Initial Configuration

Context

For commercial deployment with a contract, license files are generated based on the order. Onsite engineers obtain the licenses that are bound to ESNs, download the licenses, and load them on the system.

For a remote disaster recovery system. You only need to apply a license for the active iMaster NCE-WAN cluster. After the DR configuration is complete, the system automatically synchronizes the license to the standby iMaster NCE-WAN cluster.

Prerequisites

• You have obtained the authorization ID (LAC code), activation code, or project contract number.
• You have obtained the ESDP permission.

  ESDP defines five roles: guest, carrier GTS, enterprise GTS, TAC, and channel. The following table describes the permissions and license application methods of the five roles:

  Role	Permission	License Application Method
  Guest	Can only download and activate commercial licenses by using authorization passwords.	An end user can obtain the guest permission on the license website after applying for a Uniportal account on Huawei website. A Huawei employee can obtain the guest permission when accessing the license website through a W3 account.
  Carrier GTS	Can perform the following operations on all commercial licenses and temporary licenses: activation and downloading, ESN change, and maintenance.	A Huawei employee can submit a carrier GTS application form on the license website.
  Enterprise GTS		A Huawei employee can submit an enterprise GTS application form on the license website.
  TAC		A Huawei employee can submit a TAC application form on the license website.
  Channel	Can download, activate, and maintain all commercial licenses in the contracts and apply for temporary licenses.	The administrator of a certified channel needs to log in to the user management system of Huawei enterprise BG to apply for enhanced permission of license website for the employees of the channel.

Procedure

1. Choose System > Administrator > License Management on the home page.
2. Click Obtain ESN to obtain the ESN.

3. Log in to the Huawei ESDP (https://app.huawei.com/sdp/portal.html) and choose License Activation > Entitlement Activation to access the License Activation page.
4. On the page, search activation IDs based on the entitlement ID and select the desired ID.

5. Click Next and enter the ESN of the desired server.

6. Click Next and then Activate License.

7. Click Download to download the license file.

Context

A permanent license defines the number of devices that can be added in a resource item. For example, if the resource item of AR100 series devices is 100, iMaster NCE-Campus allows to add a maximum of 100 AR100 series devices. If there are more than 100 devices, the excess AR100 series devices cannot be added to iMaster NCE-Campus.

In enterprise-built private cloud scenarios, the system administrator directly imports global permanent license files when constructing the cloud management platform. Tenants do not need to purchase the license activation code from the MSP.

The system administrator can manage global permanent licenses only when the system administrator logs in to iMaster NCE-Campus for the first time and sets the license mode to Global Permanent Mode.

Prerequisites

The iMaster NCE-CampusInsight license file has been imported to iMaster NCE-Campus. Before interconnecting iMaster NCE-Campus to iMaster NCE-CampusInsight, you need to synchronize the iMaster NCE-CampusInsight license to iMaster NCE-Campus. For details, see Configuring Interconnection with iMaster NCE-CampusInsight.

Procedure

1. Choose System > Administrator > License Management on the home page.
2. To load a license file, click Upload License.

   In the Select License File dialog box, select the obtained license file. License files of iMaster NCE-Campus and iMaster NCE-CampusInsight can be uploaded. If iMaster NCE-Campus is interconnected with iMaster NCE-CampusInsight, you can upload the iMaster NCE-CampusInsight license through iMaster NCE-Campus.

   If the license fails to be loaded, the possible reasons are as follows:

   • The license file signature is incorrect.
   • The license file is tampered with.
   • The license file type is incorrect.
   • The license file size exceeds 50 KB.
   • The license is invalid or has expired.

   If the preceding errors occur, contact technical support engineers.

3. Click OK. The license file is loaded successfully. Click to view the detailed information about the loaded license file.
   • After a license is loaded successfully, you can view the software ID for SnS charging and authentication.
   • License expiration time recorded in the license file: indicates the expiration time of the license on iMaster NCE-Campus. After the license expires, it will become unavailable, for example, devices can no longer be managed by iMaster NCE-Campus.
   • License SnS expiration time recorded in the license file: indicates the expiration time of SnS (maintenance service and remote technical support). After SnS expires, Huawei stops providing maintenance services and remote technical support.

