UNM2000 Network Convergence Management System Operation Guide (Version B)
UNM2000 Network Convergence Management System Operation Guide (Version B)
UNM2000 Network Convergence Management System Operation Guide (Version B)
Network Convergence
Management System
Operation Guide
Version: B
Code: MN000001822
Legal Notice
are trademarks of FiberHome Telecommunication Technologies Co., Ltd.
(Hereinafter referred to as FiberHome)
All brand names and product names used in this document are used for
identification purposes only and are trademarks or registered trademarks
of their respective holders.
Preface
Related
Documentation Document
Description
Version
Version Description
A Initial version.
B Adds the new functions and operation methods of the UNM2000 R0106, R0106SP1
and R0106SP2 versions.
Intended Readers
◆ Commissioning engineers
II
Conventions
Terminology Conventions
Terminology Convention
→ Cascading
menuConnects multi-level menu options.
↔ Bidirectional
→ Unidirectional
III
VIII
Contents
Preface...................................................................................................................I
Version ...........................................................................................................II
Conventions ..................................................................................................III
/ Logout...................................................................................5
5 Topology Management..................................................................................98
Types.....................................................................................275
10 Resource Management...............................................................................300
Abbreviations..............................................................................................353
Figures
Tables
1 Overview
The following introduces the product position and GUI description of the UNM2000.
The UNM2000 manages the access devices and locates at the EML, as shown
in Figure 1-1.
Figure 1-1 Deployment of the UNM2000 in the TMN
The devices that can be managed by the UNM2000 are shown in Table 1-1.
2 Version: B
1 Overview
Login / Logout
GUI Introduction
Menu Description
Setting System Parameters
4 Version: B
2 Basic Operations of the UNM2000
The following introduces how to log into or log out of the UNM2000 client.
You need to log into the UNM2000 system via the UNM2000 client before
configuring and managing devices on the GUI of the UNM2000 client.
Prerequisite
◆ The client end communicates with the server end normally (check whether the
network communication is normal by pinging the IP address of the far end).
◆ The client IP address is in the access control list of the UNM2000. See Setting
the ACL for how to set the access control list.
Procedure
If the server to be logged in is not set, follow the steps below to add the
server IP address.
2) In the highlighted field, enter the IP Address, Port Number and Host
Name of the desired UNM2000 server, and then click OK.
Version: B 5
UNM2000 Network Convergence Management System Operation Guide
3. In the displayed UNM2000 Login dialog box, enter the username and
password, and then click Login.
Note:
Procedure
Procedure
6 Version: B
2 Basic Operations of the UNM2000
The following enables you to understand the GUI of the UNM2000 and find
the operation menu quickly to improve your operation efficiency.
2.3.1 GUI
The UNM2000 main GUI is composed of the object tree pane, toolbar, menu
bar, etc., as shown in Figure 2-1.
(1) Object tree pane (2) Toolbar (3) Menu bar
(4) Alarm statistical panel (5) Display pane (6) Status bar
The following introduces the general shortcut icons in the UNM2000 GUI.
Version: B 7
UNM2000 Network Convergence Management System Operation Guide
See Table 2-1 for the default shortcut icons in the toolbar.
Classifica
Alarm
Current Alarm Displays the current alarm
information.
Query Reported
Opens the NE
NE Communication Route Communication Route
Management
Management tab for NE
Others
Opens the NMS User
NMS User communication route
Management tab for user management.
Help Legend Opens the Legend pane that displays the system icons.
8 Version: B
2 Basic Operations of the UNM2000
Classifica
Search Open the search dialog box and enter the key word to search in
the object tree.
condition.
Quick search in the current
object Creates a custom topology view and sets the
Create a custom topology view view to display the concerned objects only.
Lock / Unlock the View Locks / unlocks the location of the NE icon in
Enter the key word to search in the current the topology view.
object by clicking to select a search
Version: B 9
UNM2000 Network Convergence Management System Operation Guide
Shortcut Description
F1 Opens the Help.
F5 Refreshes the current view.
Alt+Shift+Enter Selects / Cancels the full-screen mode.
Ctrl+F Opens the Search Object dialog box to search for NEs, logical domains or cards.
Ctrl+M Displays the current alarms.
Ctrl+H Vies the alarm history.
Ctrl+P Displays the performance history.
Ctrl+G Opens the Global Template Management tab to manage global templates and
configurations.
