request花刺代理ip

OptusWirelessIPVPNCustomerManagementInterface(CMI)AdministratorGuideJanuary2020V4.
1OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|2Page|2Page|22ContentsContents21.
Preface.
41.
1HOWTHISGUIDEISORGANISED42.
WhatisCMI52.
1ADMINISTRATORMAINTENANCE.
52.
2IPALLOCATIONANDAUTHENTICATION.
52.
3REPORTING.
63.
What'sNew.
73.
1LOOKANDFEEL73.
2LOGIN&AUTHENTICATION.
73.
3VRFPANEL.
73.
4MANAGEDBY.
73.
5REALMSUPPORT73.
6ENDDEVICEROUTETYPESUPPORT83.
7LOCKEDADMINISTRATORACCOUNTS.
84.
InterfaceBasics94.
1REQUIREMENTSFORACCESSTOCMI.
94.
2ACCESSINGCMI9Figure1-CMIWebURL.
9Figure2-LoginScreen.
104.
3CUSTOMERPANEL10Figure3-CustomerandVRFsPanels114.
4VRFPANEL.
11Figure4-VRFsPanelwithaHighlightedService.
12Figure5-Customer,VRFs,APNandDevicesPanels124.
5APNPANEL.
135.
AdministratorMaintenance145.
1ADMINISTRATORACCOUNTTYPES.
145.
2USINGTHETOOL14Figure6-AdminsPanel145.
3CREATINGADMINISTRATORS.
14Figure7-NewAdminForm.
145.
4EDITINGADMINISTRATORS15Figure8-HighlightedAdminRecord.
15Figure9-Administratorform.
155.
5DELETINGADMINISTRATORS.
155.
6UNLOCKINGADMINISTRATORACCOUNTS16Figure10–LockedUsersPanel166.
DeviceAdministration.
176.
1ENDUSERDEVICEMAINTENANCE17Figure11-DevicesPanel.
176.
2CREATINGENDUSERDEVICES17Figure12-NewDeviceForm.
17Figure13-CreateEndUserDeviceForm.
18Figure14-NewEndUse/DeviceCreated.
196.
3EDITENDUSERDEVICES.
19Figure15-EditEndUserDeviceSelection.
19Figure16-EditEndUserDeviceForm19OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|3Page|3Page|336.
4DELETINGENDUSERDEVICES.
196.
5BULKMAINTENANCE.
206.
6BULKACTIVATION20Figure17–APNsPanel20Figure18-BulkActivationFormandInstructions.
20Figure19–Downloadedactivationtemplate21Figure20–Activationtemplatewithsampledatafilledin.
21Figure21-SampleBulkActivationError216.
7BULKREPLACE.
21Figure22-BulkReplace.
227.
Reporting.
237.
1AUTHENTICATIONREPORTS237.
2AUTHENTICATIONDETAILEDREPORTS23Figure23-AuthenticationDetailedReportForm24Figure24-AuthenticationDetailedReportFormwithresults.
24Figure25–ReportinExcelformat.
25Figure26–ReportinText(tabdelimited)format257.
3AUTHENTICATIONSUMMARYREPORTS25Figure27-AuthenticationSummaryReportForm.
25Figure28-AuthenticationSummaryReportFormwithresults.
26Figure29-SamplePrintableAuthenticationSummaryReport.
277.
4ACCOUNTINGREPORTS.
277.
5ACCOUNTINGDETAILEDREPORTS.
27Figure30-AccountingDetailedReportForm287.
6ACCOUNTINGSUMMARYREPORTS.
29Figure31-AccountingSummaryReportForm29Figure32-SamplePrintableAccountingSummaryReport308.
AppendixA.
Glossary319.
AppendixB.
Troubleshooting3310.
AppendixC.
Fields3511.
TableofFigures36OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|4Page|4Page|441.
PrefaceThisdocumenthasbeendevelopedasatechnicalhow-toguideforadministratorusersoftheOptusWirelessIPVPNCustomerManagementInterface(orCMIforshort)platform.
ThisdocumentwillguideyouthroughallthefeaturesoftheCMIplatformallowingyoutoeffectivelymanageyourOptusWirelessIPVPNmobilefleet.
1.
1HOWTHISGUIDEISORGANISEDThisguideisbrokenupintoanumberoflogicalsections:WhatisCMI–AbriefoverviewoftheCMIplatform,What'sNew–Forexistingusers,describingtherecentenhancementstotheCMIplatform,InterfaceBasics–Abriefoverviewoftheuserinterfaceforbeginners,AdministratorMaintenance–Maintainingadministratoruseraccesstotheplatform,DeviceAdministration–Maintainingendusers'servicesanddevices,Reporting–Enduserauthenticationandaccountingreportgeneration.
Thefollowingappendixesarealsoincludedforyourreference:GlossaryTroubleshootingFieldsTableofFiguresIfyouareabeginnertotheOptusCMIplatform,itissuggestedyoureadthisguidefromstarttofinishbeforeutilisingtheplatform.
AdvanceduserscanskipaheadtotheWhat'sNew,AdministratorMaintenance,DeviceAdministrationandReportingsections.
Thesesectionsrelatetotherecentinterfaceenhancementsandhowtousetheinterfaceforthemostcommonadministrativetasks.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|5Page|5Page|552.
WhatisCMICMIstandsforCustomerManagementInterface.
TheCMIplatformisprovidedtoOptuscustomersforthebenefitofself-administrationandreportingoftheOptusWirelessIPVPNandWirelessIPVPNPlusproductsthatareprovidedasanadditionalfeatureoftheOptusGPRS,3Gand4Gmobiledataservices.
ItprovidesaconvenientwebbasedinterfacetomanageyourfleetwithouthavingtocallOptustomakeindividualchangestoyourmobilephonesanddevices.
TheCMIplatformprovidesthefollowingthreemainfunctions:AdministratorMaintenanceEndUserDeviceIPAllocationandAuthenticationReporting2.
1ADMINISTRATORMAINTENANCEAccesstotheOptusCMIplatformiscontrolledviaAdministratoruseraccounts;onlyuserswithadministratoraccountloginscanaccessthewebinterfacetomanagemobileservices.
Therearetwotypesofadministratoraccountsthatcanbesetup:Administrator,andSuperUserAdministratoruserswithSuperUseraccesscanadd,modifyanddeleteAdministratorAccountsviatheCMIplatformdirectly.
Onlyalimitednumberofadministratoraccountscanbecreated;thislimitisdefinedwhenyourOptusCMIcustomeraccountiscreated(bydefault5administratorsareallocatedtoacustomeraccount).
2.
2IPALLOCATIONANDAUTHENTICATIONTheOptusCMIplatformprovidesyouwiththefunctionalitytomanageindividualendusermobileservicesdependingonanumberofcriteria:MSISDN-Phonenumberofthedevice(knownastheMSISDN),Username,Password-Usernameandpasswordsuppliedwhenloggingontothenetwork,Both-Asecurecombinationofboth.
Forexample,youmaywishtoallocateaStaticIPaddresstoaparticularmobilenumber(alsoknownasMSISDN)thatisbeingusedinaparticulardevice.
WithCMI,youcannotonlyallocatethisIPaddressyourself,butalsochangeitlaterontoanewIPaddresswithinyourIPAddressrangeifyouwish.
AnotherapplicableexampleiswhereyouarefrequentlychangingmobiledevicesandwishtocarrythesameIPaddresswithyoubetweendevices.
WithCMIyoucanallocateanIPaddresstoaparticularusernameandpasswordtoensurethatno-onecantakethatIPwithoutproperauthentication.