4. Click the License Information tab to view the license information.
   • Select NCE-Campus from the Product name drop-down list to view the detailed information about controller licenses.

   • Select CampusInsight from the Product name drop-down list to view the detailed information about iMaster NCE-CampusInsight licenses.

Follow-up Procedure

• Revoking a license

  When replacing the iMaster NCE-Campus server, you can revoke the license to ensure that the license can still be used on the new server.

  Click Revoke License to revoke the commercial license on the old iMaster NCE-Campus server. A revocation code is generated. You can use the revocation code and the ESN of the new iMaster NCE-Campus server to apply for a new commercial license on ESDP. Then, all resources in the revoked license are available for use.

  After you click in the Operation column for the desired license file, the commercial license enters the grace period which lasts two months. If you do not load a new license before the grace period ends, the license is automatically disabled and all devices are forced offline.

• Removing a license

  After you click in the Operation column for the desired license file, iMaster NCE-Campus enters a license-unloaded state.

  Only when no tenant under the system administrator has devices, you can remove the license.

Context

For licenses that cannot be redistributed: The system administrator directly imports license files, and tenants do not need to purchase the license activation code from the MSP.

The system administrator can manage and redistribute global subscription licenses only after logging in to iMaster NCE-Campus for the first time and setting the license mode to Global Subscription Mode. If Global Subscription Mode is selected, set License Redistribution to No.

Procedure

1. Choose System > Administrator > License Management on the home page.
2. Click Upload License and load the license. If iMaster NCE-Campus interconnects with iMaster NCE-CampusInsight, you need to import the license files of both iMaster NCE-Campus and iMaster NCE-CampusInsight.

   In the Select License File dialog box, select the obtained license and click OK.

   If the license fails to be loaded, the possible causes are as follows:

   • The license file signature is incorrect.
   • The license file is tampered with.
   • The license file type is incorrect.
   • The license file size exceeds 50 KB.
   • The license is invalid or has expired.

   If the preceding errors occur, contact technical support personnel.

3. Query license information.
   • Check the license resources.

     Statistics on the total license consumption can be collected by resource item.

   • Check the daily consumption of license resources.

     The daily consumption of license resources can be queried by date.

   • View the license import record. Click to view the detailed information about a license file.

     After a license is loaded successfully, you can view the software ID for SnS charging and authentication.

Follow-up Procedure

• Recalculate the expiration time.

  Click Recalculate Expiration Time to set resource items with different expiration time to the same expiration time for easy management. This operation is irreversible.

  The function of recalculating the expiration time can be used to integrate resources. For example, there are three types of license resource items, including AR100 series: 10 device-days with 5 yuan per device-day; AR1200 series: 20 device-days with 10 yuan per device-day; and indoor AP series: 20 device-days with 20 yuan per device-day. Assume that iMaster NCE-Campus manages 5 AR100 series devices and 10 AR1200 series devices. You can click Recalculate Expiration Time to integrate license resources. The formulas are as follows: 10 x 5 + 20 x 10 + 20 x 20 = 650, 5 x 5 + 10 x 10 = 125 (consumption of all devices in a day), 650/125 = 5 R 25 (remainder 25). Then the license resources of the AR100 and AR1200 series devices will expire in five days. The remaining 25 yuan will be added to the new license resource pool to be integrated in the next calculation.

  This function enables resource allocation to be more flexible. Expired resources can be integrated so that they can be used normally.

• Click Expiration Notification, enable Receive expiration notification, and configure the email addresses of recipients. Notification emails will be sent to the specified email addresses when a license is about to expire.
  • The system administrator must configure an email server before enabling Receive expiration notification. Otherwise, Receive expiration notification cannot be enabled. For details, see Configuring an Email Server.
  • A maximum of five email addresses can be configured. Email addresses need to be separated with line breaks.
  • If a license resource item is about to expire in less than 30 days, the system will send notification emails at 02:25 every day.
  • If license expiration notification is configured, the license expiration email is sent only to the email addresses specified in Notified object. In this case, you are advised to specify the email address of the tenant administrator in Notified object.