Alt+S Opens the System main menu.
Alt+V Opens the View main menu.
10 Version: B
2 Basic Operations of the UNM2000
Shortcut Description
Alt+E Opens the Resource main menu.
Alt+G Opens the Configure main menu.
Alt+A Opens the Alarm main menu.
Alt+P Opens the Performance main menu.
Alt+U Opens the Security main menu.
Alt+W Opens the Window main menu.
Alt+H Opens the Help main menu.
Ctrl+W Closes the current window.
Shift+Escape Maximizes / restores the current window.
Alt+Shift+D Opens the tab in the current or new window.
Ctrl+Shift+W Closes all tabs except the Main Topology tab.
2.4.1 System
The submenus under the System main menu are described in Table 2-4.
Table 2-4 Description of the Submenus under the System Menu
Menu Description
When the overflow save task of historical data is set, the
task.
Version: B 11
UNM2000 Network Convergence Management System Operation Guide
Table 2-4 Description of the Submenus under the System Menu (Continued)
Menu Description
Test TaskThe test task includes the POTS port external / internal line task
and the VoIP pinging test task.
Settings command and display the
operation result.
User Sets the system parameters,
Security including the browse tree
Strategy display style, the time mode,
the topology display, the
pinging parameters, the Telnet
Alarm
proxy server, and the GUI
Settings
display.
Logout Logs out of the current UNM2000 client and returns to the user login GUI.
Exit Exits and closes the UNM2000 client.
2.4.2 View
The submenus under the View main menu are described in Table 2-5.
12 Version: B
2 Basic Operations of the UNM2000
Menu Description
Refresh Refreshes the current view.
Show NE IP and Type
Sets whether to display the NE IP
address and type next to the NE icon Common
main topology, in which you can
in the network topology.
understand the system information.
Topology View
Sets whether to display
Alarm Statistics
Function Area Sets whether to display on the toolbar of the main GUI.
Small Toolbar
Click this icon and the Legend
Reset Toolbars Restores the system default shortcut keys on the toolbar of
the main topology.
Version: B 13
UNM2000 Network Convergence Management System Operation Guide
Table 2-5 Description of the Submenus under the View Menu (Continued)
Menu Description
Zoom In Zooms in the topology view.
Zoom Out Zooms out the topology view.
Zoom Displays the topology view according to the
Actual Size Displays the topology view
window size.
according to its actual size. Optimum Size
2.4.3 Resource
The submenus under the Resource main menu are described in Table 2-6.
Menu Description
Opens the NE manager, in which you can perform operations
Open NE Manager Discovery
Create Logical Domain Creates a logical domain for managing NEs. The logical domain
is a set of NEs.
Create Access
Create Other
Create NE
NECreates a virtual NE.
NECreates an access NE.
domains, NEs or ONUs in a batch manner.
Modify NE Names in a Batch Manner
Modify ONU Names by Importing EXCEL Modifies the ONU names in a batch manner
14 Version: B
2 Basic Operations of the UNM2000
Table 2-6 Description of the Submenus under the Resource Menu (Continued)
Menu Description
Imports the ODN relevant information into the UNM2000,
ONU, ONU name, optical splitter name, port,
Import ODN NSM Information etc.
including the IP address and name of the
OLT connected to the ODN, PON port of the
Searches for objects. Searches for the object by the specified search conditions, for example,
NE, logical domain or card.
Query the ONU Searches for the ONU by the specified search conditions.
Batch Query ONU Queries the ONUs in a batch manner by importing the specified
conditions.
Query MDU Phone Number Queries the port details by the port phone number.
ONU Network Intercept Log Query Queries the information of the ONU that is
Queries the information of the ONU that re-authorized according to specified search
fails to register according to specified conditions.
Mark the NE As Marks the NE with a specified label so that it can be quickly queried.
Label Query Queries an NE according to the customized NE label. GIS Batch Import
Imports NE GIS information in a batch manner. Gateway Type Config Sets the
gateway type.
Export preset statistical template.
Statistics
Export of Exports the physical resource
Other Types statistics as an CSV, HTML,
Gathers statistics of NEs, TXT or Excel file.
cards, ports and ONUs
Resource Statistics
according to the preset
Physical Exports the user information
statistical template.
Resource Statistics statistics or service
Gathers statistics of ONU information resource statistics
Other Type Statistics
users, local end VLANs, NE as an CSV, HTML, TXT or
HGU Resource Interconnect Manages the ONU manufacturer and device model
information.