Acombinationofthetwoauthenticationmethodsmeansthatawould-behackercannotjuststealthemobileserviceanddeviceandexpectittowork.
NotonlydoyouensurethatyourMSISDNistheonlydevicetoobtainanIPaddress–butalsoyoucanensurethatonlypropercredentialscanbeusedtogainaccesstoyourprivatecorporatenetwork.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|6Page|6Page|662.
3REPORTINGAsapartoftheCMIplatform,OptusalsoprovidesyouwiththeabilitytogeneratereportsonenddeviceauthenticationandbasictrafficusageforOptusGPRS,3Gand4Gmobiledataconnections.
Thereportsarebrokenintotwobroadcategories:AuthenticationBasedReports:oDetailedAuthenticationReports-Showingfailureandsuccessforeachmobiledataconnectionattempt.
oSummaryAuthenticationReports-Showinggraphstogiveaclearideaofhowmanyauthenticationsuccessesandfailureshavebeenmadeoverthespecifiedtime.
AccountBasedReports:oDetailedAccountingReports-Showingthedetailsofamobiledatasessionafterithasbeendisconnected.
oSummaryAccountingReports-Showingtrafficutilization,lengthoftheconnectionandnumberofdatasessions.
Thesereportscanbeusedforyourowninternalback-billingpurposes,networkdebuggingorforgeneralgrowthanalysis.
ThereportsareallaccessiblethroughtheCMIplatformandcanbedynamicallygeneratedandcustomisedbasedonyourspecificneedsviathevariousfilteroptionsavailable.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|7Page|7Page|773.
What'sNew3.
1LOOKANDFEELTheOptusCMIplatformhasbeenenhancedwithanewintuitivedesignthatletsyouaccessrelevantinformationwithouthavingtonavigatethroughseveralpagesandmenuitems.
Varioussectionsarenoworganisedinself-containedpanelsonasinglepageratherthanindividualpageswithmanypanelsonlydisplayedonrequestfromselectingaparticularoption.
Afterloggingintotheplatformthefollowingpanelsareinitiallyvisible(pleaseseefigure3forasystemscreenshot).
Customer[TitledwithyourCompanyName]PanelVRFPanelThefollowingpanelsaredisplayedonrequestandiftheadministratoruseraccounthastheappropriateprivileges:Admins–ExposedbyselectingtheMaintainAdminsoption,LockedUsers–ExposedbyselectingtheMaintainAdminsoption,APNs–ExposedbyselectingtherelevantVRF,Devices–ExposedbyselectingtherelevantVRF,Reports–ExposedbyselectingtheReportsoption.
3.
2LOGIN&AUTHENTICATIONWiththerecentenhancementstotheCMIplatform,selectedcustomerswillnowlogintotheplatformviaaRealminsteadoftheusualAPN.
Ifyou'recurrentlyloggingintotheCMIplatformviaanAPN,youwillcontinuedoso.
PleaseselectAPNasAuthenticationTypeontheloginscreenasdescribedinthefollowingsection(seefigure2inInterfaceBasicssection).
3.
3VRFPANELTheVRF(VirtualRoutingandForwarding)panelisconfiguredforyoubyOptusstaff.
Somestings,suchasIPRangeandAuthenticationmethodhavebeenmovedfromtheAPNleveltotheVRFlevel.
YourexistingAPNnamewillbeidenticaltoyourVRFname.
Pleaseseethefollowingsectionformoredetailsonthisnewpanel.
3.
4MANAGEDBYAnewManagedByidentificationflaghasbeenaddedtoeachVRF,thisflagdenoteswhoisabletoadministratetheenduserdevices.
Therearethreepossibleoptions:Customer–Youareabletoview,modifyanddeletetheenduserdevicesassociatedwiththeselectedVRFasyourrequire.
Alphawest–AlphawestmanagetheenduserdevicesassociatedwiththeselectedVRF,howeveryouwillstillbeabletoviewtheenduserdevicedetails.
Optus–OptusmanagetheenduserdevicesassociatedwiththeselectedVRF,howeveryouwillstillbeabletoviewtheenduserdevicedetails.
3.
5REALMSUPPORTToprovidesupportforservicesthatuseacommonAPN(suchastheWirelessIPVPNPlusproduct)anewgroupingidentification'Realm'hasbeenadded.
ThisallowsthelogicalseparationofservicesusingacommonAPNinthesamewayatraditionalprivateAPNisusedtoseparateservicesandtheirparticularaccess.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|8Page|8Page|883.
6ENDDEVICEROUTETYPESUPPORTAsofOctober2016,CMIAdministratorsnowhavetheabilitytoaddFramedRoutesandonetomanyLANSubnetstoenddeviceconfigurationsviatheCMIinterface.
TheBulkAdd&ReplacefunctionalityhasalsobeenenhancedtoallowadministratorstosettheRouteOptionandaddoneLANSubnetinbulkinFramedRoutesenabledontheservice.
3.
7LOCKEDADMINISTRATORACCOUNTSAsofOctober2017,AdministratorsthatattempttologintotheAdministratorPlatformwiththeincorrectlogincredentials5timesinarowwillnowhavetheirAdministratorAccountlockedforsecurityreasonspreventinganyfurtherloginattemptsforthatAdministratoraccount.
Pleaseseesection5.
6UNLOCKINGADMINISTRATORSACCOUNTSforfurtherinformationabouthowtounlocktheaccount.
PleaseNote:ThefunctionalityofyourexistingservicewillnotbeaffectedbyanyoftherecentenhancementstotheCMIplatformandwillcontinuetooperateinthesamemannerasitdidbefore.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|9Page|9Page|994.
InterfaceBasicsTheCMIplatformisprovidedasasecureweb-basedinterfaceforaccessfromaPCwithpublicInternetaccess.
Herewewillprovideyouwithanintroductiontotheinterfaceandgiveyouthebasicsonhowtogetstarted.
4.
1REQUIREMENTSFORACCESSTOCMIBeforeyoucanbegin,youneedtoensurethatyouhavemetthefollowingminimumsystemrequirements.
Browser:LatestversionofmajorbrowsersincludingInternetExplorer8andhigheraresupported.
BrowsercookiesandJavaScriptfeaturesmustbeenabledforfullfunctionality.
4.
2ACCESSINGCMIAccessingCMIissimpleandcanbedonefromaPCwithaccesstotheInternet.
Step1OpenyourInternetbrowser.
Step2Intheaddressbar,typeintheaddresshttps://wirelessip.
optus.
com.
auFigure1-CMIWebURLStep3YouwillbepromptedtoenteryourCMIaccountUsername,PasswordandAPNorRealm,dependingonyouraccountauthenticationtype.
ThisinformationwillhavebeenprovidedtoyouwhentheWirelessIPVPNdatasolutionwasfirstsetup.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|10Page|10Page|1010Figure2-LoginScreenStep4ClicktheLoginbuttontocontinue,youwillbethenpresentedwithanoverviewofyourservice.
Finally,ifyouwishtologoutofthesystem,simplyclickthebuttonlabelledLogoutinthetoprightcorner.
4.
3CUSTOMERPANELOnceloggedinyou'llbepresentedwithanoverviewofyourservices.
Thetoppaneltitledwithyourcompanyname,inthiscasePubInternetistheCustomerpanel.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|11Page|11Page|1111Figure3-CustomerandVRFsPanels4.
4VRFPANELTheVRF(VirtualRoutingandForwarding)panelcontainsinformationaboutyourservices,astheyhavebeenconfiguredforyoubyOptus.
ThereareanumberofoptionsthataresetupforyoubyOptusintheVRFpanel.
Someoftheseoptionsimpactthewayyourserviceworks.
