AT&T REPORTING AND MANAGEMENT TOOL (ARMT) USER GUIDE VERSION

Transcription

1 AT&T REPORTING AND MANAGEMENT TOOL (ARMT) USER GUIDE VERSION AT&T Intellectual Property. All rights reserved. AT&T and the AT&T logo are trademarks of AT&T Intellectual Property. All other marks contained herein are the property of their respective owners. Images are shown for illustrative purposes only; individual experience may vary. This document is not an offer, commitment, representation or warranty by AT&T and is subject to change.

2

3 Table of Contents Preface Introduction Preface... 5 Introduction... 6 AT&T Reporting and Management Tool (ARMT) The AT&T Reporting and Management Tool... 7 Logging into the ARMT application... 8 Graphical User Interface Managing the User account Managing notifications Dashboard Maps Devices Device Detail display Adding devices into ARMT Taking devices out of service Real-Time management of devices Notifications Organizations Defining Organizations Sites Tunnel servers Reports VPN Gateway Devices VPN Gateway devices VPN Gateway device details VPN Gateway remote commands... 66

4 VPN Gateway configuration requirements for ARMT Cellular Devices Cellular Devices Cellular Device Details Cellular configuration Cellular remote commands Cellular configuration requirements for ARMT Creating a new Cellular configuration profile Deleting a configuration profile Adjusting when a Cellular Device is considered Down by ARMT Legacy Cellular Devices Legacy Cellular devices Legacy Cellular Device details Legacy Cellular configuration Legacy Cellular remote commands Legacy Cellular configuration requirements Service Manager configuration profiles for Legacy Cellular devices Creating a new non-service Manager Legacy Cellular configuration profile Deleting a Legacy Cellular configuration profile Adjusting when a Legacy Cellular device is considered down by ARMT Support Support Feedback Appendix A: Supported Devices Appendix A: Supported Devices Appendix B: Release Notes Appendix B: Release Notes...105

5 Preface AT&T, Inc. reserves the right to revise this publication and to make changes in the content thereof without obligation to notify any person or organization of any revisions or changes. Page 5

6 Introduction The AT&T Reporting & Management Tool (ARMT) is a sophisticated, but intuitive cloud-based portal that monitors remote data network devices across internet and service providers. In today s environment, the configuration, installation, and management of complex distributed networks is a challenge for businesses. The challenge increases for businesses with multiple locations, which now may span multiple time zones and countries. To complicate matters further many locations may not have any support staff on-site. ARMT provides a company with one system to monitor and remotely control AT&T VPN Gateways. The system has a powerful user interface that allows sorting and searching in order to improve productivity and identify problem patterns. In addition to standard reports, online views can be exported to create ad hoc reports. Data is provided on over 50 items regarding the availability, performance, configuration and location of your devices. Remote devices can be configured by groups or individually, and the firmware easily updated from a central operations center. Based on user criteria, the portal can also send real-time alerts to defined addresses. ARMT is a front end user interface to the AT&T Service Manager, a cloud-based configuration tool that enables one touch provisioning or configuration changes. Most configuration tasks take place in the Service Manager and are inherited by the ARMT application in read-only mode. Any changes to configurable items in ARMT are automatically updated to the Service Manager as well. The system s mapping functions provide a visual picture of a customer s network status at any given time. The maps can be zoomed in and out to display finer levels of granularity all the way to a single site. The device can then be selected from the map for further analysis and control. Mapping is also used for site location information, along with the physical address and contact information. Managing large enterprises, distributed enterprises, and mid-market networks alike is simple with ARMT. As long as a site has a connection to the Internet, you are ready to remotely manage its devices. ARMT lives in the cloud and utilizes up-to-date secure technology. This is especially important in large distributed enterprises, where there could be thousands of locations. Your VPN Gateway infrastructure can be monitored and controlled by multiple administrators who are geographically dispersed, each with appropriate permissions. Page 6

7 The AT&T Reporting and Management Tool The AT&T Reporting and Management Tool (ARMT) is a cloud-based portal that can be used to manage your AT&T VPN Gateways. To sign in to ARMT go to the URL. This will take you to the main Login page. Page 7

8 Logging into the ARMT application Login page Enter your Service Manager Account ID, User ID, and Password (or PIN/security token). Click the Login button to continue. Login credentials are assigned, authorized and authenticated by your AT&T account administrator. Please contact your administrator to obtain them. Once you have logged in, the ARMT application opens with the Dashboard monitoring page displayed. Page 8

9 See Dashboard for information about the charts and other information displayed on the Dashboard, and see Graphical User Interface for a general description of the ARMT graphical interface. Page 9

10 Graphical User Interface The layout of the ARMT graphical interface for a majority of the panels you will encounter is very similar, with easily-located action panels. Navigation bar On the left side of the of ARMT interface is the navigation bar, which lists the main sections of the ARMT application. Several of the items have sub-menus that allow you to further narrow the selection. The navigation bar provides access to the following items: Dashboard: Displays the ARMT Dashboard, a real time list of device events for an organization. The display includes several charts describing device states, a map of sites within your organization, and a tabular view of devices. The status of devices is indicated by colors on the map and in the tabular device list. See Dashboard for a description of the Dashboard charts and other information, and see Deployed device status indicators for a description of the status indicators. Page 10

11 Maps: Displays the graphical view of monitored devices on a world map. The maps allow you to drill down on specific units and their error conditions. When global devices are being managed, a specific country or region can be selected. See Maps for further information. Devices: Displays the status of any monitored devices. This menu item displays a drop-down that lets you specify which type of device to be displayed, or you can display all devices belonging to the current organization. See Devices for further information. Configurations: Displays a list of device configuration profiles available to the user. VPN Device configurations are created in the AT&T Service Manager, and most settings related to VPN Device configurations are displayed in the Configuration page in read-only mode. See Configuration tab for VPN Gateway devices for information about applying configurations to VPN Gateway devices, and Configuration tab for Cellular devices for information about configuring Cellular devices. Reports: Allows you to generate near real-time availability reports based on different selection criteria. The system also maintains a history of previous reports that can be viewed. See Reports for further information. Notifications: Displays the history of event notifications that have been sent. Notifications are produced when a device experiences a monitored condition and that event has been subscribed to by the user. See Notifications for further information. Organizations: Displays the organizations available to a user. An organization is simply a container that is used to associate devices. See Organizations for further information. Sites: Displays a list of all the sites defined under the current organization and its child organizations. The list contains the site name, number of devices at that site, and the date the site was created. See Sites for further information. Organization filter The Organization filter, which is located at the top-right of every page, allows you to limit your displays to certain authorized customer names or account IDs, as defined in the AT&T Service Manager. The selection in this filter persists throughout all pages within the ARMT application. See Organizations for further information about Organizations. Page 11