Unauthorized ONU List Queries the unauthorized ONU list of a specified object.
Version: B 15
UNM2000 Network Convergence Management System Operation Guide
2.4.4 Configuration
The submenus under the Configure main menu are described in Table
2-7. Table 2-7 Description of the Submenus under the Configure Menu
Menu Description
Configures multiple same-model NEs in the administrative
domain of the entire network administrative domain of the
by using a global profile, for entire network, for example,
Global example, the line profile, QoS the ONU card configuration,
Template Config profile, port profile, service service configuration, alarm
Global Profile Global Config profile and bandwidth profile. management and time
communication between the current IAD and Completes the configuration and deployment
the voice communication card to find the of the ONU service in advance to implement
communication failure timely. the automatic provisioning of the ONU service.
Compares whether the configuration data in Configures and modifies the MAC addresses
the UNM2000 and the data on the equipment of home gateways in a batch manner.
2.4.5 Alarm
The submenus under the Alarm main menu are described in Table 2-8.
16 Version: B
2 Basic Operations of the UNM2000
Menu Description
Current Alarm Sets the query conditions to view the current alarms of the entire network
or a specified object.
Alarm History Sets the query conditions to view the alarm history of the entire network or a
specified object.
View the Reported Alarms Sets the alarm reporting conditions to view the reported alarms of
the entire network or a specified object.
Alarm Reporting Settings Sets the alarm reporting rules according to the requirements for
network maintenance.
Event to Alarm Settings
Alarm Query Template Quickly completes the settings of alarm browsing and alarm
attributes to simplify the user setting operations.
Query Reported Event Sets the event reporting conditions to view the reported events of the
entire network or a specified object.
Event Query Template Sets the event reporting rules according to the requirements for
network maintenance.
Sets the alarm filter to automatically filter all the alarms and
Shield Project Alarms during the project construction.
alarm clearance information reported
Shield Rule Of North Sets filter rules to filter the unnecessary northbound interface alarms
according to the network maintenance requirements.
Alarm Shield Rule
Management Alarm Notification Settings Alarm Maintenance
Version: B 17
UNM2000 Network Convergence Management System Operation Guide
Table 2-8 Description of the Submenus under the Alarm Menu (Continued)
Menu Description
Query Alarm
2.4.6 Performance
The submenus under the Performance main menu are described in Table
2-9. Table 2-9 Description of the Submenus under the Performance Menu
Menu Description
Performance History Sets the query conditions to view the performance history of the
entire network or a specified object.
the performance connection.
Collection Task Management
Sets the statistical template of performance
history to view the performance history charts
View Performance History Trend
so as to understand the performance data
change trend of the specified object and the
Performance Query running status of the network.
Sets the indicator, threshold, task and time for
Template Save the common performance query conditions as a template.
classification switch for NEs in a batch
Performance Switch Config
manner.
Pm FTP Switch
Queries or configures the performance
2.4.7 Security
The submenus under the Security main menu are described in Table 2-10.
18 Version: B
2 Basic Operations of the UNM2000
Menu Description
NMS User Management Manages the users, user groups, operation sets of the UNM2000,
including the security attribute settings and authority allocation.
Monitor User Session Sets the operations of monitoring user sessions and user activity
information.
Search the System Logs Sets the filter conditions to query the system logs.
Query Operation Logs Sets the filter conditions to query the operations logs.
Query Security Logs Sets the filter conditions to query the security logs.
Logs Sets the filter conditions to query the TL1 command logs.
Statistical System Logs Sets the filter conditions to gather statistics of system logs.
Statistical Operation Logs Sets the filter conditions to gather statistics of operation logs.
Statistical Security Logs Sets the filter conditions to gather statistics of security logs.
Logs Sets the filter conditions to gather statistics of TL1 command logs. Log Forwarding
Server Forwards the UNM2000 logs onto another server.
2.4.8 Window
The submenus under the Window main menu are described in Table 2-11.
Menu Description
Close Window Closes all the opened windows except the main topology. Maximize
Window Maximizes the current window.
Undock Window Cascades all the opened windows.
Close All Windows Closes all the opened windows except the main topology. Close Other
Windows Closes all the opened windows except the main topology. Window Opens the
description for each windows.
2.4.9 Help
The submenus under the Help main menu are described in Table 2-12.
