the port.
Leave Rx
This shows the number of IGMP leave packets received on the port.
Leave Tx
This shows the number of IGMP leave packets transmitted on the port.
Leave Drops
This shows the number of IGMP leave packets dropped on the port.
Error Packets
RX CRC
This shows the number of packets received with CRC (Cyclic Redundant Check) errors. CRC errors indicate packet errors in the network, potentially caused by mismatching Ethernet speed/duplex, bad cables or transceivers, or malfunctioning client devices.
Length
This shows the number of packets received with a length that was out of range.
Runt
This shows the number of packets received that were too short (shorter than 64 octets), including the ones with CRC errors.
IPv4 Address
This shows the IP address of the incoming frame which is forwarded on the port.
*The IP address is obtained using one of the following three methods:
LLDP remote information
Information collected by the Nebula Security Gateway (NSG) in this site
Information collected by NCC when the client connected to Nebula
MAC Address
This shows the MAC address of the incoming frame which is forwarded on the port.
VLAN
This shows the VLAN group to which the incoming frame belongs.
Cable Diagnostics
Diagnose
Click Diagnose to perform a physical wire-pair test of the Ethernet connections on the port. The following fields display when you diagnose a port.
Channel
An Ethernet cable usually has four pairs of wires. A 10BASE-T or 100BASE-TX port only use and test two pairs, while a 1000BASE-T port requires all four pairs.
This displays the descriptive name of the wire-pair in the cable.
Pair Status
OK: The physical connection between the wire-pair is okay.
Open: There is no physical connection (an open circuit detected) between the wire-pair.
Short: There is a short circuit detected between the wire-pair.
Unknown: The Nebula Device failed to run cable diagnostics on the cable connected to this port.
Unsupported: The port is a fiber port or it is not active.
Cable Length
This displays the total length of the Ethernet cable that is connected to the port when the Pair Status is OK and the Nebula Device chipset supports this feature.
This shows N/A if the Pair Status is Open or Short. Check the Distance to fault.
This shows Unsupported if the Nebula Device chipset does not support to show the cable length.
Distance to fault (m)
This displays the distance between the port and the location where the cable is open or shorted.
This shows N/A if the Pair Status is OK.
This shows Unsupported if the Nebula Device chipset does not support to show the distance.
DDMI
This section is available only on an SFP (Small Form Factor Pluggable) port.
DDMI
Click DDMI (Digital Diagnostics Monitoring Interface) to display real-time SFP transceiver information and operating parameters on the port. You can also see the alarm and warning thresholds for temperature, voltage, transmission bias, transmission and receiving power.
Port
This shows the number of the port on the Nebula Device.
Vendor
This shows the vendor name of the transceiver installed in the port.
PN
This shows the part number of the transceiver installed in the port.
SN
This shows the serial number of the transceiver installed in the port.
Revision
This shows the firmware version of the transceiver installed in the port.
Date-code
This shows the date the installed transceiver’s firmware was created.
Transceiver
This shows the type and the Gigabit Ethernet standard supported by the transceiver installed in the port.
Calibration
This shows whether the diagnostic information is internally calibrated or externally calibrated.
Current
This shows the current operating parameters on the port, such as transceiver temperature, laser bias current, transmitted optical power, received optical power and transceiver supply voltage.
High Alarm Threshold
This shows the high alarm threshold for temperature, voltage, transmission bias, transmission and receiving power. A trap is sent when the operating parameter is above the threshold.
High Warn Threshold
This shows the high warning threshold for temperature, voltage, transmission bias, transmission and receiving power.
Low Warn Threshold
This shows the low alarm threshold for temperature, voltage, transmission bias, transmission and receiving power. A trap is sent when the operating parameter is below the threshold.
Low Alarm Threshold
This shows the low warning threshold for temperature, voltage, transmission bias, transmission and receiving power.
Security Router
This screen allows you to view the detailed information about the Nebula Device in the selected site. Click Site-wide > Devices > Security router to access this screen.
Site-wide > Devices > Security routerl
The following table describes the labels in this screen.