12 Additional filtering On a number of panels, there are a variety of filters that allow you to narrow your display. The type of filters changes depending on the type of detail being displayed, but will allow you to filter for only the entries you wish to see. The items that can be filtered are provided in drop-down menus from which you can select those appropriate to you. Some selected filters require manual user input, such as the MAC address filter. Search box Each panel will also contain a Search box that can be used to locate specific devices or sites. Enter the desired value and click on Search. The selected entries will be displayed. The search tool will match on the following fields: MAC address Serial Number Modem ICCID Site ID Page 12

13 Panel-specific menus At the far right of various panels are drop-down menus, which allow you perform specific operations for the display or device. Available menus are specific to the panel being displayed. Page 13

14 Managing the User account This section is where you can modify information related to your ARMT user account and subscribe to various device notifications. To manage the ARMT user account, click on the Settings drop-down at the top left of the panel, then select Account. This will display the following information panel: The panel allows you to: Modify the ARMT user name associated with the account Change the address for the account. This address is used by the ARMT tool to send notification alerts. Only one address can be entered. If you would like the notification to go to more than one person, create an distribution list and include the distribution list's address here. Page 14

15 Set the user's time zone, so that all data is displayed in local time. Enable Notifications for the account, determine whether the geographic Map displays should be made available, and whether the location of cellular devices should appear on the map. Once all the desired information has been entered or changed, click Save Changes to save the information. Page 15

16 Managing notifications The Account panel provides the ability to manage device and organization notifications. Notifications provide a convenient way of being alerted when a device or group of devices changes state. To create a new notification profile from the Account panel, click Notification Profiles. This will display the existing profiles for your organization/account. You can create a new profile by clicking the Create icon at the top right of the list. This will bring up the new notification profile panel. The panel gives you the ability to name the profile and specify the type of alerts that should generate a notification. Page 16

17 As part of the notification profile, you can define when a notification should be issued. The notification can be disabled or sent at various time intervals up to 24 hours. The following sections list each notification and what it is triggered by. VPN Gateway notifications Device cellular location changed: The cellular location details reported by the VPN Gateway device changed. For more details about determining the cellular location of a VPN Gateway device, refer to the Devices section. Page 17

18 Backup WAN threshold reached: The VPN Gateway device sent an SNMP inform that it has been connected with either the WAN2 or Cellular interface longer than the threshold time. The VPN Gateway device will continue to use the backup connection if this inform is sent; the inform is meant to be a warning that the VPN Gateway device has been in backup mode for an extended period of time. To enable this SNMP inform, enable the Dial Backup Threshold option in the Service Manager profile for the VPN Gateway. Device signal strength fell below nominal threshold: The cellular signal strength reported by the VPN Gateway device has dropped below a specified threshold percentage. This threshold is defined by an ARMT admin in the Admin panel of the site. Device WAN interface changed: The VPN Gateway device sent an SNMP inform that it has switched to a new WAN interface. Ping test succeeded: The VPN Gateway device sent an SNMP inform that it successfully pinged an IP address specified in its Service Manager profile. The VPN Gateway must be running version 6.2 or higher to have ping tests enabled. Device data usage over limit: The device exceeded the specified Individual Data Limit value listed in the Data Plan associated to the device. See Organizations for more information on Data Plans. Device cellular network type changed: The SNMP probe response from the VPN Gateway device indicated that the cellular network (4G LTE, 3G HSPA+, etc.) type that it is connected on has changed. Device rebooted: The VPN Gateway device sent an SNMP inform that it was rebooted. Ping test failed: The VPN Gateway device sent an SNMP inform that it failed to ping an IP address specified in its Service Manager profile. The VPN Gateway must be running version 6.2 or higher to have ping tests enabled. Device unreachable: ARMT cannot reach the device. Device up: The VPN Gateway device is probed once every 15 minutes and has responded successfully to the probe. Backup WAN autotest failed: The VPN Gateway device sent an SNMP inform that its scheduled autotest has failed on either the WAN2 or cellular interface. OOB Cable(s) Missing: The VPN Gateway notified ARMT that its Out-of-Band cable is missing. OOB Cable(s) All Present: The VPN Gateway notified ARMT that its Out-of-Band cable is present. Device firmware changed: The VPN Gateway device is running on a different firmware version from the last time the device was probed. VRRP state changed: The VPN Gateway device sent an SNMP inform that its VRRP state changed. Note that VRRP must be enabled in the VPN Gateway's Service Manager profile to receive this inform. Device down: The VPN Gateway device is probed once every 15 minutes. If the ARMT tool misses two consecutive probes and also has not received any SNMP informs within the past 30 minutes, the device will be marked as down (red status) and this notification will be sent. The time specifying when a VPN Gateway device is considered down cannot be adjusted. Device primary IP changed: The VPN Gateway device's current WAN IP address has changed. Page 18

19 Cellular notifications Device firmware changed: The cellular device is running on a different firmware version from the last firmware version the device logged. Device recovered: This notification is generated whenever the cellular device is considered down (red status) and the device checks back in to the ARMT monitor by sending a syslog or if the device is reachable through remote control commands. This notification will trigger the device to show as up (green status) in ARMT. Device signal strength fell below nominal threshold: The cellular signal strength reported by the cellular device has dropped below a specified threshold percentage. This threshold is defined by an ARMT admin in the Admin panel of the site. Device primary IP changed: The embedded cellular device sent a syslog stating that the IP address it received from the cellular network has changed. Device rebooted: The cellular device sent an SNMP inform that it was rebooted. Device Ethernet port disconnected: The cellular device sent a syslog stating that it lost physical connectivity to a client device that was previously connected via Ethernet to the Remote Manager. Device down: The cellular device sends a heartbeat syslog once every 30 minutes. If ARMT has not received any syslogs within the past 139 minutes (2 hours 19 minutes), the device will be marked as down (red status) and a notification will be sent. The time specifying when a cellular device is considered down can be adjusted by changing the configuration of the device. See Adjusting when a Cellular Device is considered Down by ARMT. Device cellular location changed: The cellular location details reported by the cellular device changed. See Devices for more details about determining the cellular location of a cellular device. Device WAN interface changed: The cellular device sent a syslog stating that it has switched to a new WAN interface. Device data usage over limit: The device exceeded the specified Individual Data Limit value listed in the Data Plan associated to the device. See Organizations for more information on Data Plans. Device cellular network type changed: The cellular device sent a syslog stating that the cellular network (4G LTE, 3G HSPA+, etc.) type that it is connected on has changed. Device ethernet port connected: The cellular device sent a syslog stating that a client device was connected to its Ethernet port and it has physical Ethernet connectivity to that device. After you have named your profile and set each desired value, simply click on Create to save the new profile. You can now subscribe to that notification from a specific device or organization setting display. On a device display the subscription icon can be found at top right. Page 19