Status–[Active|Suspended],IftheVRFis"Suspended",allservicesassociatedtotheVRFareconsideredSuspendedandwillnotauthenticate/connecttomobiledataservices.
VRF–ThenameassignedtotheparticularVRF.
ManagedBy–[Customer|Optus|Alphawest],Denotesweatheryouasthecustomermanagerstheenddeviceorwhetherit'sOptusorAlphawestinthecaseofManagedservices(suchastheOptusWirelessIPVPNPlusManagedServiceoption).
InthecaseofOptusorAlphawestManagedservicesyouwillonlybeabletoviewenduserdevicedetailsyouwillnotbeabletomodifyordeletethem.
APNs–ListofallAPNs(MobileAccessPointNames)associatedtotheparticularVRF.
Realm–RealmassociatedwiththisparticularVRF.
UsedforauthenticationwiththeOptusWirelessIPVPNPlusservice.
AuthMethod–(Username/Password|MSISDN|MSISDN/Username/Password),YouwillnoticethatwithonlyMSISDNauthenticationforexample,therewillbenofieldtoentertheUsernameorPasswordforanenddeviceintheDevicesPanel.
StaticIP–[Yes|No],IfStaticIPissetto"Yes"theneachconnectingdeviceisassignedtheirownuniqueIPaddress,ifsetto"No"theneachconnectingenddeviceisdynamicallyassignedanIPaddressuponeachmobiledataconnectionrequest.
IPRanges–ListofIPRangessetupforthisVRF.
YouwillnotbeabletoassignIPaddressesforyourdevicesoutsideofthesespecifiedIPRanges.
Devices–[Numberofused/totalnumberofdevices].
ThetotalnumberofdevicesiscalculatedasasumofallusableIPaddressesinallIPRangessetupforthisVRF.
ProductType–TheProductTypeoftheassociatedVRF.
MobileNetwork–[GPRS/3G|GPRS/3G/4G],TheMobileNetworkssupportedbytheVRF.
NetworkConnectivity–TheNetworkConnectivityusedbytheVRF.
DNS–DNS(DomainNameService)configuration.
WINS–WINS(WindowsInternetNameService)configuration.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|12Page|12Page|1212MovingthemousepointerovertheVRFdetailsintheVRFspanel,highlightstheserviceinyellowcolour,ascanbeseeninthefollowingimage.
Figure4-VRFsPanelwithaHighlightedServiceClickingthehighlightedVRFdetailschangesthehighlightedcolourtoorangeandopenstheAPNsandDevicespanelsasshownbelow.
Thesepanelsaredescribedlaterinthedocument.
Figure5-Customer,VRFs,APNandDevicesPanelsAnumberofrestrictionswillhavebeensetforyourVRF,theseinclude:AccountStatusManagedByAuthenticationMethodStaticIPNumberofenddevicesyoucanallocateontheVRFNumberofCMIaccountAdministratorsyoucanallocateonthesystemAlloftheserestrictionscanonlybechangedbyOptusviaachangerequest.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|13Page|13Page|13134.
5APNPANELTheAPNorAccessPointNamewillhavebeengiventoyouuponorderingtheOptusWirelessIPVPNservice.
TheAPNPanelwillshowthefollowingtypesofAPN's:PrivateorCustomerSpecificDataAPN'sSharedorProductSpecificDataAPN'sPrivateorCustomerSpecificDataAPN:AprivateorcustomerspecificdataAPNisimportantbecauseitdesignatesyourcompany'sconfigurationandseparatesyourservicesfromallothercompaniesconfiguredontheOptusWirelessIPVPNPrivateAPNsolution.
TheAPNisconfiguredonboththeOptusnetwork,andyourenddevices.
BeforeusingaprivatedataAPNyoumustensurethatthemobiledeviceyouareusinghasbeenconfiguredcorrectly.
AnymobileserviceorderedfromOptusforusewithyourWirelessIPVPNPrivateAPNbasedserviceisprovisionedtoonlyworkwiththePrivateAPNsassignedtoyourcompany.
NoothercompanywillbeabletouseyourAPNsunlessyouhavegivenOptuspermissiontodoso.
SharedorProductSpecificDataAPN(WIPVPNPlus):ForRealmbasedsolutionssuchastheWIPVPNPlusproductacommonmobiledataAPN(i.
e.
'yeswipplus'fortheWIPVPNPlusproduct)willbedisplayedintheAPNPanel.
UnlikePrivateAPNbasedsolutionstrafficisseparatedbytheassignedRealmandnottheDataAPN.
ForSharedorProductSpecificsolutionstheRealmiscreatedonthenetworkanditmustalsobeconfiguredonthedevice(usuallyintheform'[RadiusDeviceUsername]@[Realm]')whenconnectingAnymobileserviceorderedfromOptusforusewithyourWirelessIPVPNSharedorProductSpecificDataAPNserviceisprovisionedtoonlyworkwiththeproductsassociatedDataAPN(i.
e.
'yeswipplus'fortheWIPVPNPlusproduct).
ItisthecombinationofthespecificProductAPNandyourassignedRealmthatensuresnoothercustomer'sservicecanconnecttoyourdatasolution.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|14Page|14Page|14145.
AdministratorMaintenanceTheAdministratorMaintenanceandLockedUserpanelisusedtomanageadditionalCMIadministratorusersandlockeduseraccounts.
5.
1ADMINISTRATORACCOUNTTYPESTherearetwoCMIaccounttypes:AdministratorSuperUserThedifferencebetweenthetwoisthatonlySuperUserscanaccesstheAdministratorMaintenancepanel,anAdministratorcannot.
TheAdministratoraccountisusuallygiventothehelpdeskoroperationaldepartmentofyourcompany.
SuperUseraccessshouldbereservedforsenioradministratorsormanagementpersonnel.
BoththeSuperUserandAdministratoraccounttypescanadd,deleteandmodifyenduserdevicesandgeneratereportsasrequired.
5.
2USINGTHETOOLAssumingyouarealreadyloggedintotheCMIplatform,clicktheMaintainAdminslinkontheright-handsideoftheCustomerpanelheader.
TheAdminspanelshouldthenappearbelowtheCustomerpanel.
Note:OnlySuperUserscanseetheMaintainAdminslink.
Figure6-AdminsPanel5.
3CREATINGADMINISTRATORSStep1ClicktheAddAdminlinkontheleftsideoftheAdminspanelheader.
AnewAdminuserformappearsatthebottomoftheAdminspanel.
Figure7-NewAdminFormStep2Enterthenewuser'slogincredentials,selectaccounttypeandclickSave.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|15Page|15Page|1515Thefieldsareexplainedhere:Username-Theusernamemustbeuniqueandiscasesensitive.
Itcanonlycontainalphanumericcharacters,fullstops,hyphens(-),atcharacters(@)andunderscores(_).
Password-Thepasswordhastobeeithermixedcaseornumbersandletters.
Anerrorwillbereturnediftheusernameorpasswordisrejected.
Comment-Thecommentfieldcanbeusedforwhateveryoulike.
Thiscanbeeithertheperson'snameoranoteabouttheuser.
ThisfieldisonlyusedbytheinterfaceanddoesnotaffectanyCMIaccountconfigurations.
5.
4EDITINGADMINISTRATORSYoumayeditanAdminuserandmodifyitscommentandpassword.
Step1MovingthemousepointeroveranAdminuser'sdetailshighlightstherespectiverowinyellowcolour.
Figure8-HighlightedAdminRecordStep2ClickingthehighlightedrowchangesthehighlightcolourtoorangeandshowsaformwiththeAdminuser'sdetailsatthebottomoftheAdminspanel.