• Export or send a license usage report.
  • Export the license usage report. Click Export, and select CSV or HTML. The license usage report is exported into a CSV or HTML file.

  • Configure the system to send the license usage report immediately. Click Send Email, and select Immediately. On the Send Immediately page that is displayed, click Add, configure the email address to which the report needs to be sent, select the report format (CSV or HTML), and click . Set the fiscal year and date, and click OK. The license usage report is converted into an HTML or a CSV file and sent to the specified email address.

    The sent report records the license usage data of last calendar month. For example, if you configure the system to send the license usage report in July, the report recording the license usage data of June is sent.

    Before enabling Receive expiration notification, configure an email server. For details, see Configuring an Email Server.

  • Configure the system to send the license usage report periodically. Click Send Email and select Periodically. On the Send Periodically page that is displayed, set Export enabling to , specify the report name as well as the fiscal year and date, and click Add. Configure the email address to which the report needs to be sent, select the report format (CSV or HTML), and click . Select the report sending time, and click OK. The license usage report is converted into an HTML or a CSV file and sent to the specified email address.

Context

For licenses that can be redistributed: The system administrator can redistribute a license to an MSP administrator in package mode, and then the MSP administrator allocates license resources to tenants for refined license management.

The system administrator can manage and redistribute global subscription licenses only after logging in to iMaster NCE-Campus for the first time and setting the license mode to Global Subscription Mode. If Global Subscription Mode is selected, set License Redistribution to Yes.

By default, the system grants a one-year license resource for iMaster NCE-Campus and a 30,000 device-day subscription license resource. You need to purchase new license resources before the license expires to prevent service interruption.

Procedure

1. Import the license file.
   1. Choose System > Administrator > License Management on the home page.
   2. Click Upload License and load the license. If iMaster NCE-Campus interconnects with iMaster NCE-CampusInsight, you need to import the license files of both iMaster NCE-Campus and iMaster NCE-CampusInsight.

      In the Select License File dialog box, select the obtained license and click OK.

      If the license fails to be loaded, the possible causes are as follows:

      • The license file signature is incorrect.
      • The license file is tampered with.
      • The license file type is incorrect.
      • The license file size exceeds 50 KB.
      • The license is invalid or has expired.

      If the preceding errors occur, contact technical support personnel.

   3. Query license information.
      • Check the license resource control.

        Statistics on the total license consumption can be collected by resource item.

      • Check the daily consumption of license resources.

        The daily consumption of license resources can be queried by date.

      • View the license import record. Click to view the detailed information about a license file.

        After a license is loaded successfully, you can view the software ID for SnS charging and authentication.

2. Configure a license package.

   Click the License Package tab, click Create, select the device series contained in the license package, and click Apply.

   If iMaster NCE-Campus interconnects with iMaster NCE-CampusInsight, you need to configure license packages of both iMaster NCE-Campus and iMaster NCE-CampusInsight.

3. Allocate the package to the MSP.
   1. Click the MSP License tab. Click on the left of the MSP administrator to view the license status and resource consumption of the MSP.

   2. Click Create, click in the Package Name column to select a license package, and click OK.

   3. Configure the number of license resources (unit: device x day) and then click . The license package is allocated to the MSP.

   4. (Optional) Click to freeze the license package. The frozen license package cannot be redistributed or used. Click to change the number of resources in the license package. Click to delete an allocated package.

      Freezing or deleting a license package will cause the related devices to go offline. Therefore, exercise caution when performing these operations.

   5. (Optional) Click Disable Strategy and set Unified deactivation time and Longest Arrears (days) of the license package.

      The license will be deactivated either at the deactivation time set in Disable Strategy or the actual expiration time of the license, whichever is earlier.

4. Log in to iMaster NCE-Campus as an MSP and allocate license resources to tenants. For details, see Activating and Allocating Licenses (Global Subscription Mode + Enable License Redistribution).

Follow-up Procedure

Click Recalculate Expiration Time to set resource items with different expiration time to the same expiration time for easy management. This operation is irreversible.