20 You can also subscribe to an entire organization. Doing so will monitor and send notifications for all devices that belong to that organization or any of its sub-organizations. To subscribe to an organization, click on the Organizations tab in the navigation panel. From there, click the Actions dropdown for the appropriate organization, and then click Subscribe. Page 20

21 Dashboard The Dashboard page displays several charts and other widgets to provide at-a-glance details for your devices. Within each chart, clicking on a displayed category will open a table of devices included in that category. The following charts are provided: Deployment chart Connectivity chart Cellular Network Type chart Signal Strength chart The Dashboard page also provides an Alert Devices map widget that displays devices in an alert status. You can zoom in and out within the map, and select different regions to display. Click on a status indicator to open a window containing detailed information on the device. From within the window, you can click on the Organization name, the device's MAC address, or the Site ID to open associated pages. Devices in an alert state are also listed in tabular form at the bottom of the Dashboard page. Note: The Dashboard page does not automatically refresh, so the devices listed in on the dashboard page were in alert status at the time of when the page loaded. If the page is left alone for an extended period of time, the listed devices in alert state may become outdated. Page 21

22 Deployment chart The Dashboard Deployment widget displays a donut-style chart that provides a breakdown of deployed and undeployed devices in the organization. A device's deployment status indicates whether or not ARMT should provide active monitoring and alerts for the router. Click on an area in the chart to open the Devices page listing all of the organization's devices with this deployment status. Deployed: Indicates the number of devices that have been deployed, which means that they will be monitored based on the events that are sent by the device, and will also generate notification alerts based on the events received and your access to the device. In the Devices page, devices that have been deployed will be listed with a particular deployment status (for example, Up, Down, or Inactive). Further dashboard information is provided for deployed devices in the Connectivity chart and Cellular Network Type chart. Undeployed: Indicates the number of devices that have not been deployed, which means that they should not be monitored. The ARMT application will list details and events for undeployed devices, but these events will not generate any notification alerts. Undeployed devices will be listed in the Devices page with a pause icon as their status. Connectivity chart The Dashboard Connectivity widget displays a donut-style chart that provides a breakdown of the connectivity status of deployed devices in the organization. The chart only reports on the main statuses of Up, Down, and Unreachable. Page 22

23 Click on an area in the chart to open the Devices page listing all of the organization's deployed devices with this connectivity status. Up: The device is online and is reachable through ARMT. Down: The device is not reachable through ARMT. Unreachable: The device has never checked into ARMT even though it is in a Deployed state. The amount of time that ARMT should wait before reporting a device as Down varies depending on the device type: For VPN Gateway devices, the amount of time is 30 minutes. For Cellular devices, the Grace Period Duration and Heartbeat Interval device configuration options control the amount of time that ARMT should wait before reporting a device as Down. For example, the default Grace Period Duration for cellular devices is 109 minutes, and the default Heartbeat Interval is 30 minutes. When combined, this means that by default, ARMT will consider a cellular device to be down if it has not heard from the device in 139 minutes. Cellular Network Type chart The Dashboard Cellular Network Type widget displays a donut-style chart that provides a breakdown of the cellular connectivity type for deployed cellular-enabled devices. The type of cellular connection can vary depending on availability of service, quality of connection, and device configuration. You should verify the anticipated connection type and the APN associated with the cellular data plan before troubleshooting a device's type of cellular connectivity. Page 23

24 Click on an area in the chart to open the Devices page listing all of the organization's devices with this cellular connectivity type. LTE status indicators on your device displays the device's cellular network type using the same color codes used in Cellular Network Type chart. A blue light (solid or blinking) indicates a 4G connection, a green light (solid or blinking) shows the router is on 3G, and so forth. Signal Strength chart The Dashboard Signal Strength widget displays a bar graph representing the reported signal strength percentage of deployed devices in the organization. Click on one of the bars in the graph to open the Devices page listing all of the organization's devices with this reported signal strength. Page 24

25 Maps The Map page displays the status of the various devices, clustered by region, visually on a map of the organization s home country. The maps can be zoomed in and out to display finer levels of granularity down to a single site. The map can be filtered by organization, device category, device type, deployment, status, and country/region. When a category is selected it will prepopulate the devices under that category. Changes can be made to any filter criteria before filtering the map. Once the desired devices are displayed you can get more detailed information on a particular site by clicking the status indicator display. This will display an information bubble with the device type, site ID, and device information. You can also toggle the map between a street view and geographical view. Clicking the Device ID will then take you to the detailed device display. Page 25

26 Page 26

27 Devices The Devices page allows you to display the current status of all devices managed by your organization. To open the Devices page: 1. In the navigation bar, click Devices. 2. From the drop-down menu, select the appropriate category of devices, or select All to view all devices. The Devices page is displayed. The Devices page provides a tabular view of devices and their current status. Not all options may be available, depending on the scope of devices defined. Device status is displayed using a colorcoded indicator, described in Deployed device status indicators. The Filter Devices field allows you to filter the results so that only the relevant devices are shown. You can select the organization that should be displayed, and further filter the display based on device category, model, WAN status, and other types of information. You can also sort the display in the Devices panel, and click Export to export the information to CSV or Excel formats. Page 27