Figure9-AdministratorFormStep3MakethedesiredchangesandclicktheSavebutton.
5.
5DELETINGADMINISTRATORSStep1SelectthedesiredAdministratoruserandmakesuretheAdminuser'sdetailsformisopenasifyouwantedtoedittheuser.
Step2ClicktheDeletethisAdminlinkatthebottomrightcorneroftheAdminuser'sdetailsform,ascanbeseeninthepreviousimage.
Theuserisremovedfromthesystem.
Note:IftheAdminuseriscurrentlyloggedin,thenextactiontheyperformontheinterfacewillcausethatusertobeloggedoutwithasessiontimedoutmessage.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|16Page|16Page|16165.
6UNLOCKINGADMINISTRATORACCOUNTSAdministratorsthatattempttologintotheAdministratorPlatformwiththeincorrectlogincredentials5timesinarowwillhavetheirAdministratorAccountlockedforsecurityreasonspreventinganyfurtherloginattemptsforthatAdministratoraccount.
OnceanAdministratoraccounthasbeenlockedtounlockit:Step1Another"SuperUser"AdministratorfortheaccountwillneedtologintotheCMIplatform.
Step2ClickontheMaintainAdminsoption.
Step3Thenunderthe"LockedUsers"panelyoushouldbeabletoseethecurrentAdministratoraccountslocked,clickonthePadlockiconnexttotheAdministratoraccounttobeunlockedandselectOKtotheconfirmationprompt.
Theadministratorsaccountshouldnowbeunlockedandreadytouse.
Note:Asaprecaution,itisrecommendedthepasswordfortheAdministratoraccountisreset.
Figure10–LockedUsersPanelNote:Ifanother"SuperUser"AdministratorisnotavailableordoesnotexistontheaccountpleasecontactyourOptusSupportTeamtohavetheaccountunlocked.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|17Page|17Page|17176.
DeviceAdministrationTheDeviceAdministrationcapabilitiesofCMIallowyoutoprovisionandconfigureyourmobileenduserdevicesforusewiththeCMIsystemanditsReportingfacilities.
TheCMIfacilityallowstwomethodsforupdatingthisinformation:EndUserDeviceMaintenanceBulkMaintenanceCombined,thesemethodsallowaveryflexiblemeansofmodifyingyourmobileenduserdevicefleet.
6.
1ENDUSERDEVICEMAINTENANCEEndUserDeviceMaintenanceisprovidedfortheprovisionandmodificationofsinglemobiledevices.
Thefollowingareinstructionsonhowtousetheinterface.
TheserviceusedinthefollowingexamplesisconfiguredforUsername,PasswordandMSISDNauthenticationtoshowallpossibleoptions.
Yourdisplayoptionsmayvarydependingonyourownserviceconfiguration.
IndividualdevicesaremanagedintheDevicespanel.
OpentheDevicespanelbyselectingaVRFasshowninFigure5.
Ifyouhaven'taddedanyenduserdevicesyet,yourDevicespanelshouldlookasfollows.
Figure11-DevicesPanelWhenyoufirstaccessthetool,it'slikelytherewillbenoenddevicesdisplayed.
6.
2CREATINGENDUSERDEVICESCreatinganenduserdeviceisasimpletask,andisperformedfromtheDevicespanel.
Figure12-NewDeviceFormOPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|18Page|18Page|1818Step1ClicktheAddDeviceslinkontheleftsideoftheDevicespanelheader.
AnewDeviceformwillappearatthebottomoftheDevicespanel.
Step2EnterthedesirednewenduserdevicecredentialsandclickSave.
Figure13-CreateEndUserDeviceFormThefieldsareexplainedhere:VRF/APN-TheVRF/APNwillbepre-populatedbasedontheVRFthathasbeenpreviouslyselected.
RouteType-SettheRouterTypetothedesiredoption,defaultvalueis"None",ifFramedisselectedyouwillneedtoenterintherequiredLAN–Subnetdetailsviathe"AddLan"optiontoallowframedroutesupportfortheenddevice.
OnetomanyLANSubnetscanbesetupperenddevice.
Note:thisoptionisonlyapplicabletoStaticallyassignedIPAddresssolutionsandtheenteredLANSubnet(s)areonlyadvertisedintoyournetworkoncethemobileservicesuccessfullyconnectsandauthenticateswiththeassociatedCMIDeviceaccount.
DeviceStatus-EnsureDeviceStatusissettoActiveforthenewdevicetobeabletoauthenticatetotheVRF/APN.
Username-Theusernamemustbeuniqueandiscasesensitive.
Itcanonlycontainalphanumericcharacters,fullstops,hyphens(-),atcharacters(@)andunderscores(_).
Password-Thepasswordhastobeeithermixedcaseornumbersandletters.
Anerrorwillbereturnediftheusernameorpasswordisrejected.
MSISDN–ForVRF's/APNconfiguredforMSISDNauthenticationoptionsentertherequiredenduserdevicesmobilenumber.
WAN-IP/WAN-Netmask-ForVRFs/APNsconfiguredforStaticIPaddressselectthedesiredWAN-IPaddressandWAN-Netmaskfromtheavailablelist.
Comments-Thecommentsfieldcanbeusedforwhateveryoulike.
Thiscanbeeithertheperson'snameoranoteabouttheuser.
ThisfieldisonlyusedbytheinterfaceanddoesnotaffectanyCMIaccountconfigurations.
Step3ClickSavetocreatetheenduserdevice.
TheenduserdeviceshouldnowbecreatedandyoushouldbeabletoseeitintheDevicesPanel,thisnewenduserdevicecanbeusedstraightaway.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|19Page|19Page|1919Figure14-NewEndUse/DeviceCreated6.
3EDITENDUSERDEVICESStep1Movingthemousepointeroveranenduserdevicedetailshighlightstherespectiverowinyellowcolour.
Figure15-EditEndUserDeviceSelectionStep2Clickingthehighlightedrowchangesthehighlightcolourtoorangeandshowsaformwiththeenduser'sdevicesdetailswithintheDevicespanel.
Figure16-EditEndUserDeviceFormStep3MakethedesiredchangesandclicktheSavebutton.
6.
4DELETINGENDUSERDEVICESStep1SelectthedesiredenduserdeviceandmakesuretheDevicesdetailsformisopenasifyouwantedtoedittheenduserdevice.
Step2ClicktheDeletethisDevicelinkatthebottomrightcornerofthedevicesdetailsform,ascanbeseeninthepreviousimage.
Theenduserdeviceconfigurationwillnowberemovedfromtheplatform.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|20Page|20Page|2020Note:Ifthedeviceiscurrentlyconnectedtoamobiledatasession,itwillnotbeautomaticallydisconnected.
Ifthedevicedisconnectsandattemptstologinagain,itwillfail.
6.
5BULKMAINTENANCETheBulkMaintenancefunctionalityisprovidedinCMItoallowflexibilityinthewayyoucanprovisionenduserdevices.
TheplatformallowsyoutouseaMicrosoftExcelspreadsheettomodifyoraddnewdevicesanduploadthisspreadsheettotheCMIsystemforautomatedprovisioning.
Thiscancomeinveryhandywhenattemptingtoprovisionanymorethanafewenduserdevicesatatime.
TherearetwooptionsintheBulkMaintenancetoolinCMI:BulkActivationBulkReplace6.
6BULKACTIVATIONThistoolallowsyoutoaddanadditionalnumberofenduserdevicestoyourAPN/Realmconfigurationinonego,usingaMicrosoftExceltemplateprovidedbytheCMIplatform.