Site-wide > Devices > Security router 
Label
Description
Configuration
Click the edit icon to change the Nebula Device name, description, tags and address (physical location). You can also move the Nebula Device to another site or remove.
Name
This shows the descriptive name of the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device’s WAN port.
Serial number
This shows the serial number of the Nebula Device.
Description
This shows the user-specified description for the Nebula Device.
Address
This shows the user-specified address (physical location) for the Nebula Device.
Tags
This shows the user-specified tags for the Nebula Device.
Port
This shows the ports on the Nebula Device.
The port is highlighted in green color when it is connected and the link is up.
Move the pointer over a port to see additional port information, such as its name, connection status, MAC address, and connection speed.
Map
This shows the location of the Nebula Device on Google Maps (Map view or Satellite imagery view) or on a floor plan. Click Floor plan to display a list of existing floor plans. Each floor plan has a drawing that shows the rooms scaled and viewed from above. Drag-and-drop your Nebula Device directly on the Google map or click Position device to update the Nebula Device’s address (physical location).
Select GEO IP to use the public IP address of the Nebula Device.
Select Get my location from web browser to use the public IP address of the computer accessing the NCC portal.
Select Use the following address or coordinates to enter the complete address or coordinates of the Nebula Device.
*Nebula Devices that are offline cannot use GEO IP.
Photo
This shows the photo of the Nebula Device. Click Add to upload one or more photos. Click x to remove a photo.
Status
Public IP
This shows the IPv4 address of the WAN interface, and whether it was assigned automatically (DHCP), manually (Static IP), or by PPPoE.
Channel (Band)
This shows the channel ID and WiFi frequency band currently being used by the Nebula Device.
*This field only appears for ZyWALL ATP100W, USG FLEX 100W, and USG20W-VPN.
Usage
This shows the amount of data that has been transmitted or received by the Nebula Device’s clients.
Topology
Click Show to go to the Site-Wide > Topology screen. See Topology.
History
Click Event log to go to the Site-wide > Monitor > Security router > Event log screen.
Configuration status
This shows whether the configuration on the Nebula Device is Up-to-date.
Firmware availability
This shows whether the firmware installed on the Nebula Device is Up-to-date.
Current version
This shows the firmware version currently installed on the Nebula Device.
Network usage and connectivity
Move the cursor over the chart to see the transmission rate at a specific time.
Zoom
Select to view the statistics in the past 2 hours, 24 hours, 7 days, or 30 days.
Pan
Click to move backward or forward by one day or week.
Live tools
Ping
Enter the host name or IP address of a computer that you want to perform ping in order to test a connection and click Ping. You can select the interface (WAN, LAN, or VLAN) through which the Security Firewall sends queries for ping.
* 
To ping for VPN/routing issues, it is not necessary to connect an end-device on the LAN interface of the Nebula Device.
A routing problem is possible if the WAN interface can reach the Internet but not the LAN interface.
Traceroute
Enter the host name or IP address of a computer that you want to perform the traceroute function. This determines the path a packet takes to the specified computer.
DNS lookup
Enter a host name and click Run to resolve the IP address for the specified domain name.
Reboot gateway
Click the Reboot button to restart the Nebula Device.
 
Firewall
This screen allows you to view the detailed information about the Nebula Device in the selected site. Click Site-wide > Devices > Firewall to access this screen.
Site-wide > Devices > Firewall
The following table describes the labels in this screen.
Site-wide > Devices > Firewall 
Label
Description
Configuration
Click the edit icon to change the Nebula Device name, description, tags and address (physical location). You can also move the Nebula Device to another site or remove.
Name
This shows the descriptive name of the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device’s WAN port.
Serial number
This shows the serial number of the Nebula Device.
Description
This shows the user-specified description for the Nebula Device.
Address
This shows the user-specified address (physical location) for the Nebula Device.
Tags
This shows the user-specified tags for the Nebula Device.
Port
This shows the ports on the Nebula Device.
The port is highlighted in green color when it is connected and the link is up.