28 Monitoring devices Device monitoring in ARMT is controlled by the state of the device. There are two states a device will be in: deployed and undeployed: Deployed indicates that the device will be monitored based on the events that are sent in by the device, and will be listed with a particular status (see Deployed device status indicators). A device that is deployed will also generate notification alerts based on the events received, and on ARMT's access to that device. Undeployed indicates that the device will not be monitored. Undeployed devices are listed with a pause icon, regardless of their underlying status. ARMT will still list details and events for undeployed devices, but these events will not generate any notification alerts. Deployed device status indicators ARMT marks deployed devices with a color indicator to provide a visual way to note what its status is. Below is a list of color statuses and their meaning. Green: The device is online and is reachable through the ARMT system. See Managing Notifications for details on what triggers a device to go online. Red: The device is down. This status is also referred to as the Alert status. See Managing Notifications for details on what triggers a device to go down. Gray: The device is inactive, meaning that it has never checked in to ARMT. This is the state of the device if it is deployed, but no event has ever been received by ARMT. The Last Heartbeat timestamp for the device in ARMT will be listed as blank. Blue: The device is running on a backup WAN connection. This indicates that the device's current WAN connection is one of its backup connections (i.e. not WAN1). NOTE: The blue status only applies to VPN Gateway devices. Orange: The device is in dual-wan mode, but only its WAN1 interface is online. The secondary WAN interface is down. NOTE: The orange status only applies to VPN Gateway devices. Pause Icon: The device is undeployed. Page 28

29 Device Detail display Clicking a device ID on the Devices page will display the Device Detail panel. The Device Details panel can also be displayed by clicking a device ID on any device event panel, which are available in various places throughout the ARMT graphical interface (the Dashboard, Maps page, etc.). The Device Detail panel contains all information available about a device, including its current operating state. There are several tabs listed that provide details for certain sections of the device. The first section of the Device Details panel contains the basic information about the device. The information displayed will vary by device, but will contain the following as a minimum: Device ID and serial number Device Status Device Model Firmware Version Last Heartbeat Date/Time An optional comment field. Up to 255 characters can be entered on a per-device basis. The remaining information can be extensive (such as provided by an AT&T VPN Gateway, shown below), or more minimal (such as a 6300-CX). Page 29

30 The Configuration tab contains the device s organization and configuration information. These values are configured through the AT&T Service Manager. Any updates to these settings must be done through that tool. The Location tab contains the location information for the device. If available, the page will have the physical address of the device and a map showing its location. The current state of the device will be shown in the appropriate color. If ARMT has valid GSM location details for a device with cellular capabilities, a second pin, colored orange, will appear on the map to indicate the location determined using these GSM details. A line will also be drawn between the two pins. Clicking on this line will display the distance between the two pins in meters. The remaining tabs display data that is very specific to the type of device. For example, cellular devices will have a tab to display cellular modem details (such as signal strength, phone number, etc.) while VPN Gateway devices will list tabs detailing their tunnels. Information about the contents of a field and its meaning can be found in the appropriate device manual. The following example tunnel tab is from an U110. Page 30

31 Adding devices into ARMT VPN Gateway devices are added, configured, and deleted from the AT&T Service Manager. The ARMT tool receives an update from Service Manager twice per day with a list of VPN Gateway devices. This list is then synced with the list of VPN Gateway devices currently in ARMT. If any new devices are found in the Service Manager file, they are added in ARMT, and their Service Manager configuration settings are imported. If a VPN Gateway device is not found in the Service Manager file, but it exists in ARMT, then that device is removed from ARMT. Adding Other Devices Note: Only authorized AT&T personnel can perform this function. If you need additional devices imported into ARMT, please contact your AT&T representative. Cellular devices, such as 6300-CX and 6310-DX, and Legacy Cellular devices such as the 6200-FX Cellular Extender device, are supported with ARMT, but are not added via the AT&T Service Manager. These devices can be added into ARMT by authorized users. Contact your ARMT site administrator if you do not have permission to add devices. To add devices to the ARMT site, use the admin device importer. 1. Click Settings at the top of the navigation bar to open the Settings drop-down menu. 2. Click Admin. The Admin Panel displays, with the Imports tab selected. 3. Click New Import. Page 31

32 The New Import window displays. 4. Click Choose File to select a file in CSV format to be imported. 5. Select the accelerated Type. 6. Click Import. Refresh the Admin page to check the status of the import., You can review the import results by clicking on the import ID. Page 32

33 Creating a CSV file for import To import a CSV file to add devices, the file must contain details for the new devices in a specific format. That format is defined in the Template CSV. 1. Click Template CSV. The template file is downloaded. 2. Open the template file in a CSV editor such as Excel. 3. Add device information as indicated in the file. The MAC address, serial number, and Organization must be included in the file to add a new device. All other fields are optional. If you are specifying a value in the config_name column, the value must correspond to an existing configuration profile. See Creating a new non-service Manager Legacy Cellular configuration profile for information about setting up configuration profiles. IMPORTANT: Keep the first line of the CSV file exactly as is. These column headers are required for the device importer to work properly. If the column headers are deleted, then the devices will not be imported. 4. Save the CSV file under a new name. Page 33

34 Taking devices out of service Taking a device out of service will stop the monitoring of a device. It will still appear in the ARMT tool, but it will not generate any notification alerts. This is useful when a device is being staged, if an extended downtime is going to occur, or if the device is being shipped. To take a device out of service: 1. Open the Device page. 2. Click the device ID of the device. The Device Details are displayed. 3. From the Actions menu, select Undeploy. Page 34

35 Real-Time management of devices ARMT is designed to remotely configure and manage VPN Gateways and Cellular devices. A number of actions are available to control and report on the status of device. To manage a device, click the Device ID of the appropriate device from one of the device's event panels. Device event panels are available in various places within the graphical interface (Devices page, Dashboard, Maps page, etc.). The Device Details are displayed. The Device Details display contains all the current information for the unit, including its configuration, current status, and location. At the top right of the panel are drop-down menus to manage the device. From left to right to drop-down menus are: Reports: Provides a drop-down list of available reports that can be generated for the individual device. For more details on each report, refer to Reports. Page 35