AllexistingconfigurationwillstaythesameandwillnotbeoverwrittenbytheuseoftheBulkActivatetool.
ThismethodofprovisioningisusefulwhenactivatingalargenumberofdevicesorSIMsatonce.
Step1SelectaVRFinVRFspanel.
Step2ClickBulkActiveintheAPNspanel.
Figure17–APNsPanelStep3Followthestep-by-stepinstructionsprovidedintheBulkActivate.
Remembertodownloadtheactivationtemplatefirst–youcannotuseyourowntemplate.
Figure18-BulkActivationFormandInstructionsOPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|21Page|21Page|2121ByselectingtheAutoallocateblankIPaddressesoption,youwillbeabletoleaveIPaddressesblankinyourspreadsheetandletthembeautomaticallyallocatedbythesystem.
ThissavesyouhavingtoworryaboutallocatingIPaddressesthatmayhavealreadybeentaken.
TheWANNetmaskissetto32bydefaultatthebackendsoyoudonothavetoenteritinmanuallyanymore.
AlsowiththerecentenhancementtotheCMIplatform,anadministratorcannowsettheRouteTypeto"Framed"andsetasingleLANSubnetforthatparticulardeviceviatheBulkActivatefeature.
PleaseseebelowforsampledatawhenenablingtheFramedRouteOption.
Pleasenote,onlytwokeywords("Framed"or"None")canbeusedtoonthe"RouteType"column,ifsetto"Framed"bothSubnetandNetmaskcolumnswillneedtobepopulated.
Figure19–DownloadedactivationtemplateFigure20–ActivationtemplatewithsampledatafilledinStep4ClickSubmit.
Analyseerrorsthatarereturnedbythesystem.
ThesewillappearinRedatthebottomoftheBulkActivatepanel.
Nodeviceactivationswilloccuruntiltheseerrorsarecleared.
Hereisanexampleofanerrorthatmayoccur:Figure21-SampleBulkActivationErrorOnceyouhavesuccessfullysubmittedtheBulkActivatespreadsheet,theenduserdeviceconfigurationwillbecomeactivewithinoneminute.
Ifyourealiseyouhavemadeamistakeonanindividualdevice,modifythedeviceusingtheEndUserDeviceMaintenanceinsteadofusingtheBulkMaintenance.
Thisway,itwillbemuchquickertomakethechange.
6.
7BULKREPLACEThismethodofbulkmaintenanceallowsyoutodownloadacompletelistofcurrentlyprovisionedenduserdevices,modifythatlistandthenresubmitforreconfiguration.
Thistoolcancomeinhandyinanumberofsituations:OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|22Page|22Page|2222Youwishtomodifyalldevicepasswordsoffline.
YouneedtomodifythesubnetallocatedtotheAPN.
Youneedtoremoveanumberofdevicesquickly.
Yousimplyneedalistofdevicesforyourownrecords.
NeedtoaddFramedRoutes/LANSubnetstomultipleservicesWARNING:ThistoolcanbedangerousasitreplacesyourentiredeviceconfigurationlistontheCMIplatform.
Beverycarefulwiththisfacilityandensureyoumakeabackupoftheoriginaldeviceconfigurationlistbeforeyouattemptanymodificationviathisfeature.
Herearethestep-by-stepinstructionsonhowtousethereplacemethod:Step1SelectaVRFintheVRFspanel.
Step2ClickBulkReplaceintheAPNspanel.
Step3Followthestep-by-stepinstructionsprovidedonthispage.
Makesureyouback-upthedownloadedMicrosoftExcelspreadsheetfilebeforemakinganymodifications.
ByselectingtheAutoallocateblankIPaddressesoption,youwillbeabletoleaveIPaddressesblankinyourspreadsheetandletthembeautomaticallyallocatedbythesystem.
ThissavesyouhavingtoworryaboutallocatingIPaddressesthatmayhavealreadybeentaken.
TheWANNetmaskissetto32bydefaultatthebackendsoyoudonothavetoenteritmanuallyanymore.
AlsowiththerecentenhancementtotheCMIplatform,anadministratorcannowsettheRouteTypeto"Framed"andsetasingleLANSubnetforthatparticulardeviceviatheBulkActivatefeature.
Pleasesee6.
6BULKACTIVATIONforsampledataexamplesofhowtosetthisoption.
Figure22-BulkReplaceStep4CompletethestepsbyclickingSubmit.
Analyseanyerrorsthatarereturnedbythesystem.
ThesewillappearinRedatthebottomoftheBulkReplacepanel.
Noreplacementwilloccuruntiltheseerrorsarecleared.
Oncethereplacehasoccurred,allofyourentrieswillhavebeenreplacedbytheentriescontainedontheimportedspreadsheetwithinoneminute.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|23Page|23Page|23237.
ReportingThereportingfacilityallowsyoutogeneratesummaryanddetailedreportsonbothauthenticationandsessionaccountingofyour3Gand4Gmobileenduserdevices.
Thesereportsareprovidedtohelpyouwithtroubleshootingandforqueryingindividualusageoftheservice.
Asbefore,youwillonlybeabletogeneratereportsthatapplytoyourparticularAPN/Realm.
Nooneelsewillbeabletoseeyourinformation.
Thereportsectionisbrokendownintotwocategories:AuthenticationAccountingAuthenticationreportsshowinformationregardingtheinitialconnectionofthedevice.
Accountingreportsshowdatasessioninformation.
Reportingdataisprocessedinnearrealtimehoweverensurethatifyouarelookingtoreportonaparticulardatasessionthatthesessionhasendedasaccountinginformationisonlysentforprocessingattheendofanenduserdevicedatasessionforreportingpurposes.
Returnedreportingdataislimitedtothefirst2,000recordswhendisplayedwithintheplatforminterface,todisplayallreturneddata(ifmorethan2,000records)thereportmustbeexportedviathePrintableformat,Excel,CSVorTextexportoptions.
7.
1AUTHENTICATIONREPORTSWhenadevicefirstestablishesadataconnectiontothemobilenetwork,thisiscalledestablishingadatasession.
WithintheCMIsystem,thisdatasessionestablishmentiswhenauthenticationoccursandanIPaddressisassignedtoaparticularmobileenduserdevice.
Whenadatasessionoccursdependsonthedeviceitself,somedeviceswillestablishadatasessionuponstart-up,otherswillawaitthefirstinitialrequestfordataaccessbeforeconnecting.
Pleaseconsulttheusermanualofyourparticularmobiledeviceforthisinformation.
Authenticationreportsreflectinformationaboutthatinitialconnection.
UsingtheCMIplatformyoucaneithergenerateDetailedReports,showingeachindividualconnectionoraSummaryReport–whichwillreportonactivityovertime.
7.
2AUTHENTICATIONDETAILEDREPORTSDetailedAuthenticationReportsbreakdowninformationforeachdatasessionestablishment.
Togenerateadetailedauthenticationreport,followthesesteps:Step1ClicktheReportslinkfromthepagetopbanner.
AnewReportsformwillbedisplayedatthebottomofthepage.
Step2ChooseAuthenticationDetailedfromtheavailablereportingoptions.
Step3Fillintheformdependingonwhatresultsyouwanttosearchfor.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|24Page|24Page|2424Figure23-AuthenticationDetailedReportFormThefieldsareexplainedhere:Username–Searchforausernamethatwasusedduringanattempteddatasessionestablishment.
MSISDN–SearchesforaparticularMSISDNormobilenumberthatattemptedadatasessionestablishment.
WAN-IP–SearchforaparticularWANIPaddressthatwasassignedtoadevice.
APN–SearchesforconnectionstoaparticularAPN/Realm.