Version: B 19
UNM2000 Network Convergence Management System Operation Guide
Menu Description
Legend Opens the Legend pane to view the system legend.
License Management Views the UNM2000 license information list, including server ID,
upgrading license, etc.
About UNM2000 Views the UNM2000 version information, registration information and
installed components.
The UNM2000 system parameters include the browse tree display style, the time
mode, the topology display, the pinging parameters, the Telnet proxy server, and
the GUI display. The following introduces how to set and use the parameters.
The Viewing Tree Setting dialog box is used for setting the display of the
main topology. You can set the icon size, border pixels, height as well as the
space
between the border and the text.
Background Information
These settings take effect immediately. They are applicable to the current user
at any client ends, but they are not applicable to other users.
Procedure
2. Select Local Settings→Viewing Tree Setting in the left pane to open the
dialog box.
20 Version: B
2 Basic Operations of the UNM2000
3. Set various parameters as required. During setting, users can preview the
display style via the instance text.
4. Click Apply after the settings are completed, and the settings will be valid.
Other Operations
Set the time mode of the client end. The UNM2000 displays the time in the
configured time mode (UTC or local time).
Version: B 21
UNM2000 Network Convergence Management System Operation Guide
Background Information
◆ When you log in next time, the UNM2000 client will adopt the settings you set
last time.
◆ The settings of the time mode are applicable to the current user at any client.
However, they are not applicable to other users.
Note:
Procedure
2. Select Local Settings→Time Mode in the left pane to open the dialog box.
3. Set the time display mode of the client end as required. Then click Apply to
apply the settings.
The UNM2000 allows you to set the background image display of the main
◆ These settings are applicable to the current user at any client ends, but they are
not applicable to other users.
Procedure
22 Version: B
2 Basic Operations of the UNM2000
4 Select Image Mode and then click Apply→OK to set the background of
the main topology to image mode.
In the image mode, right-click in the blank area of the physical topology
view and select Set Background Image or Use the Default Background
Image from the shortcut menu to set the background image of the physical
topology view.
4 Select Map Mode to set the background of the main topology to map
mode.
a) In the gis map url text box, enter the address of the network map or
the map package in the local EMS.
b) Click Apply→OK.
Caution:
The address entered in the dis map url text box should meet the
following requirements:
◆ For the network map, the address must be the URL of the GIS online
map database.
◆ For the map package in the local EMS, the address should be that of
the map folder downloaded to the local EMS.
Other Operations
Right-click in the blank area of the physical topology view and select Expand
All Logic Domains or Collapse All Logic Domains.
◆ Hide nodes.
Right-click the NE in the physical topology view and select Hidden Node
from the shortcut menu. The NE will not appear in the physical topology
view.
Version: B 23
UNM2000 Network Convergence Management System Operation Guide
Right-click in the blank area of the physical topology view and select Manage
the Hidden Nodes to open the Hide Node Management dialog box. Then
select the nodes to be displayed and click OK. The corresponding nodes are
displayed in the physical topology view.
◆ Lock, move, zoom in or zoom out the physical topology view via the shortcut
icons at the top of the main topology.
You can set the UNM2000 to continuously ping the NE or transfer the ping via the
server so as to confirm whether the communication between the UNM2000 and
the NE is normal.
Background Information
◆ When Consecutive Ping is not selected, the EMS will execute the Ping
command at most four times.
◆ When the client cannot ping the NEs, you can select Forward Ping Packet via
the Server to determine whether the communication between the EMS and
NEs are normal.
Procedure
2. Select Local Settings→Ping Parameter Config in the left pane to open the
Ping Parameter Config dialog box.
3. Set the Ping parameters as required and click Apply to validate the settings.
24 Version: B
2 Basic Operations of the UNM2000
After setting the parameters related to the Telnet proxy server, users can use
the proxy server to access the equipment.
Background Information
Prerequisite
Procedure
2. In the left pane, select Local Settings→Telnet Proxy Server to open the
dialog box.
3. Select the Enable Telnet Proxy Server check box, set the proxy server
information and then click Apply to validate the settings.
Users can set the GUI display mode, including the maximum row number of a
table, the display mode of name of alarms / performance / events, and whether
the GUI is locked automatically.
Background Information
◆ The alarm color settings are applicable for all users at any client.