36 Actions: Provides a drop-down list of available actions that can be performed concerning the device in ARMT. Subscribe/Unsubscribe: Allows a user to subscribe to or unsubscribe from receiving notification alerts from the device. For details about managing notifications and profiles, refer to Managing Notifications. Deploy/Undeploy: Controls the deployment of a device. For details about the deployment status and deploying devices, refer to Managing the User Account. Commands: Provides a drop-down list of available remote commands that can be sent to the device. Clicking on a command will execute that command. See the Remote Commands sections for each device category for a description of available device commands. Pages Details: Refreshes the information in the Device Details display. No changes are made to the device. Events: Displays the most recent event records received from the selected device. The events are in chronological order with the latest first. Clicking on any event record will bring up the detail associated with the event. All events are listed with the following information: Created: The date and time that the event occurred. The time is displayed in the time zone of the user. Type: The device state type that caused the event to be displayed. There are currently seven different states that a device can be in. Status: The device is reporting its current operational status. Configuration: The device or remote operation has initiated a configuration change or information request. Firmware: A firmware action has been initiated, or the device determined there was a conflict. Reboot: The device has restarted. DHCP: The device is reporting a change in its DHCP configuration. Tunnel: VPN tunnel status. Remote: A command has been received from the portal and an action initiated. Level: The severity level of the event being displayed. ARMT supports six of the severity levels defined by RFC5424. The six levels of events are: Alert: Should be corrected immediately, therefore the appropriate action or support notification should be initiated to fix the problem. Error: Non-urgent failures, these should be relayed to developers or admins; each item must be resolved within a given time. Warning: Warning messages, not an error, but indication that an error will occur if action is not taken. This message indicates an item that must be resolved within a given time. Notice: Events that are unusual but not error conditions. No immediate action required. Info: Normal operational messages used for reporting, measuring throughput, etc. - no action required. Page 36

37 Debug: Info useful to developers for debugging the application, not useful during operations. Information: The data that the device wants to transmit to the portal. These messages can be simple text messages or complete hardware status displays. The information field is selectable. Once you select on a piece of information you will be taken to a detailed description of what has occurred. Raw Events: Provides a raw output of events. Page 37

38 Notifications The Notifications page displays the notifications that were sent to the user based on their notification subscriptions. The Notifications page is a convenient way to look back at alerts that were sent to you, in case you deleted the or need to have an extra record of it. The information column sums up the content of the for quick reference and when clicking on it, takes you to the event that spawned the for more analysis and information. You can filter for similar events and go back as far as 30 days if you need to look for a record of something older. If you want to get to the device quickly you can do so by selecting the MAC address. The date displayed is when the notification was generated. Page 38

39 Organizations The Organizations page displays all organizations a user has access to. An organization is simply a way that is used to associate devices. To manage organizations, refer to Defining Organizations. Page 39

40 Defining Organizations The portal makes extensive use of a structure called the Organization. An organization is simply a way that is used to associate devices. All listed organizations and devices are obtained from the AT&T Service Manager. The organization name is pulled from the customer name value configured in the account s billing information, along with the Account ID. Any device configured in the AT&T Service Manager to be monitored by the ARMT tool will have their organization shown here. The device will belong to an organization with the same name as the Account ID, and that will be a sub-organization of an organization with the same name as the customer name in the AT&T Service Manager. For details on configuring a device to be monitored by the ARMT tool refer to Monitoring Devices. Hierarchical View This hierarchical view will show all organizations and sub-organizations that the current user has access to. Each line contains the organization name, and an Actions drop-down that allows you to: View the devices associated with the organization. Edit the organization settings. View the data plans associated with the organization, as well as creating and deleting data plans. Subscribe to alerts for the organization s devices. Editing organization settings To edit an organization's settings: 1. At the Organization page, click the Actions link to open the Actions dropdown. 2. Select Edit Settings. Page 40

41 The Edit pane opens with the Information tab displayed. Information tab The Information tab allows you to include a description and location of the organization. Additionally, you can include an optional footer for the organization. Optional Footer The footer text displayed at the bottom of the ARMT site can be changed at an organization level. When a footer is defined for an organization, it will be applied to all sub-organizations. To set or update the footer text: 1. Navigate to the Organization page. 2. Click the Actions drop-down link on the right hand side of the organization's row. 3. Click Edit Settings. 4. In Footer (optional), enter in the desired footer text. The footer text can be either plain text or valid HTML. 5. Click Update. Page 41

42 Device Settings tab The Device Settings tab contains all selections to enable or disable optional details or metrics for devices in the organization or its sub-organizations. Enable Cellular Modem Data Collection: When enabled, the ARMT application will collect cellular statistics from all VPN Gateway devices that belong to the organization or any of its suborganization. These cellular utilization statistics will be displayed on the device's details page as the Cellular Utilization chart and the Cellular Details tab. Refer to VPN Gateway Devices for more details. The cellular statistics can also be used to generate cellular-based reports for VPN Gateway devices. Enable VLAN Data Collection: When enabled, the ARMT application will collect details of the LAN ports of the VPN Gateway device, including the Vlan IDs associated with the LAN ports. Data Plans Page 42

43 The Data Plans tab allows authorized users to create and manage ARMT cellular data plans for the selected organization. ARMT cellular data plans allow you to establish usage thresholds for notification purposes. Once a data plan is created, you can apply that data plan to one or more devices by selecting the data plan under the Settings tab on the details page for the device. You can then select to receive notifications if the data plan threshold is exceeded. See Managing Notifications for enabled data plan notifications. The data plans list can also be exported into CSV or Excel format by clicking the Export button. Name: The name of the data plan. Clicking on the data plan name will display a list of the devices associated to that data plan, including how much data each device has used under the data plan. Number of Devices: The count of devices assigned to this data plan. Data Limit: The amount of data usage at which point a notification should be generated for the data plan. Note that for this notification to be generated, the Overage Notification option must be selected. Data Used: The amount of data used by the devices that belong to the data plan. Individual Data Limit: The amount of data usage for each device under the data plan at which point a notification should be generated. To receive this notification, a user must subscribe to the device and select the Device data usage over limit option in the notification profile. See Managing Notifications for information about setting up a notification profile, Start Day: The day of the month to reset the Data Used value of the data plan. Overage Notification: Selecting this option will send a notification when the Data Used value of the data plan exceeds the Data Limit option of the data plan. When triggered, this notification will be sent to all users that belong to the same organization that the data plan belongs to. Created: The time when the data plan was created. Page 43

44 Sites The Sites page displays all the current sites that the user has access to. The panel displays all unique sites that have been entered for the organization along with the organization name and number of devices. Note that sites are tied to the organization they are associated with, so there may be multiple sites with the same name, but they are associated to different organizations. The Name and Organization fields are both selectable items. Clicking on a site name will bring up the device display panel and list all devices at that location. Any device in the list can then be selected and managed. Page 44

45 Selecting the Organization field will display all devices that have been defined for that organization. Any device in the list can then be selected and managed. Page 45