The function of recalculating the expiration time can be used to integrate resources. For example, there are three types of license resource items, including AR100 series: 10 device-days with 5 yuan per device-day; AR1200 series: 20 device-days with 10 yuan per device-day; and indoor AP series: 20 device-days with 20 yuan per device-day. Assume that iMaster NCE-Campus manages 5 AR100 series devices and 10 AR1200 series devices. You can click Recalculate Expiration Time to integrate license resources. The formulas are as follows: 10 x 5 + 20 x 10 + 20 x 20 = 650, 5 x 5 + 10 x 10 = 125 (consumption of all devices in a day), 650/125 = 5 R 25 (remainder 25). Then the license resources of the AR100 and AR1200 series devices will expire in five days. The remaining 25 yuan will be added to the new license resource pool to be integrated in the next calculation.

This function enables resource allocation to be more flexible. Expired resources can be integrated so that they can be used normally.

Context

Using the device whitelist function, you can control devices that can register with iMaster NCE-Campus based on the device ESNs.

After this function is enabled, devices whose ESNs are not in the whitelist are regarded as unauthorized devices.

• A tenant administrator can only add devices whose ESNs are in the whitelist to iMaster NCE-Campus.
• Unauthorized devices that have been added to iMaster NCE-Campus before the device whitelist function is enabled cannot go online after they go offline.

Procedure

1. Choose System > System Management > Device Whitelist from the main menu.
2. Switch on Enable device whitelist.

3. Add device ESNs to the device whitelist.
   • Batch import device ESNs

     Click Import. In the dialog box that is displayed, download the Excel template, enter device ESNs in the template, and import the template as prompted.

   • Add device ESNs one by one

     Click Create. In the dialog box that is displayed, click Add and add device ESNs one by one.

You can click Export to export information about all unauthorized devices currently deployed on the network to a CSV file.

Prerequisites

You have purchased related services from the map service provider and obtained the API address and key of the map. For details about how to apply for a key value, see Google Maps Key Application Procedure.

Procedure

1. Choose System > System Management > Third-Party Service, and click the Map URL Settings tab.
2. Click Edit corresponding to the map, enter values of API address and Key, and select Instructions for Use.

3. Click OK.

Google Maps Key Application Procedure

1. Access the Google Maps official website at https://developers.google.com/maps/documentation/javascript/get-api-key.
2. Register a Google account and log in.
3. Create a Google Maps project.
   1. Choose Set up in Cloud Console from the navigation pane. Under Creating a project, click Create new project.

   2. Enter project information and click CREATE to create a project.

4. Apply for an API key.
   1. Choose Set up in Cloud Console from the navigation pane. Under Enabling APIs, click Enable the Maps JavaScript API.

   2. Select the created project and click ENABLE to enable the Maps JavaScript API function.

   3. On the Credentials tab page, click CREATE CREDENTIALS and click API key.

   4. Obtain the API key.

5. (Optional) Remove the Google Maps watermark.

   There is a watermark on Google Maps by default. You need to pay fees if you want to remove the watermark from the map.

   1. Choose Set up in Cloud Console from the navigation pane. Under Creating budgets and setting alerts, click Go to the Billing page.

   2. Click ADD BILLING ACCOUNT.
   3. Enter personal information.

   4. Click START MY FREE TRIAL.

Parameter Description

Context

• In HUAWEI public cloud scenarios, a unique domain name is provided for southbound cloud managed devices to go online. Cloud managed devices are configured with a unique domain name before delivery so that they can implement plug and play.
• In MSP-owned cloud scenarios, iMaster NCE-Campus can connect to Huawei registration center. A unique domain name is provided for southbound cloud managed devices to go online. Cloud managed devices are configured with a unique domain name before delivery so that they can implement plug and play.
• In on-premises scenarios, no unified IP address or domain name can be provided for southbound cloud managed devices. Therefore, the default IP address of iMaster NCE-Campus must be manually changed on the cloud managed devices.

The registration center connects to iMaster NCE-Campus in the northbound direction and uses a unique southbound IP address to connect to cloud managed devices in the southbound direction. To synchronize device data from the registration center, an administrator can configure interconnection between iMaster NCE-Campus and the registration center. Preset with the domain name of the registration center, cloud managed devices can obtain the IP address of iMaster NCE-Campus from the registration center and then send registration requests to iMaster NCE-Campus, implementing device plug-and-play.