Procedure
2. Select Local Settings→Display in the left pane to open the dialog box.
Version: B 25
UNM2000 Network Convergence Management System Operation Guide
Set the FTP server and related parameters to implement the data
transmission between the UNM2000 client end and the server end.
Background Information
The FTP server settings are the foundation for implementing the functions of
multiple modules, including policy task module, data history save module, log
forwarding module and statistical information export module. The functions of
the modules implemented via setting the FTP server are shown in the following
table.
Module
save, system log save, alarm history save, Save Data Releases the database space and saves the
performance history save and event data onto the FTP server.
overflow save.
Prerequisite
Procedure
3. Click Add to add one blank row in the window. Then click and set the
parameters of the FTP server.
4. After completing the settings, click Apply. The added FTP server appears in
the window.
Other Operations
For the FTP server already set, you can delete it if it is no longer used or
test it before use.
◆ Select the FTP server not needed and click Delete to delete it.
◆ Select the desired FTP server and click Test FTP to test whether the FTP
server can be connected normally.
When using the UNM2000 for the first time, you need to set up a workspace
directory for storing the temporary resource files required by the system.
Note:
This directory must be readable and writable with a hard disk space
greater than 512M.
Version: B 27
UNM2000 Network Convergence Management System Operation Guide
Procedure
1. Select System→Default Work Section Settings in the main menu to open the
Default work space set dialog box.
2. Click Select... to select the folder that the workspace locates and then click
Open.
The UNM2000 license file is used for controlling the functions and
management capability of the UNM2000. You cannot log into the UNM2000
client without the license file. The following introduces how to renew the
UNM2000 license.
Prerequisite
Procedures
2) In the License information dialog box that appears, click Update license.
3) In the Open dialog box, select the corresponding license and click Open.
4) In the License comparison dialog box, check the control items of both the
old and the new licenses and click Confirm License update.
3. After updating the license file, restart the UNM2000 client. The client will reload
the control items according to the updated license.
Procedure
2. In the displayed Modify Password dialog box, set Old Password:, New
Password: and Confirm Password:.
Note:
The new password must comply with the set password policies.
For setting the password policies, see Setting the Password
Policy.
3. Click OK.
If the UNM2000 client is idle, you can lock the client upon leaving to prevent
unauthorized operations. The operation is only applicable to the user who
performed the operation.
Version: B 29
UNM2000 Network Convergence Management System Operation Guide
Prerequisite
Procedure
Different UNM2000 users have different operation authorities. The user can
perform operations of different levels by logging out of the current account and
logging in again with another account.
Procedure
2. Click Yes in the alert box that appears to lock out of the current account.
3. In the UNM2000 Login dialog box that appears, select the server you want to
log in and enter the username and password. Click Enter.
30 Version: B
2 Basic Operations of the UNM2000
2.8.5 Viewing the Message Platform
You can view the prompts and operation echo information that influence the
running of the UNM2000 on the message platform.
Procedure
1. Select View→Message Platform from the main menu to open the Message
Platform pane.
You can set which toolbars and their corresponding shortcut menus are
displayed for quick operations to improve the operation efficiency.
Version: B 31
UNM2000 Network Convergence Management System Operation Guide
Procedure
2. In the Toolbars menu, click the function modules to be displayed in the main
topology.
3. The selected function module will be added with a tick (√) in front of it and it will
appear in the toolbar of the main view.
Other Operations
2. Click New Toolbar, enter the name for the new toolbar in the displayed New
Toolbar dialog box and then click OK.
3. The user can drag an item in or out of the toolbar to add or delete the
corresponding shortcut icon as needed.
32 Version: B
2 Basic Operations of the UNM2000
In the following figure, the Topo functional module is added to the toolbar.
Drag the Create Custom Views shortcut icon to the Topo function module in
the
Customize Toolbars dialog box.
2.8.7 Creating a Custom View
In case of too many devices in the main topology, the focused object is not easy
to locate and view. However, you can create a custom view to only display your
focused objects.
Background Information
◆ A user can only see the custom views created by himself / herself.
Prerequisite
Procedure
2. In the Create custom views dialog box that appears, fill in the view name and
the remarks.
3. Select Node Member→Select to open the Select Object dialog box. Then
select the NEs to be displayed in the custom view and click OK.
4. Select Link Member→Select to open the Select Object dialog box. Then
select the NE fiber connections to be displayed in the custom view and
click
OK.