46 Tunnel servers The Tunnel Servers link provides a dropdown with two options: VIG List, and VIG Utilization Report. VIG List Click the Tunnel Serves > VIG List option to open the Tunnel Servers page, which displays all the known VIG and SIG tunnel endpoints that VPN Gateway devices in ARMT are connected to. Each tunnel server is listed in the table with the following details: Name: The name of the tunnel server. Clicking on the name will direct the user to a page that lists details for each VPN Gateway device connected to that tunnel server. Devices: The number of devices connected to the tunnel server. IP Addresses: The number of IP addresses associated with the tunnel server. Depending on the network setup, a single tunnel server could have multiple IP addresses and physical servers pooled together that makes up the tunnel server network. Type: The type of tunnel server; typically either a VIG or SIG. Location: The listed location for the tunnel server. VIG Utilization Report The VIG/PNC Utilization Chart shows the utilization per VLAN on each associated VIG for a selected account. To display the VIG/PNC Utilization Chart, you must first select an account from the Select account(s)... dropdown. Charts for more than one account can be displayed. Page 46

47 There are three time ranges available in the Range drop-down: 30 days: If 30 days is selected, the time interval for each data point is one day. 7 days: If 7 days is selected, the time interval for each data point is one day. 24 hours: If 24 hours is selected, the time interval for each data point is one hour. You can also display a more granular view of the data within a chart by clicking and dragging the mouse over the area. This will zoom into the selected area. To reset the chart after zooming, click Reset zoom. Each chart represents the utilization statistics for a given VLAN on a single VIG. Mouse over any datapoint on the chart to display a popup window that shows the value for each of these statistics. The following statistics are included in the charts and the mouse-over window: Capacity: The amount of committed bandwidth (Combined Egress and Ingress) for a given VLAN on a VIG. Exceeding this can result in packet loss on this VLAN. Click on Capacity below the chart to toggle on or off the Capacity line in the chart. Max Egress: The maximum recorded egress (Transmitted) between the current measurement time to the next point's time on this VLAN/VIG combination. This is considered to be a high water mark. Click on Max Egress below the chart to toggle on or off the Max Egress line in the chart. Max Ingress: The maximum recorded ingress (Received) between the current measurement time to the next point's time on this VLAN/VIG combination. This is considered to be a high Page 47

48 water mark. Click on Max Ingress below the chart to toggle on or off the Max Ingress line in the chart. Average Egress: The average recorded egress (Transmitted) from the current measurement time to the next point's time on this VLAN/VIG combination. Click on Average Egress below the chart to toggle on or off the Average Egress line in the chart. Average Ingress: The average recorded ingress (Received) from the current measurement time to the next point's time on this VLAN/VIG combination. Click on Average Ingress below the chart to toggle on or off the Average Ingress line in the chart. Page 48

49 Reports ARMT allows you to create a variety of device reports based on various selection criteria. The Reports feature can be selected by clicking on Reports in the menu. You are then given the choice of creating a new report or selecting from the history of old reports. Click on desired report type to create a new report. Availability Reports The Availability Reports panel allows you to create ad hoc reports on device availability. From the menu you can pick the selection criteria you want for the report. The items that can be selected are: Organization Device categories Device models Deployment status Time span for the report. Page 49

50 Once everything has been selected, click Create to generate your report. The report will be displayed using the parameters you specified. You can move the pointer across the charts to see data for a specific date. The selected data can also be exported to a CSV or Excel file for further analysis. Page 50

51 Cellular Network Type Reports The Cellular Network Type report creates an ad hoc report on cellular network type and the time duration that devices spent on a given network. Cellular Network Type reports are based on the events that are sent in by the devices into ARMT. Creating a Cellular Network Type report To create a new cellular network type report, click the Cellular Network Type link in the Reports dropdown menu of the navigation bar. From the report form, select the desired criteria for the report. The form items are described below. Organization: The organization that the devices are associated with. The user can also specify whether or not to include devices that belong to sub organizations of the selected organization by clicking the hierarchy icon button next to the Organization dropdown. Device Categories: The categories of devices to run the report on. Multiple device categories can be selected together. Device Models: The models of devices to run the report on. Multiple device models can be selected together. Deployment Status: Select to run the report on all devices, deployed-only, or undeployed-only. For a description on deployed versus undeployed, refer to Monitoring Devices. Time span: The timeframe for what events are used to generate the report. Once all the desired options are specified, click Create to generate the cellular network type report. Note that depending on the number of devices and the time span of the report, it may take several minutes for the report to complete. The report generation process is done in the background. You Page 51

52 can navigate away from this page without interrupting or stopping the process, and check on the report process by going to the report History page and then clicking on the appropriate report ID. The resulting cellular network type report can be exported to a CSV file by clicking the Download CSV button in the report. Cellular Signal Strength Reports The Cellular Signal Strength report creates an ad hoc report on cellular signal strength. Cellular Signal Strength reports are based on the events that are sent in by the devices into ARMT. The average dbm and percentage listed for each device in the table represents the average signal strength for the selected time span of the report. The average dbm and percentage listed while hovering over the map represents the average signal strength for all devices included in the report at the selected time. Creating a Cellular Signal Strength report To create a new cellular signal strength report, click on the Cellular Signal Strength link in the Reports dropdown menu of the navigation bar. From the report form, select the desired criteria for the report. The form items are described below. Page 52

53 Organization: The organization that the devices are associated with. The user can also specify whether or not to include devices that belong to sub organizations of the selected organization by clicking the hierarchy icon button next to the Organization dropdown. Device Categories: The categories of devices to run the report on. Multiple device categories can be selected together. Device Models: The models of devices to run the report on. Multiple device models can be selected together. Deployment Status: Select to run the report on all devices, deployed-only, or undeployed-only. For a description on deployed versus undeployed, refer to Monitoring Devices. Time span: The time frame for what events are used to generate the report. Once all the desired options are specified, click Create to generate the cellular signal strength report. Note that depending on the number of devices and the time span of the report, it may take several minutes for the report to complete. The report generation process is done in the background. You can navigate away from this page without interrupting or stopping the process, and check on the report process by going to the report History page and then clicking on the appropriate report ID. The resulting cellular signal strength report can be exported to a CSV file by clicking the Download CSV button in the report. VIG Reports The VIG (VPN Interface Group) report creates an ad hoc report of a list of VPN Gateway units and what VIGs they are associated with (if any). VIG reports are based on the events that are sent in by the VPN Gateway devices into ARMT. Page 53

