User Guide: AWC plug-in version 3.8.0 for VST-VRT

Create Account

Quick Tour > Configure Smart Connect (AWC-SC) > Create Account

Now that we have a Management Group for the network we chose, let's create an account to manage APs in the group.
Vista Manager EX and the AWC Plug-in share a single account information database.

Here, create a user to manage the "3F group".

Note
You do not have to create an additional account if you plan to use the default Admin account to manage all APs.
  1. Select "User Management" from the Vista Manager EX main menu.

  2. Click "Create" at the top right of the screen.
    The "New User" screen will appear.


  3. Enter a username, a full name and an email address.
    Here we enter the following data:

    Table 1: Account Configuration 1
    Item Name Value Description
    Username
    		 3f_manager
    		 An account ID for the user, which is used to log in.
    Note
    The username cannot be changed once created.
    Note
    The username is not reusable and should be unique through the whole lifetime of an Vista Manager EX / AWC Plug-in system. That is, once an account has been created with a username, the username cannot be used for another account, even if you delete the original account.
    Please carefully consider the account policy etc. before creating one.
    Full Name 3F Manager A display name for the user, such as their full name. The full name should be less than or equal to 100 characters in length.
    Email
    		 3f_manager@example.com
    		 The email address to be used for password recovery and license expiry notification. Please specify a valid email address.
    Note
    If an obsolete account is deleted, the email address associated with it at the time of deletion is not reusable. If you are going to delete an account, and if it is possible for the email address owner to have another account in the future, we recommend you change the email address of the obsolete account to a dummy address before deleting the account.


  4. Enter a password.
    Then enter the same password again for confirmation.

    Table 2: Account Configuration 2
    Item Name Value Description
    Password
    		 t0psecret!
    		 Password for the user.
    The password should have 8 or more characters and contain characters from each category of digits, alphabet, and symbols (! @ # $ % ^ & * ( ) can be used).
    Confirm Password Enter the same password again for confirmation.


  5. Select an account type.
    Here we select "User" because we want to allow the user to configure "area1" only.

    Table 3: Account Configuration 3
    Item Name Value Description
    Account Type
    		 User
    		 Select the type of account.
    • Admin
      Can use all functions of Vista Manager EX, including user and system settings.
    • User
      Can only change or check the status and settings of areas to which permissions are given separately.


  6. If you specify "User" for the Account Type, select the user's permissions for Vista Manager EX Service Monitoring and the user's network access permissions for various "areas" (AMF areas, the AWC Plug-in's Management Group and the SNMP Plug-in's Subnet).

    Table 4: Account Configuration 4
    Item Name Value Description
    Permissions
    		 Read Only
    		 Select the user's permissions for Vista Manager EX Service Monitoring.
    • Read Only
      This user can only view Service Monitoring.
    • Read/Write
      The Admin can view, create, edit, and delete Service Monitors.
    This option is not displayed when the account type is set to "Admin". The Admin can view, create, edit, and delete Service Monitors.
    SSH Permissions
    		 Off
    		 If the Account Type is "User", the option for the permission of SSH connection to the AMF devices in authorized areas is displayed.
    This option is not displayed when the account type is set to "Admin". Admins can connect to all the AMF devices via SSH.
    Network Permissions
    		 3F Group - Read/Write
    other areas - No Permission
    		 If you specify "User" as the Account Type, select the user's access permission for each area. The default is "No Permission".
    "Area" here stands for the following elements:
    • "AMF Area" in the AMF Network
    • "Management Group" of the AWC Plug-in
    • "Subnet" of the SNMP Plug-in
    Areas are listed in alphabetical order, regardless of their type.