6. In the UNM2000 alert box that appears, click Yes to switch to the custom view.
Version: B 33
3 Security Management
34 Version: B
3 Security Management
Managed Entities
◆ Object set: Indicates a set of managed objects. Dividing the managed objects
into object sets facilitates the allocation of authorities for managing NEs.
The
object set only includes the physical objects (exclusive of logical objects) with
the smallest granularity being cards.
Note:
The default user groups of the UNM2000 include the Administrators group,
the security admin group, inspector group, the operator group and the
maintainer
group.
Version: B 35
UNM2000 Network Convergence Management System Operation Guide
◆ User: Indicates the UNM2000 client end users. The username and password of
the user uniquely determines the corresponding UNM2000 operation and
management authorities. When a user is added into a user group, the user is
assigned with the operation authorities associated with the user group.
4 A user can be added into multiple user groups. In this case, the
authorities of a user are the union of its basic authorities and the authorities
of the
user groups that the user belongs to. There are two ways to assign
authorities to users:
¡ Divide the user to the user group and the user can thus have the
authorities of the user group.
¡ Give the user directly with the object set and the operation set.
36 Version: B
3 Security Management
4 The UNM2000 provides a default user named admin, which is the system
administrator. The admin user belongs to the Administrators and
Security Admin Group groups by default. The authorities of admin cannot
be modified and the admin user cannot be added to other user group.
When the managed objects and users are of a large scale, the uniform
management of authorization and domain division by a certain type of users will
be both time and effort consuming. Therefore, it is necessary to divide the
managed objects into several sub-domains. Each sub-domain can perform
authorization and domain division management without interfering each other.
The authority and domain division of the UNM2000 is implemented through the
administrative domain and operation authorities. The operation authorities are
divided into different functional domains through the authority division function
and the NEs are divided into different network domains through the domain
division function. Assigning the UNM2000 users with the authority combination
of different functional domains and network domains effectively controls user
management authorities.
Application of the authorization and domain division management: Divide the user
groups into ordinary user group and administrative user group. Creating a user
group is like creating a sub-domain. In this sub-domain, the users are authorized
with the operation authorities within this sub-domain and can create the object
set, operation set, user group, users based on such domain authorities. They are
visible to other users within the sub-domain, but invisible to users outside the
sub-domain.
Note:
The UNM2000 user security can be implemented by setting the account policy
and password policy.
Version: B 37
UNM2000 Network Convergence Management System Operation Guide
◆ Account policy: Defines the minimum length, account login and unlocking
settings of the user account. Using the account policy can enhance the
security of the user account.
◆ Password policy: Defines the complexity, updating period and length limit of the
password.
The security policies, such as access control, password and lockout management
and online user monitoring effectively enhance the access security of the
UNM2000 and prevent unauthorized operations.
The user security policies are the access control rules defined for managing
users. The security policy planning and configuration should be completed upon
initial installation. You can adjust the security policies according to your
management requirement.
The user security policy management includes the following contents:
The UNM2000 supports the single-user login mode and multi-user login
mode. Typically, the UNM2000 runs in the multi-user mode. When
maintaining the
UNM2000 server (for example, adjusting the user group, administrative domain
or operation authority of a user), you can set the UNM2000 to the single-user
login mode to avoid operation interference caused by other users.
Background Information
◆ Single-user mode: In this mode, only one admin user can log into the UNM2000
via the client end, and all other online users will be forced to exit.
38 Version: B
3 Security Management
Caution:
Prerequisite
Procedure
1. Select System→Parameter Settings in the main menu to open the Parameter
Settings dialog box.
2. Select User Security Strategy→User Login Mode in the left pane to open the
User Login Mode dialog box.
3. Set the login mode as required. Then click Apply and the settings will be valid.
By setting the ACL, the operator can set the UNM2000 users to log in only via
the client end with the set IP address or network segment, so as to ensure the
network security.
Background Information
The access control list set by a user is only applicable to the user.
Prerequisite
You have logged into the OTNM2000 as a user belonging to Security Admin
Group.
Version: B 39
UNM2000 Network Convergence Management System Operation Guide
Procedure
2. Select User Security Strategy→Access Control List in the left pane to open
the Access Control List dialog box.
4. Set the Start address and End address. After completing the settings, click
OK. Then the added IP address range appears in the ACL.
Note:
Click to switch between the IPv4 and IPv6.