54 Creating a VIG report To create a VIG report, click on the VIG Report link in the Reports dropdown menu of the navigation bar. From the report form, the user selects the desired criteria for the report. The form items are described below. Organization: The organization that the devices are associated with. The user can also specify whether or not to include devices that belong to sub organizations of the selected organization by clicking the hierarchy icon button next to the Organization dropdown. Deployment Status: Select to run the report on all devices, deployed-only, or undeployed-only. For a description on deployed versus undeployed, refer to Monitoring Devices. Once all the desired options are specified, click Create to generate the VIG report. Note that depending on the number of devices and the time span of the report, it may take several minutes for the report to complete. The report generation process is done in the background. You can navigate away from this page without interrupting or stopping the process, and check on the report process by going to the report's History page and then clicking on the appropriate report ID. The resulting VIG report can be exported to a CSV file by clicking the Download CSV button in the report. Page 54

55 Page 55

56 VPN Gateway devices VPN Gateway devices refer to the AT&T VPN Gateway line of products. Supported models are: U115 U To display a list of all VPN Gateway devices added to your system: 1. On the Navigation Bar, click Devices. 2. Select VPN Gateway. The VPN Gateway Devices page displays. VPN Gateway devices are listed in tabular form. The majority of the displayed information, such as as Device ID and Organization, are applicable to all device categories. The table entries specific to VPN Gateway devices are: Tunnels: The number of active VPN tunnels that are configured or enabled on the VPN Gateway, followed by the total number of configured tunnels. A green or red or color indicates the overall tunnel status. Connection: The connection currently being used by the VPN Gateway device. NOTE: The information displayed on the VPN Gateway Devices page is current when the page is first displayed, and may need to be refreshed to list the most current information. Page 56

57 VPN Gateway device details To display detailed information about a VPN Gateway device: 1. On the Navigation Bar, click Devices. 2. Select VPN Gateway. The VPN Gateway Devices page displays. 3. Click the Device ID for a VPN Gateway device. The Device Details panel displays. NOTE: The Device Details panel can also be displayed from any device event panel, which are available in various places throughout the ARMT graphical interface (the Dashboard, Maps page, etc.). Click the Device ID to display the Device Details panel. The majority of details provided on the VPN Gateway Device Details panel are applicable for all categories of devices. The device details specific to VPN Gateway devices are listed below. Primary IP: The IP address of the current WAN network connection of the VPN Gateway device. Firmware Rollback: The version of firmware that will be used when the Rollback remote command is issued to this VPN Gateway device. Management IP: The IP address of the VPN Gateway device's management tunnel. Page 57

58 Primary Interface: The currently used WAN connection interface. For example, eth1 corresponds to the WAN1 port of the VPN Gateway. Primary Connection Type: The type of network configuration of the current WAN connection. WAN 1 Cell Extender: Indicates if the WAN via Cell Extender option is enabled in the VPN Gateway device's AT&T Service Manager profile. Note: This field will only appear if there is a valid value entered in the Service Manager profile (not blank). WAN 2 Cell Extender: Indicates if the WAN2 via Cell Extender option is enabled in the VPN Gateway device's AT&T Service Manager profile. Note: This field will only appear if there is a valid value entered in the Service Manager profile (not blank). LAN Status: The status of the eight LAN ports of the VPN Gateway. A black color status indicates that nothing is physically connected to the LAN port. A green status indicates that some network device is physically connected to the LAN port. A user can hover over each port to display a popup text with network details about the port. WAN Utilization chart If a VPN Gateway's Service Manager profile has COS or non-cos bandwidth monitoring enabled and the WAN Utilization SNMP inform enabled, a WAN Utilization chart will be displayed detailing the amount of bandwidth used by the device. Either configuration change can be requested from an AT&T Sales team or submitted via the Customer Point Of Contact (CPOC) website at Select VPN Services > SOHO Devices > All Other Requests. There are three time ranges available in the Range drop-down: 24 hours: If 24 hours is selected, the time interval for each data point is one hour. 7 days: If 7 days is selected, the time interval for each data point is one day. 30 days: If 30 days is selected, the time interval for each data point is one day. The legend of your graph dynamically adjusts to your data usage and shows either KB/s or MB/s. The mouse-over popup will show more details of the measurements and uses always KB/s Page 58

59 Upload and Download are displayed separately because the WAN link capacity can differ in both directions. Compare the lines High Water Mark and Average Used for a visual representation of how much of the available bandwidth the WAN link is consuming. The WAN Utilization chart shows you how much of the available bandwidth of your WAN link you are consuming. Because capacity of your WAN link might not always be the same in both directions, two charts are provided Upload and Download. The device records utilization measurements every minute. If Data Usage is enabled in the settings, the device calculates averages every five minutes resulting in twelve measurements per hour. The Average Used line averages those twelve measurements each hour. If bandwidth testing has been turned on for this device in the Class of Service settings, then the device will perform bandwidth tests and the High Water Mark and Maximum Used lines are also displayed. If this setting is turned off, ARMT will only display the Average Used line. The graphs depict several types of bandwidth measurements over your chosen time range: High Water Mark: Each data point of this line shows the average value of the High Water Mark measurements from the bandwidth tests during the time interval. This provides an estimate of available bandwidth during the time interval. Click on High Water Mark below the chart to toggle on or off the High Water Mark line in the chart. Maximum Used: Each data point of this line shows the most data usage that was observed per time interval. Click on Maximum Used below the chart to toggle on or off the Maximum Used line in the chart. Average Used: Each data point of this line shows the average data usage that was measured during the time interval, in accordance with the Data Usage settings for the device. Click on Average Used below the chart to toggle on or off the Average Used line in the chart. Max Percentage Used: Mouse-over each data point of this on the chart to display a Maximum Percentage Used. This percentage indicates how close the actual bandwidth is compared to the tested bandwidth, and is determined by calculating the Maximum Used as a percentage of the High Water Mark during the time interval. Max Percentage by Range: This represents the highest recorded value for the Max Percentage Used over the selected time range. Configuration tab ARMT offers the ability to view and update certain fields of a VPN Gateway s Service Manager profile. The Configuration tab lists the available profile settings you can change. A two-way sync between ARMT and the AT&T Service Manager is performed, so that when a user updates one of the listed configured settings here, the updated settings are pushed to Service Manager. Similarly, Page 59