Procedure

1. Contact technical support engineers to obtain the account, password, and trust certificate of the registration center.
2. (Optional) Log in to iMaster NCE-Campus as a system administrator. Choose System > System Management > Certificate Management
3. Choose Service Certificate Management from the navigation pane. On the Services page, click RegisterCenter.
4. Click the Trust Certificate tab, click Import, enter information about the certificate file to upload, select the desired certificate file of the registration center, and click Submit to upload the certificate file to iMaster NCE-Campus.

   By default, iMaster NCE-Campus has a built-in certificate for interworking with the registration center. If the certificate of the registration center is changed, you need to obtain a new certificate and update the old one.

   According to standards, the trust certificate of the registration center named as RegisterCenterTrust.cer. If the obtained trust certificate does not have a standard name, modify the name manually before you upload it.

5. Choose System > System Management > Third-Party Service. In the Registration Query Center Settings tab, enter the address, user name, and password of the registration center. Select the certificate file, and click Apply.

   The address of the registration center is register.naas.huawei.com.

   • If the authentication is successful, the system displays the Configuration successful message.
   • If the user name or password is incorrect, the system displays the Incorrect user name or password message. Check whether the user name and password are correct.
   • If the network is abnormal, the system displays the Network exception. Please check the network message. Check the network connection.

Context

If iMaster NCE-Campus needs to send emails to users, you need to configure an email server first.

iMaster NCE-Campus needs to send emails in the following scenarios:

• If the system administrator, MSP administrator, or tenant administrator forgets the password, iMaster NCE-Campus sends a reset password to the administrator through an email.
• After the system administrator performs alarm settings on iMaster NCE-Campus, iMaster NCE-Campus sends emails to notify users of reported alarms.
• When the system administrator deletes ESNs or devices, a notification email is sent to the tenant administrator if needed.
• If the tenant administrator wants to use the email-based deployment function, iMaster NCE-Campus needs to send deployment emails to related personnel.
• iMaster NCE-Campus sends a notification email to a tenant if a tenant license is about to expire.
• When portal authentication is configured for guest access, you need to set the approver notification mode or guest notification mode to email notification.

Procedure

1. Upload an email server certificate.
   1. Contact the SMS server provider to obtain a certificate file.
   2. Choose System > System Management > Certificate Management from the main menu.
   3. Choose Service Certificate Management from the navigation pane. On the Services page, click CampusBaseServiceServerConfigMoudle.
   4. Click the Trust Certificate tab and click Import. On the displayed page, enter the certificate information, select the desired email server certificate, and click Submit to upload the certificate to iMaster NCE-Campus.

2. Choose System > System Management > Third-Party Service. Click the Email Server tab.
3. Set parameters for connecting to the email server.

   If the email server uses a third-party CA certificate, you are advised to disable Validate server certificate.

4. Click Test to verify the email sending function.
   • If the message "The test succeeds" is displayed and the mailbox receives the test email, the configuration is successful. Click Save.
   • If the message "The test succeeds" is displayed but the mailbox does not receive the test email, check whether the email function of the SMTP server is normal.
   • If the message "Failed to connect to the email server" is displayed, check whether the above parameters are correctly configured.
     • Affected by the network quality and performance of the SMTP server, the time of receiving emails will be delayed within two minutes.
     • Some SMTP providers set the right control for third-party application access. If the test fails, check whether the function of controlling third-party application access is enabled on the SMTP server and set password to the authentication password of the SMTP server.
     • Limited by security policies of email service providers, administrators may fail to receive emails in some scenarios. If no email is received, log in to the email service website or contact the email service provider to check whether the email is returned or other exceptions occur. Alternatively, replace the email server and try again.

Parameter Description

Context

If SMS authentication needs to be used, configure an SMS server. Administrators can configure an SMS server template in which an SMS gateway is specified. The SMS function is implemented after account information is configured in the SMS server template.