Move the pointer over a port to see additional port information, such as its name, connection status, MAC address, and connection speed.
Port
This shows the identity number of the selected port.
Port Group
This shows the name of the port group that the port belongs to.
Status
This shows the connection status of the port.
Map
This shows the location of the Nebula Device on Google Maps (Map view or Satellite imagery view) or on a floor plan. Click Floor plan to display a list of existing floor plans. Each floor plan has a drawing that shows the rooms scaled and viewed from above. Drag-and-drop your Nebula Device directly on the Google map or click Position device to update the Nebula Device’s address (physical location).
Select GEO IP to use the public IP address of the Nebula Device.
Select Get my location from web browser to use the public IP address of the computer accessing the NCC portal.
Select Use the following address or coordinates to enter the complete address or coordinates of the Nebula Device.
*Nebula Devices that are offline cannot use GEO IP.
Photo
This shows the photo of the Nebula Device. Click Add to upload one or more photos. Click x to remove a photo.
Status
CPU usage
This shows what percentage of the Nebula Device’s processing capability is currently being used.
Memory usage
This shows what percentage of the Nebula Device’s RAM is currently being used.
Session
This shows how many sessions the Nebula Device currently has. A session is a unique established connection that passes through, from, to, or within the Nebula Device.
Channel (Band)
This shows the channel ID and WiFi frequency band currently being used by the Nebula Device.
*This field only appears for ZyWALL ATP100W, USG FLEX 100W, and USG20W-VPN.
Usage
This shows the amount of data that has been transmitted or received by the Nebula Device’s clients.
Topology
Click Show to go to the Site-Wide > Topology screen. See Topology.
History
Click Event log to go to the Site-wide > Monitor > Firewall > Event log screen.
Configuration status
This shows whether the configuration on the Nebula Device is Up-to-date.
Firmware availability
This shows whether the firmware installed on the Nebula Device is Up-to-date.
Current version
This shows the firmware version currently installed on the Nebula Device.
WAN status
WAN Interface
This shows the descriptive name of the active WAN connection.
Status
This shows the connection status of the WAN interface (up or down).
IP
This shows the IP address of the WAN interface, and whether it was assigned automatically (DHCP), manually (Static IP), or by PPPoE.
Gateway
This shows the IP address of the default Nebula Device assigned to the WAN interface.
DNS Server
This shows the IP addresses of the DNS servers assigned to the WAN interface.
Network usage and connectivity
Move the cursor over the chart to see the transmission rate at a specific time.
Zoom
Select to view the statistics in the past 2 hours, 24 hours, 7 days, or 30 days.
Pan
Click to move backward or forward by one day or week.
Live tools
Traffic
This shows the WAN port statistics.
The y-axis represents the transmission rate for uploads and downloads.
The x-axis shows the time period over which the traffic flow occurred.
DHCP leases
This shows the IP addresses currently assigned to DHCP clients.
Ping
Enter the host name or IP address of a computer that you want to perform ping in order to test a connection and click Ping. You can select the interface (WAN, LAN, or VLAN) through which the Security Firewall sends queries for ping.
* 
To ping for VPN/routing issues, it is not necessary to connect an end-device on the LAN interface of the Nebula Device.
A routing problem is possible if the WAN interface can reach the Internet but not the LAN interface.
Traceroute
Enter the host name or IP address of a computer that you want to perform the traceroute function. This determines the path a packet takes to the specified computer.
DNS lookup
Enter a host name and click Run to resolve the IP address for the specified domain name.
Reboot device
Click the Reboot button to restart the Nebula Device.
Remote Access
This option is available only for the Nebula Device owner.
Establish a remote command line interface (CLI) connection to the Nebula Device by specifying the Port number and clicking Establish.
 
Security Gateway
This screen allows you to view the detailed information about a Nebula Device in the selected site. Click Site-wide > Devices > Security gateway to access this screen.
Site-wide > Devices > Security gateway
The following table describes the labels in this screen.