From/To–Performsthequery,andreturnsdatasessionattemptsthatoccurredduringthespecifiedfromandtotimes.
Show–ThiswilllimittheresultstothosethatareeitherSuccesses,FailuresorBoth.
SortBy–Sortstheresults,ascendingordescendingdependingonthesortoptionchosen.
Step4ClickSubmittogeneratethereport.
Figure24-AuthenticationDetailedReportFormwithResultsHereisanexplanationofeachfieldinthereturnedreport:Time–Thetimeofthedatasessionattempt.
Outcome–SuccessorFailuredependingonwhetherthedevicewasauthenticatedornot.
Reason–Thereasonforafailedauthentication.
Thiswillbeblankiftheauthenticationwasasuccess.
APN–TheAPNthatthedatasessionwasattemptedon.
ShouldnotdifferfromtheAPNyouarereportingon.
Username–Theusernameusedforauthentication(ifUsernameandPasswordauthenticationareenabledforthisAPN).
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|25Page|25Page|2525MSISDN–TheMSISDNorphonenumberofthedevicethatattemptedthedatasession.
WAN-IP–TheIPaddressthatwasgiventothesuccessfullyauthenticateddevice.
Thiswillbeblankiftheauthenticationfailed.
Step5Ifyouwishtoprintthereport,openthereportinaPrintableformat.
YoucanalsodownloadthereportinaMicrosoftExcel,CSVandTextformatbyclickingtherelevantbutton.
Figure25–ReportinExcelFormatFigure26–ReportinText(TabDelimited)Format7.
3AUTHENTICATIONSUMMARYREPORTSSummaryauthenticationreportsshowauthenticationsuccessandfailureovertime.
Togenerateasummaryauthenticationreport,followthesesteps:Step1ClicktheReportslinkfromthepagetopbanner.
AnewReportsformwillappearatthebottomofthepage.
Step2ChooseAuthenticationSummaryfromtheavailablereportingoptions.
Step3Fillintheformdependingonwhatresultsyouwantreturnedtoyou.
Figure27-AuthenticationSummaryReportFormThefieldsareexplainedhere:Username–Searchforausernamethatwasusedduringanattempteddatasessionestablishment.
MSISDN–SearchesforaparticularMSISDNormobilenumberthatattemptedadatasessionestablishment.
APN–SearchesforconnectionstoaparticularAPN/Realm.
TimeOutcomeUsernameMSISDNWAN-IP2014-09-1910:30:11Successwhtb61423990780192.
168.
200.
802014-09-1814:56:37Successwhta-mgmt61423990776192.
168.
200.
992014-09-1814:53:51Successwhta-mgmt61423990776192.
168.
200.
992014-09-1814:53:12Successwhta-mgmt61423990776192.
168.
200.
99OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|26Page|26Page|2626From/To–Performsthequery,andreturnsdatasessionattemptsthatoccurredduringthespecifiedfromandtotimes.
Granularity–Inthegraphandtabulatedreport,summarisestheamountofSuccessesandFailuresintothisperiodoftime.
Note:avoidgeneratingalargetablebyspecifyingalowgranularityoveralargeperiodoftime.
Display–Youcaneitherdisplaythegraph,thetabulatedreportorbothdependingonhowyouwantthereporttobedisplayed.
Step4ClickSubmittogeneratethereport.
Figure28-AuthenticationSummaryReportFormwithResultsStep5Ifyouwishtoprintthereport,openthereportinaprintableformat.
YoucanalsodownloadthereportinaMicrosoftExcel,CSVandTextformatbyclickingtherelevantbutton.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|27Page|27Page|2727Hereisasampleprintablereport.
Figure29-SamplePrintableAuthenticationSummaryReportThegraphshowssuccessesinred,andfailuresingreen.
Thefieldsofthetabulatedreportareexplainedhere:Date–Dateofanalysis,Successes–Numberofsuccessfulauthenticationsforthattimeperiod,Failures–Numberoffailedauthenticationsforthattimeperiod.
7.
4ACCOUNTINGREPORTSAccountingReportsareprovidedtoanalysedatasessioninformation.
CMIcanprovideyouwithdetailedreports,thatbreakdowneachdataconnectionorsummaryreportsshowingtrendsovertime.
7.
5ACCOUNTINGDETAILEDREPORTSDetailedAccountingReportsbreakdownsessioninformationforeachdatasession.
Togenerateadetailedaccountreport,followthesesteps:Step1ClicktheReportslinkfromthepagetopbanner.
AnewReportsformwillappearatthebottomofthepage.
Step2ChooseAccountingDetailedfromtheavailablereportingoptions.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|28Page|28Page|2828Step3Fillintheformdependingonwhatresultsyouwantreturnedtoyou.
Figure30-AccountingDetailedReportFormThefieldsareexplainedhere:Username–Searchforausernamethatwasusedduringanattempteddatasessionestablishment.
MSISDN–SearchesforaparticularMSISDNormobilenumberthatattemptedadatasessionestablishment.
WAN-IP–SearchforaparticularWANIPaddressthatwasassignedtoadevice.
APN–SearchesforconnectionstoaparticularAPN/Realm.
SessionStart–Performsthequery,andreturnsdatasessionattemptsthatoccurredduringthespecifiedtime.
SessionEnd–Performsthequery,andreturnsdatasessionattemptsthatoccurredduringthespecifiedtime.
Usage–Generatesthereportoutputforsessionsthatusedthespecifiedamountofdataduringthesession.
Thiscanbespecifiedasgreaterthanorlessthan.
Duration–Thereportoutputwillbegeneratedforsessionsthathadadurationlengthasspecified.
Thiscanbespecifiedasgreaterthanorlessthan.
SortBy–Sorttheresults,ascendingordescendingdependingonthecolumnchosen.
Step4:ClickSubmittogeneratethereport.
Step5:Ifyouwishtoprintthereport,openthereportinaprintableformat.
YoucanalsodownloadthereportasaMicrosoftExcelfile.
Theparagraphabovethereportexplainshowtodothis,alsoseethecircleditemsinthegraphicbelow.
Hereisanexplanationofeachfieldinthereport:StartTime–Thetimethatthesessionstarted.
EndTime–Thetimethatthesessionended.
Duration(min)–Thetotaldurationofthesessioninminutes.
APN–TheAPNthatthedatasessionwasestablishedon.
ThisshouldnotdifferfromtheAPNyouarereportingon.
Username–Theusernameusedforauthentication(ifUsernameandPasswordauthenticationisenabledforthisAPN).
MSISDN–TheMSISDNorphonenumberofthedevicethatattemptedthedatasession.
IP–TheIPaddressusedduringthesession.
ThiswilleitherbeastaticIPaddress,orinthecaseofdynamicallocation–itwillbethedynamicallyallocatedaddress.
Usage(bytes)–Thetotalusage(inandout)usedbythisconnection.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|29Page|29Page|29297.
6ACCOUNTINGSUMMARYREPORTSSummaryaccountingreportscandisplaythefollowinginformation:AverageSessionLengthovertimeSessionconnectionsovertimeAverageBandwidthUtilisationovertimeSessiondisconnectionsovertimeThisinformationisprovidedinanumberofgraphs,andasingletableformat.
Eachgraphandeachcolumnofthetablesshowstherequiredinformationovertime.
Togenerateasummaryauthenticationreport,followthesesteps:Step1ClicktheReportslinkfromthepagetopbanner.
AnewReportsformwillappearatthebottomofthepage.
Step2ChooseAccountingDetailedfromtheavailablereportingoptions.
Step3Fillintheprovidedform.