By default, the system is pre-configured with the following SMS server connection parameters:

• fungo: http://qxt.fungo.cn/Recv_center. This is the SMS platform of fungo.cn (Beijing, China).
• twilio: https://api.twilio.com:8443/2010-04-01/Accounts/{USERNAME}/Messages.json. To use this SMS server, access www.twilio.com and apply for an account.

Procedure

1. Import an SMS server certificate.
   1. Contact the SMS server provider to obtain a certificate file.
   2. Choose System > System Management > Certificate Management from the main menu, and click the Trusted Certificate tab.
   3. Choose Service Certificate Management from the navigation pane. On the Services page, click CampusBaseServiceServerConfigMoudle.
   4. Click the Trust Certificate tab and click Import. On the displayed page, enter the certificate information, select the desired SMS server certificate, and click Submit to upload the certificate to iMaster NCE-Campus.

2. Configure an SMS server template.
   1. Choose System > System Management > Third-Party Service from the main menu. Click the SMS Platform tab.
   2. Click Create and create an SMS server template.
      • To configure an HTTP SMS server template, set SMS Service type to HTTP SMS Service.
        • Each host of iMaster NCE-Campus must be able to ping the SMS server address specified by URL address successfully.
        • If a domain name is used as the SMS server address, the domain name must be resolved correctly by each host of iMaster NCE-Campus. This domain name can be resolved into the corresponding public IP address by a DNS server. Alternatively, the mapping between the domain name and public IP address can be added to the /etc/hosts file on each host.
      • To configure an SMPP SMS server template, set SMS Service type to SMPP SMS Service.

        The SMPP SMS server IP address must be a private IP address.

        • Class A private IP address range: 10.0.0.0 to 10.255.255.255.
        • Class B private IP address range: 172.16.0.0 to 172.31.255.255.
        • Class C private IP address range: 192.168.0.0 to 192.168.255.255.

   3. Click Apply.

• Configure the SMS server.
  1. Choose System > System Management > Third-Party Service from the main menu. Click the SMS Server tab.
  2. Select an SMS Platform, and configure the related data.

     HTTPS is recommended because it is more secure than HTTP.

     • Set SMS Service type to HTTP SMS Service and select fungo from the SMS platform drop-down list box.

     • Set SMS Service type to HTTP SMS Service and select twilio from the SMS platform drop-down list box.

     • Set SMS Service type to SMPP SMS Service and select the created SMS template from the SMS platform drop-down list box.

  3. Click Test to verify validity of the SMS message sending function.
     • If the test succeeds, the message "The test succeeds" is displayed, and you can receive the test SMS message from iMaster NCE-Campus.
     • If the test fails, the message "Failed to test the SMS serve" is displayed. Perform operations according to the scenarios:
       • If an error code is displayed in the dialog box, check the product documentation of the SMS service provider for the cause of the error, and obtain the troubleshooting method.
       • If no error code is displayed in the dialog box, contact the system administrator to check the URL specified in the SMS server template to see whether the SMS server is reachable.
  4. After the test is successful, click Save.

Parameter Description

Context

After you click to obtain an SMS verification code, no SMS message may be received due to poor network signals or mobile phone issues. In this case, you can obtain a new verification code one minute later. The validity period of a verification code is five minutes. You will be locked for 10 minutes if you apply for another verification code before the current verification code expires and fail to be authenticated after applying for a verification code for more than five consecutive times.

Prerequisites

iMaster NCE-Campus has connected to an SMS gateway.

Procedure

1. Choose System > System Management > Account Information from the main menu, and click Basic Information.
2. Click to the right of Mobile number. In the displayed window, complete the verification as prompted to bind the current account to the specified mobile number.

3. Click Modify next to SMS verification upon login. In the displayed window, enable SMS verification upon login and complete the verification using the SMS verification code.

Verification

After configuring SMS authentication, perform the following operations to check whether the configuration is successful.

1. Log out and log in to iMaster NCE-Campus again. After the user name and password are verified successfully, the Login Verification page is displayed.
2. Click Obtain Verification Code. After receiving an SMS verification code, enter it and click Confirm. If you log in to iMaster NCE-Campus successfully, the configuration is successful.