The account policy includes locking / unlocking users, non-logged-in user policy,
and the minimum length of the username. Setting the account policy can ensure
the security of the account and the network.
Prerequisite
Background Information
◆ The account policy must be configured upon initial installation of the UNM2000
and can be adjusted accordingly during maintenance.
◆ The new account policy has no effect on the accounts already set.
40 Version: B
3 Security Management
Procedure
2. Select User Security Strategy→Account Policy in the left pane to open the
dialog box.
3. Set the parameters and then click Apply to apply the settings.
Other Operations
Setting the complexity of the password and modifying the password regularly
can improve the access security of the UNM2000. The password policy, set by
the security administrator, is applicable to all users.
Prerequisite
◆ The password policy must be configured upon initial phase of the site building
and can be adjusted accordingly during maintenance.
◆ The new password policy has no effect on the passwords already set.
◆ The password policy includes the complexity, updating period and length limit.
◆ The new password policy will be applicable to all users of the UNM2000.
Procedure
2. Select User Security Strategy→Password Policy in the left pane to open the
dialog box.
Version: B 41
UNM2000 Network Convergence Management System Operation Guide
3. Set the parameters in Common Policy and Advanced Policy tabs, and then
click Apply to apply the settings.
Other Operations
The operation set is the set of operations of a certain type. Via the operation
set management, users can assign and manage the operations on the
equipment.
◆ The operation sets include two types: NM application and Network device.
◆ When a certain user or user group is bound with an operation set, this user or
user group will have the authorities of the operations in this set.
◆ Only the users in the security administrator group and the sub-domain security
administrator group can manage the operation sets.
Prerequisite
You have logged into the UNM2000 as a user belonging to the Security
Admin Group.
42 Version: B
3 Security Management
Procedure
2. Select Operation Set or click before Operation Set in the left pane.
Then view the existing operation sets in the right pane or the expanded list of
Operation Set in the left pane.
3. Double-click the operation set entry in the right pane to view details in the
Basic Information, Member and Service For tabs of the operation
set.
Other Operations
◆ In the right pane, click the button at the lower part of the corresponding entry, or
right-click the entry, and select operations such as Refresh, Delete, copy
cell (K), Print, or Export.
◆ Select the corresponding operation set in the left pane, and modify the
information items in the right pane. After completing the modification, click
Apply.
Note:
Version: B 43
UNM2000 Network Convergence Management System Operation Guide
The operation set is the set of operations of a certain type. Via the operation set
management, users can assign and manage the operations on the equipment.
When the current operation set cannot meet the requirements, users can create
a new operation set.
Prerequisite
You have logged into the OTNM2000 as a user belonging to Security Admin
Group.
Procedure
2. Select one of the following access methods to open the Create Operation Set
dialog box.
1Click NMS User Management in the left pane and click New Operation Set in the right
pane.
2Click NMS User Management in the left pane, right-click in the right pane, and select New
Operation Set in the shortcut menu.
3 Select Operation Set in the left pane, and click New Operation Set in the right pane.
4Select Operation Set in the left pane, right-click in the right pane, and select New
Operation Set from the shortcut menu.
5 Right-click Operation Set in the left pane and select New Operation Set from the
shortcut menu.
3. In the New Operation Set dialog box, set the parameters in the Basic
information and Member tabs.
44 Version: B
3 Security Management
Note:
Subsequent Operation
Double-click the added object set to view its relevant information in the right
The object set is the set of managed objects of a certain type. Via the object
set management, users can manage the equipment objects uniformly.
◆ The default object set provided by the UNM2000 is the complete set of the
objects, including all manageable objects. Users cannot delete the
default
object set, but can only modify its descriptions.
◆ When a certain user or user group is bound with an object set, this user or user
group will have the authorities of the objects in this set.
◆ Only the users in the security administrator group and the sub-domain security
administrator group can manage the object sets.
Prerequisite
You have logged into the OTNM2000 as a user belonging to Security Admin
Group.
Version: B 45
UNM2000 Network Convergence Management System Operation Guide
Procedure
2. Click Object Set or click before Object Set in the left pane. Then view the
existing object sets in the right pane or the expanded list of Object Set in
the
left pane.
3. Double-click the object set entry in the right pane to view details in the Basic
Information, Member and Service For tabs of the object set.
Other Operations
◆ In the right pane, click the button at the lower part of the corresponding entry, or
right-click the entry, and select operations such as Refresh, Delete, copy
cell (K), Print, or Export.