Figure31-AccountingSummaryReportFormThefieldsareexplainedhere:Username–Searchforausernamethatwasusedduringanattempteddatasessionestablishment.
MSISDN–SearchesforaparticularMSISDNormobilenumberthatattemptedadatasessionestablishment.
APN–SearchesforconnectionstoaparticularAPN/Realm.
Report–Thereportinformationtodisplay.
From/To–Performsthequery,andreturnsdatasessionattemptsthatoccurredduringthespecifiedfromandtotimes.
Granularity–Inthegraphandtabulatedreport,summarisestheamountofSuccessesandFailuresintothisperiodoftime.
Note:avoidgeneratingalargetablebyspecifyingalowgranularityoveralargeperiodoftime.
Display–Youcaneitherdisplaythegraph,thetabulatedreportorbothdependingonhowyouwantthereporttobedisplayed.
Step4ClickSubmittogeneratethereport.
Step5Ifyouwishtoprintthereport,openthereportinaprintableformat.
YoucanalsodownloadthereportasaMicrosoftExcelfile.
Theparagraphabovethereportexplainshowtodothis.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|30Page|30Page|3030Asampleprintablereportisshownbelow.
Figure32-SamplePrintableAccountingSummaryReportOPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|31Page|31Page|31318.
AppendixA.
Glossary3G–3Gor3rdGeneration.
ThisistheshortformpertainingtothethirdgenerationofWirelessDataSystems.
Thissystemwasdevelopedtosatisfytheneedsofusersforhigherdatabandwidthacrossawirelessconnectionwiththeabilitytoroam.
4G–4Gor4thGeneration.
ThisistheshortformpertainingtothefourthgenerationofWirelessDataSystemsthatuseLTEtechnology.
Thissystemwasdevelopedtosatisfytheneedsofusersforhigherdatabandwidththanthe3rdGenerationWirelessDataSystemsacrossawirelessconnection.
Accounting–AccountrelatestoRADIUSorsessionaccounting.
Thistermisusedtodescribethefacilitiestoaccountfortrafficutilisationanddurationforsessions.
APN–AccessPointName.
ThisisaGPRSterm,similartotheconceptofadomainorRADIUSrealm.
TheAPNisusedtosegregatecustomersorclassesofcustomersfromeachother–andisusuallygiventoasubscriberfornetworkauthenticationandaccess.
TheAPNmustbeconfiguredonadevicebeforethedevicemaybeused.
Authentication–Authenticationistheprocessofensuringthatauserordeviceisidentified.
ThisidentificationisthenusedtogivetheuserordeviceaccesstoparticularservicesandmaybeusedtoensurethattheuserisallowedtoaccessaparticularAPN.
Althoughcommonlyauthenticationisperformedwithausernameandpassword,inthecaseofCMIitcanbetheMSISDNormobilenumberofthedeviceaswell.
CMI–CustomerManagementInterface.
Thisinterfaceallowsthemodificationofusers,enddevicesordevicesforaparticularAPN.
ItalsoallowsanITmanagertogeneratecustomreportsforaccountingandauthenticationofdevices.
CSV–CommaSeparatedValues.
DataSession-ThistermdeterminesthateitheranactiveGPRS/3GPDP-ContextorLTEEPSBearermobiledataconnectionhastakenplaceandconfirmsthatavirtualnetworkconnectionhasbeensuccessfullyestablishedbetweenthemobiledeviceandthemobilenetwork.
EPSBearer-EvolvedPacketSystem,isaconnection-orientedtransmissionnetworkthatrequirestheestablishmentofa"virtual"connectionbetweentwoendpointsbetweenthemobiledeviceandthemobilenetwork.
GPRS–GeneralPacketRadioService,isapacket-basedmobiledataservice,withtheabilitytoroam.
IPaddress–IPstandsforInternetProtocol.
AnIPaddressisauniqueidentifiergiventoparticipantsontheInternet.
Thisuniqueidentifierisusedtoensurethattrafficissenttothecorrectrecipient.
LAN–LocalAreaNetworkLTE–LongTermEvolutionisthetechnologybehindthe4thGenerationofWirelessDataSystems.
LTE,commonlymarketedas4GLTE,isastandardforwirelesscommunicationsofhigh-speeddataformobilephonesanddataterminals.
MSISDN–MobileSubscriberISDNnumber.
Thisisthetechnicaltermforamobilenumber.
Forexample:61421029081.
PDPContext–PacketDataProtocolContext.
ThistermpertainstoanactiveGPRSor3Gdataconnection,thetermcontextisusedtoindicatethatitcoversthestarttotheendoftheconnection.
RADIUS–RemoteAccessDialInUserService.
ThistechnologybecameapopularmeansforauthenticationfordialupservicewithinISP's.
TodayitisusedformanydifferentauthenticationsystemsincludingGPRSandVPNtechnology.
Alongwithauthentication,theRADIUSprotocolwillalsoprovidenetworkconnectioninformationtoenddevicesorterminalservers.
Realm–RealmisaconcepttoprovidecustomerandVRFisolationforasharedAPNbasedproductsuchasWirelessIPVPNPlus.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|32Page|32Page|3232Session–Weusethisterminologyinthisdocumenttodescribea"periodofconnection"muchlikeaPDPContext.
Asessionconsistsofaconnectionfromstarttofinish.
VRF–VirtualRoutingandForwardingWAN-IP–WideAreaNetwork-IPWIPVPN–WirelessInternetProtocolVirtualPrivateNetworkOPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|33Page|33Page|33339.
AppendixB.
TroubleshootingIamunabletologintotheuserinterface;insteadIgetanerror"SessionFailed".
Mylogincredentialsarecorrect.
Thebrowseryouareusingmustbecapableofsupportingcookies.
Mostbrowserstodaywillsupportthis,howeveryoucanmanuallyswitchoffthiscapabilitywhichwilllimityourabilitytoaccesssomewebsites.
Checkyourbrowsertoensureitsupportscookies,andthatcookiesupportisenabled.
Ifyoustillfailtologin,eitheraskasuper-userofCMIwithinyourcompanytotryandchangeyourpassword.
Ifyouareasuper-useralready,contactOptusTechnicalSupportforfurtherassistance.
Iamunabletologintotheuserinterface;insteadIgetanerror"PleasecontactOptustounlocktheaccount".
Thiserrorisshownasaresultoftheof5failedloginattemptsinarowwiththedesiredAdministratoraccount,pleaseseesection5.
6UNLOCKINGADMINISTRATORSACCOUNTSforfurtherinformationabouthowtounlocktheaccount.
WhenIattempttoconnect,Igettheerror"AuthenticationFailed"onmydevice.
Thisisduetoeitherinvalidcredentialswhenlogginginortheenduseraccountiscurrentlysuspended.
Thismaybeduetoanincorrectmobilenumber(MSISDN),usernameorpassword.
Oritmayapplytothecombinationofboth.
Ortheendusermobileaccountiscurrentlysuspended.
Firstcheckthatyourcredentialsarecorrectforthedevicebyensuringthatyou'reMSISDN,usernameandpasswordaresetcorrectlyandthedevicestatusiscurrentlyactivewithininCMIPlatform.
Rememberthatyou'reAPN/Realmmaynotrequireallofthisinformation–checktheassociatedVRFwithintheCMIinterfacetochecktheAPN/Realmconfigurationthatappliestoyou.
Trychangingthepasswordforthedeviceintheinterfacetoseeifthishelpsalso.
AnauthenticationreportcanhelpwithdeterminingwhatinformationwassentbythedevicetoensurethatitmatchestheEndUserDeviceconfiguration.
Youshouldseeafailedauthenticationattempteverytimeyoutrytoconnect.