    You can choose one from the following permission levels for each area:
    • No Permission
      No information about the area is shown.
      Note
      When a user logs in who has "No Permission" set for an area, Vista Manager EX's "My Account" page displays the area name and that the user has "No Permission" on the area. In multi-tenant usage, to prevent a user from knowing another user's area, we recommend you avoid giving the areas names that are too relevant or identifiable, such as company names.
    • Read Only
      Users at this level can view the area's status.
      The user can view topology maps of areas and devices, device information, comments for devices and events, and logs of Abnormal and Normal events.
      For plug-in areas, the user can only view device information in the area.
    • Read/Write
      The user can view the area's status and can perform certain operations on the area.
      Operations include performing AMF device backup, SSH to device, editing notes for devices and events, and changing backup configuration on the AMF controller and masters.
      For plug-in areas, the user can view and configure devices in the area.
    This option is not displayed when the account type is set to "Admin". The Admin can view and configure all areas (AMF Areas, the AWC Plug-in's Management Groups, and the SNMP Plug-in's Subnets).


  7. If you specify "User" as the Account Type, select the Management Groups to which the user belongs.
    Management Groups created by an Admin are listed here. In this example, "3F Group" which were created inCreate Management Group is listed.

    Table 5: Account Configuration 5
    Item Name Value Description
    Management Group Permissions
    		 3F Group - checked
    		 When the AWC Plug-in is registered to Vista Manager EX, this field indicates the permissions for creating or editing management groups for "User" account types.
    The permissions are "Read Only".

    Also, from the registered management groups list, tick off the checkboxes for the ones that you want to allow the account user to manage.
    • When Ticked:
      The user will be able to perform the following operations on selected management groups.
      • View management group settings (Management Group name, Network name, Area name)
      • View, add, edit, and delete APs belonging to the management group
      • View, add, edit, and delete floor maps belonging to the management group
      • Create, add, and delete AP/CB/SC Profiles
    • When not Ticked:
      The Floor Maps, AP/CB/SC Profiles, and APs which belong to the management group will not be displayed when a user logs in with this account.
      Note that the "My Account" screen, which is displayed from the user ID in the administration column, shows the names of all management groups registered to the AWC Plug-in, regardless of whether they have been permitted for management or not.

    The management group must be created in advance with an "Admin" account type.
    Note
    It is not possible to allow an account to only view Floor Maps, AP/CB/SC Profile, and APs under management that belong to a management group while prohibiting changes to the management group.
    Note
    This option is not displayed when the account type is set to "Admin". You can edit all management groups and manage the floor maps, associated APs, and Profiles they belong to.


  8. When the account type is "User", you can set the user Read/Write permissions for each Site and Group in Vista Manager EX.
    Creating site or group structures do not affect the management by the AWC Plug-in, so we will ignore it for now.

  9. Confirm and adjust display refresh rates for the AWC Plug-in.

    Table 6: Account Configuration 6
    Item Name Value Description
    Refresh Rates
    		 (default)
    		 Specifies the automatic display refresh intervals (in seconds) for the AWC Plug-in.
    • AP Status (Default: 60 secs)
    • Floor MAP (Wireless Status) (Default: 60 secs)
    • Floor MAP (Associated Clients) (Default: 5 secs)
    • Floor Map Details (Smart Connect) (Default: 5 sec)


  10. Select a default Country Code for the AP profiles.

    Table 7: Account Configuration 7
    Item Name Value Description
    Country Code NZ - New Zealand Specify the default Country Code for AP Profiles in the AWC Plug-in. This is used to properly configure APs for radio frequency regulation in the country. The default is None.


  11. Select the Language for the web interface and configure the session Timeout.

    Table 8: Account Configuration 8
    Item Name Value Description
    Language English Select the language used on the management web interface.
    You can select from Auto Detect (Default), English, and Japanese. When set to "Auto Detect", the language is selected according to the web browser's language preference.
    Timeout 10 minutes Specify the web interface's session timeout.
    A login session times out and the login page reappears after the configured number of minutes of inactivity.
    Available options are 5 min, 10 min, 20 min, 30 min, 1 hour, and Never. If you set Timeout to Never, a login session never times out and automatic logout is disabled.
    Timeout is set to 5 minutes by default.


  12. Click "Save".
    The created user "3F Manager" is added to the list.



(C) 2022 Allied Telesis, Inc. All rights reserved.

C613-04121-00 Rev A

26 Mar 2022 18:28