◆ Select the corresponding object set in the left pane, and modify the information
items in the right pane. After completing the modification, click Apply.
Note:
46 Version: B
3 Security Management
When the current object set cannot meet the requirements, users can create a
new object set.
Prerequisite
You have logged into the OTNM2000 as a user belonging to Security Admin
Group.
Procedure
2. Select one of the following access methods to open the Create Object Set
dialog box.
1Select NMS User Management in the left pane and click Create Object Set in the right
pane.
2Select NMS User Management in the left pane, right-click in the right pane and
select Create Object Set from the shortcut menu.
3 Select Object Set in the left pane and click Create Object Set in the right pane.
4Select Object Set in the left pane, right-click the right pane and select Create Object Set
from the shortcut menu.
5 Right-click Object Set in the left pane and select Create Object Set from the shortcut
menu.
3. In the Create object set dialog box, set the parameters in the Basic
information and Member tabs.
Note:
Click Copy member form object set..., and select the operation set
in the Select object set dialog box, so as to copy the members of
the
corresponding object set. This can improve the setting efficiency.
Version: B 47
UNM2000 Network Convergence Management System Operation Guide
Subsequent Operation
Double-click an added object set to view the information related to the object set
in the right pane.
The user group is the set of the network management users with the same
management authorities. For the users to be granted with the same authorities,
you can add them into the same user group and authorize the user group to make
every user in the user group have the same authorities, quickly allocating the
authorities to users.
◆ The default user groups of the UNM2000 include the Administrators group, the
security administrator group, the operator group, the maintainer group, and
the monitor group.
◆ When a user is bound with a user group, this user owns the authorities
assigned to the user group.
◆ Only the users in Security Admin Group and Domain Security Admin Group
can manage user groups.
Caution:
The security administrator can view the administrative domains of the user
groups to check which objects are managed by the user group.
Prerequisite
Procedure
2. Click User Group or before User Group in the left pane and then view the
existing user groups in the right pane or the expanded list of User Group in
the left pane.
3. Double-click the user group entry to view the details of the user group.
Version: B 49
UNM2000 Network Convergence Management System Operation Guide
Note:
The Current Session tab displays the sessions of the online users in
the user group.
Other Operations
◆ In the right pane, click the button at the lower part of the corresponding entry, or
right-click the entry, and select operations such as Refresh, Delete, copy
cell (K), Print, or Export.
◆ Select the corresponding user group in the left pane, and modify the user group
information in the right pane through Find or Select.
When default user groups in the UNM2000 do not meet the requirements for user
authorization, you can create user groups according to the management features
of the users, which is convenient for assigning authorities for users.
Prerequisite
You have logged into the OTNM2000 as a user belonging to Security Admin
Group.
Procedure
2. Select one of the following access methods to open the New User dialog box.
1Select NMS User Management in the left pane and click Create User Group in the right
pane.
2Select NMS User Management in the left pane, right-click in the right pane and
select Create User Group from the shortcut menu.
3 Select User Group in the left pane, and click Create User Group.
50 Version: B
3 Security Management
4Click User Group in the left pane, right-click in the right pane and select Create User Group
from the shortcut menu.
5 Right-click User Group in the left pane, and select Create User Group from the
shortcut menu.
3. According to Table 3-1, set the user group parameters in the Create User
Group dialog box.
Parameter Description
User Group
Description The brief description of the user group, used to identify different
user groups.
used to limit the number of sessions
Maximum Session Number logged in by users in one user group in
Sets the maximum number of sessions one time interval. Value range: 0 to
for users in the user group. It can be 100, No limit.
Member Sets the members of the user group via the Select... and Delete
buttons.
Version: B 51
UNM2000 Network Convergence Management System Operation Guide
Parameter Description
Sets the management domain of the user group. The objects of
the management domain are arranged in parallel in the tree
Domain
management domain is the sum of the
selected devices, global logical domains, and
object groups.
Click Copy Authority Settings from the User Group, set the user
group in the Select User Group dialog box, and directly copy the
management domain authority and operation authority of the
corresponding user group. This can improve the setting efficiency.
Subsequent Operation
Double-click an added user group to view the information related to the user
group in the right pane.
The user refers to the person who uses the UNM2000. Users need to log into
the UNM2000 via the corresponding user account. The UNM2000 provides a
default superuser named admin.
52 Version: B