Site-wide > Devices > Security gateway 
Label
Description
Configuration
Click the edit icon to change the Nebula Device name, description, tags and address. You can also move the Nebula Device to another site or remove.
Name
This shows the descriptive name of the Nebula Device.
MAC address
This shows the MAC address of the Nebula Device.
Serial number
This shows the serial number of the Nebula Device.
Description
This shows the user-specified description for the Nebula Device.
Address
This shows the user-specified address for the Nebula Device.
Tags
This shows the user-specified tag for the Nebula Device.
Port
This shows the ports on the Nebula Device.
The port is highlighted in green color when it is connected and the link is up.
Move the pointer over a port to see additional port information, such as its name, connection status, MAC address, and connection speed.
Name
This shows the descriptive name of the port.
Status
This shows the connection status of the port.
MAC address
This shows the MAC address of the port.
Speed
This shows the current connection speed of the port. If the speed is unavailable, this displays “Ethernet”.
LLDP
This shows the LLDP information received on the port.
Map
This shows the location of the Nebula Device on the Google map (Map view or Satellite imagery view) or on a floor plan. Click Floor plan to display a list of existing floor plans. Each floor plan has a drawing that shows the rooms scaled and viewed from above. Drag-and-drop your Nebula Device directly on the Google map or click Position device to update the Nebula Device’s address (physical location).
Select GEO IP to use the public IP address of the Nebula Device.
Select Get my location from web browser to use the public IP address of the computer accessing the NCC portal.
Select Use the following address or coordinates to enter the complete address or coordinates of the Nebula Device.
*Nebula Devices that are offline cannot use GEO IP.
Photo
This shows the photo of the Nebula Device. Click Add to upload one or more photos. Click x to remove a photo.
Status
WAN1/WAN2
This shows the IP address, gateway, DNS, and VLAN ID information for the active WAN connection.
Public IP
This shows the global (WAN) IP address of the Nebula Device.
CPU usage
This shows what percentage of the Nebula Device’s processing capability is currently being used.
Memory usage
This shows what percentage of the Nebula Device’s RAM is currently being used.
Security Service
This shows whether Nebula Security Services (NSS) are enabled on the Nebula Device. Click What is this? to view the type of enabled security services.
When the gateway’s NSS license expires, NSS is automatically disabled. This field displays an edit button which you can use to re-enable the services after renewing the NSS license.
Usage
This shows the amount of data that has been transmitted or received by the Nebula Device’s clients.
Topology
Click Show to go to the Site-Wide > Topology screen. See Topology.
History
Click Event log to go to the Site-Wide > Monitor > Security gateway > Event log screen.
Configuration status
This shows whether the configuration on the Nebula Device is up-to-date.
Firmware availability
This shows whether the firmware installed on the Nebula Device is up-to-date.
Current version
This shows the firmware version currently installed on the Nebula Device.
Live tools
Internet traffic
This shows the WAN port statistics.
The y-axis represents the transmission rate in Kbps (kilobits per second).
The x-axis shows the time period over which the traffic flow occurred.
DHCP leases
This shows the IP addresses currently assigned to DHCP clients.
Ping
Enter the host name or IP address of a computer that you want to perform ping in order to test a connection and click Ping. You can select the interface through which the Nebula Device sends queries for ping.
Traceroute
Enter the host name or IP address of a computer that you want to perform the traceroute function. This determines the path a packet takes to the specified computer.
DNS lookup
Enter a host name and click Run to resolve the IP address for the specified domain name.
Reboot gateway
Click the Reboot button to restart the Nebula Device.
Remote Access
This option is available only for the Nebula Device owner.
Establish a remote connection by specifying the Port number and clicking Establish.
Network usage and connectivity
Move the cursor over the chart to see the transmission rate at a specific time.
Zoom
Select to view the statistics in the past 2 hours, day, week, or month.
Pan
Click to move backward or forward by one day or week.
Mobile Router
This screen allows you to view the detailed information about a Nebula Device in the selected site. Click Site-wide > Devices > Mobile router to access this screen. See the Mobile Router chapter for more information.