Otherwise,ifyoufailtoseeanauthenticationattempt(eithersuccessfulornot)perhapsyouhaveconfiguredtheincorrectAPNonyourdevice.
Double-checkyourdeviceconfiguration.
WhenIattempttoconnect,Igettheerror"TemporaryFailure"onmydevice.
Thiscansometimesbethesameasan"AuthenticationFailure".
Checktheabovehelpdescriptionbeforedoinganythingelse.
Also,ensurethatyouareusingavalidSIMcardontheOptusnetwork.
IfyouareattemptingtouseanotherprovidertoconnecttoyourOptusAPN/Realm,thismaynotworkunlesstheproviderhasaroamingrelationshipwithSingTelOptus.
Finally,theerrormaybeanetworkrelatederror–soafterattemptingeverythingintheabovefewparagraphs,youmaywishtocallOptusTechnicalSupportforfurtherassistance.
Iconnect,butIkeepgettingtheincorrectIPaddress.
Thismaybeforanumberofreasons.
IftheinvalidIPaddressisconstant,perhapsyouareauthenticatingwiththewrongcredentials.
DoublechecktheEndUserDeviceconfigurationwithintheCMIuserinterfacetoensurethatiscorrect.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|34Page|34Page|3434ChecktheAuthenticationreportstoseewhatIPaddressyouarebeingallocated.
IftheIPaddressinthereport,andtheonebeingallocatedtoyourdevicedonotmatch,youcouldbespecifyinganIPaddressinthenetworkconfigurationofyourdeviceorlaptop–checktheconfigurationofbothtoensurethisisnotthecase.
IftheIPaddressappearstoberandom,youmaybeattemptingtoconfigureanAPNthatisnotset-upforStaticIP.
CheckwithOptusTechnicalSupporttoensureyourAPNisconfiguredcorrectlytousestaticallyassignedIPAddresses.
WhenIconnect,Iamunabletosenddata.
Thissymptomcanbeduetovariousreasons.
EnsurethattheplatforminitiallygivesyouanIPaddresscorrectlyandthatitmatcheswhatyouexpect.
AninvalidIPaddresswillnotroutecorrectlyandsoexpectedtrafficwillnotflow.
AstheIPaddressisallocatedtotheconnectingenduserdevice,inmostcasesacorporatefirewallmayblockyoufromaccessingthedatayourequire.
Ifthereisafirewallinplace,checkwithyourfirewallmanagertoensureyourIPaddressisallowedtoaccesstherequiredinformation.
Toseeifanytrafficispassingthroughthemobileenduserdevice,youmaywishtorunanAccountingreportonyoursession.
Analysethetrafficutilisationtoseeiftrafficisbeinggeneratedduringthedataconnectionsession.
WhenIattempttogenerateareport,nothingisdisplayed.
Ensurethatifyouarelookingtoreportonaparticularsessionthatthesessionhasended.
Accountinginformationisonlysentattheendofasessionforreportingpurposes.
Perhapsyourcheckistoorigid,trynotspecifyingacheckitemsuchasusageorusernamewhengeneratingthereport.
Ifyoucanseetheitemyouarelookingforinamoregeneralreportthanyouareprobablybeingtoorigidinyourqueryandspecifyinginvalidcheckitemswithinthereportform.
Ensurethatthetimespaniscorrectwhenperformingthequery.
Also,trywideningthetimestampbyafewhoursordays.
Sometimesasessionmayhavestartedearlierthanyouexpected.
WhenIattempttodoabulkreplace,Icandownloadthefilebutamunabletoopenittomodifyit.
ThefiledownloadedisaMicrosoftExcel97formatfile.
YouwillneedaversionofMicrosoftExcelthatisequaltoorgreaterthanMicrosoftExcel97toopenthefileandmodifyit.
Theapplicationkeepsrejectingapasswordasinvalidwhenattemptingtosetauser'spassword.
Thepasswordallocatedtodeviceshasstrictrequirementsforsecurityaswouldbeexpectedinpassword-onlybasedauthentication.
Pleaseseesection6.
2CREATINGENDUSERDEVICESofthisguideforenduserdevicepasswordrequirements.
IattempttosetanMSISDNbutitisrejectedasalreadytaken.
Thisisprobablybecauseitis!
YoucannotusethesameMSISDNfortwodifferentIPaddresses.
EachAPN/RealmmusthaveauniquelistofMSISDN'stooperate.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|35Page|35Page|353510.
AppendixC.
FieldsTheinterfacechecksallinputsforfields.
Requirementsforeachtypeoffieldwiththeinterfaceareoutlinedbelow:FieldTypeFormatUsernameAusernameismadeupofalphabeticalandnumericalcharactersincludingahyphen(-)andafullstop(.
).
Ausernamemustbebetween3and32characterslong.
CommentThecommentfieldismadeupofmixedcharactersthatareavailableonanormalUS-ASCIIkeyboard.
Thestringmustnotbeanylongerthan64charactersanddoesallowtheuseofspaces.
PasswordThepasswordfieldisastringofcharacterswithnospacesthatincludesnumbers,symbolsandalphabeticalcharacters.
Theremustbeatleast2charactersofdifferentgroups.
Thepasswordmustbebetween6and32characters.
MSISDNThisisstrictlyanumericalfieldthatis11characterslong.
Anexamplewouldbe:61421029081.
Notethecountrycodeandthelackofthetrailing0beforethe421.
WAN-IPAsingleIPaddressfieldintheformat'aaa.
bbb.
ccc.
ddd'.
Anexamplewouldbe192.
168.
1.
2.
APN/RealmAstringbetween3and64characters.
Thisstringmustconsistofeitheralphabeticalornumericalcharactersincludingthehyphen(-),theunderscore(_)andadot(.
).
NospacesareallowedforanAPN/Realm.
LANs-SubnetIthastobeavalidipv4IPaddress,e.
g.
10.
0.
0.
10.
DistanceIfentered,ithastobeapositiveintegerlowerthan256.
OPTUSWIRELESSIPVPN-CMIADMINISTRATORGUIDECommercialinConfidencePage|36Page|36Page|363611.
TableofFiguresFigure1-CMIURL9Figure2-LoginScreen10Figure3-CustomerandVRFsPanels11Figure4-VRFsPanelwithaHighlightedService12Figure5-Customer,VRFs,APNandDevicesPanels12Figure6-AdminsPanel14Figure7-NewAdminform14Figure8-HighlightedAdminrecord15Figure9-AdministratorForm15Figure10-LockedUsersPanel16Figure11-DevicesPanel17Figure12-NewDeviceform17Figure13-CreateEndUserDeviceForm18Figure14-NewEndUserDeviceCreated19Figure15-EditEndUserDeviceSelection19Figure16-EditEndUserDeviceForm19Figure17-APNspanel20Figure18-BulkActivationFormandInstructions20Figure19-Downloadedactivationtemplate21Figure20-ActivationtemplatewithSampleDataFilledIn21Figure21-SampleBulkActivationError21Figure22-BulkReplace22Figure23-AuthenticationDetailedReportForm24Figure24-AuthenticationDetailedReportFormwithResults24Figure25-ReportinExcelFormat25Figure26-ReportinText(TabDelimited)Format25Figure27-AuthenticationSummaryReportForm25Figure28-AuthenticationSummaryReportFormwithResults26Figure29-SamplePrintableAuthenticationSummaryReport27Figure30-AccountingDetailedReportForm28Figure31-AccountingSummaryReportForm29Figure32-SamplePrintableAccountingSummaryReport302020SingtelOptusPtyLimitedVersion4.
1January2020