60 if profile settings are updated in the Service Manager, those changes will be pushed from the Service Manager to ARMT, and the settings listed on this tab will be updated accordingly. Settings tab The majority of details provided on the VPN Gateway Settings tab are applicable to all categories of devices. For details on those table entries, refer to the Devices section of this guide. The device details specific to VPN Gateway devices are: Data Plan: The data plan assigned to the device. If you have permissions to change the data plan, a drop-down menu is available that lists available data plans for the organization. Once a data plan is associated with the device, any cellular data used by the device will be tracked in the data plan. See Defining Organizations for information about viewing and managing data plans. Associated Devices tab The Associated Devices tab lists any devices that the VPN Gateway device is associated with, indicating that they are connected to each other. The following information is provided about the associated device: Device ID: The identifying MAC address for the associated device. Model: If the associated device is a type of device supported by ARMT, the model type of the device, as understood by ARMT, will be listed here. If the device is not supported by ARMT, the category will be listed with a dash (-). Interface: The physical interface of the VPN Gateway device that the associated device is connected to. Type: The type of connection that the VPN Gateway device has with the associated device. IP Address: The IP address of the associated device. Connected: How long the devices have been associated. Detach: Provides a button that allows you to remove the association between the devices. Tunnels tab The Tunnels tab lists details for each VPN tunnel established by the VPN Gateway device. Name: The name of the tunnel, as specified in the Service Manager profile. Connection ID: The unique identifier for the current tunnel connection. Connection Type: The type of network connection the tunnel is established over. Account: The account that the tunnel settings are registered under. Page 60

61 User ID: The ATTUID that the tunnel settings are registered under. Duration: The total time that the current tunnel has been established as of when this page was loaded. Mode: Indicates if the user can control the tunnel. Endpoint Type: The authentication server that will be used by the tunnel endpoint. Endpoint IP: The IP address of the tunnel endpoint. WAN Connection: The network configured for the current WAN connection (WAN1, WAN2, etc.). AGNS Managed: The service the tunnel is authenticated for. Auth Server: The server where the tunnel details are configured. Auth Protocol: The authentication protocol for the tunnel. Initiator: Indicates how the tunnel was initiated. Last Updated: The last time ARMT received an update concerning this tunnel. Networks tab The Networks tab lists details for eight LAN network interfaces that belong to the VPN Gateway device. If a field is listed with a value of N/A, that field is not applicable to the interface. Connection Type: The type of network connection for the interface. IP/Range: The IP addresses for the network. Ethernet Speed: If the network type is an Ethernet interface, then this indicates the speed of the Ethernet port. Ethernet Status: If the network type is an Ethernet interface, then this indicates the status of the physical connection on the Ethernet port. Location tab The location details for a VPN Gateway device are provided through the AT&T Service Manager profile of the device. Therefore, location details are displayed as read-only for VPN Gateway devices. To set the location of a VPN Gateway device, you must change the Service Manager profile for the VPN Gateway. In the profile, you can specify address details for the location, which ARMT will then use to look up location coordinates for the device. At minimum, the first line of the Street Address field in the Service Manager profile must exist for ARMT to list a location for the device. You can also manually set the location coordinates for a device by specifying the latitude and longitude coordinates in the device s Service Manager profile. Page 61

62 Contacts tab The Contacts tab provides the name, phone number, and address for the primary contact for the device. To add contact information for this device: 1. Click Add. 2. In the New Contact window, either: Select an existing contact and click Add. Enter information for a new contact and click Create, then select the new contact an click Add. Click Edit to change the contact information, and click Delete to delete the contact. Intelliflow tab The Intelliflow tab displays metrics gathered from the summarized netflows sent from the VPN Gateway device to the ARMT netflow collector. For these netflows to be sent, the VPN Gateway s Service Manager profile must: Have the ARMT Netflow flag enabled. Use version 10 of netflow. Send its netflows to the ARMT netflow collector. Add a firewall rule to the VPN Gateway device s policy list to allow netflow packets to pass out through the maintenance tunnel to ARMT. The metrics displayed on the Netflow tab detail the top 10 sources and destinations. Source: A source is an endpoint that clients request data from. Destintation: A client connected to the VPN Gateway devices s LAN ports, or the VPN Gateway device itself. The source/destination labeling is used, because most network traffic is clients downloading traffic from the Internet. If a customer s VPN Gateway traffic is instead mostly uploading data, the source/destination labels will be reversed, meaning the clients connected to the VPN Gateway will be the source, and the destination will be the endpoints the clients are uploading data to. Page 62

63 NOTE: Only IPv4 traffic is captured by the VPN Gateway and sent as summarized netflows to ARMT. Connectivity Tests tab The Connectivity Tests tab displays the 10 most recent WAN backup connectivity tests reported by the VPN Gateway device. The results include: Result: Whether the test passed or failed. Reason: The error code (if applicable). Category: The category of the failed test (if applicable). Source: Whether the test was manually triggered or automated. Date: When the test was executed. Page 63

64 These tests are either performed automatically (the frequency being specified by the dial window in the device s Service Manage profile) or manually through the locally web UI of the VPN Gateway or by issuing a Backup WAN Test command from ARMT. IDS tab This tab lists a count of IDS (intrustion detection) alerts detected by the VPN Gateway. The alerts are broken down by IDS type and displayed in tabular form, showing details for each type of alert and how many of each alert type was received. The alerts are sent from the VPN Gateway device as SNMP informs to ARMT. The VPN Gateway must be running firmware version or higher to send these informs. The chart on the IDS tab lists the total number of IDS alerts received per day (if any) over the past 30 days. Page 64

65 Page 65

66 VPN Gateway remote commands Remote commands are sent to a VPN Gateway device through its management tunnel. If the VPN Gateway device's management tunnel to the ARMT site is disconnected, then a user will not be able to send remote commands to the VPN Gateway device. Any response from sending a remote command to a VPN Gateway device will be listed as an event in ARMT. Remote commands are accessed via the Commands menu. Firmware version 6.5 or higher The following commands are available via the Commands menu for VPN Gateway devices running firmware version 6.5 or higher: Commands > Device: Check Status: Perform an immediate SNMP probe of the VPN Gateway device. Router Access: Take up or down a router connection between a source IP address and a destination IP address. Firmware: Check: Check whether a newer version of the device firmware is available. Upgrade: Upgrade the firmware if a newer version is available. Rollback Check: Check and downloads a rollback version of the firmware. Rollback: Roll back the firmware. Reboot: Send the command to reboot the VPN Gateway device. Profile Query: Send the command to perform configuration update from the device's AT&T Service Manager profile. Full: Perform a full configuration update. Partial: Perform a partial configuration update Status: Check whether a configuration update is available, but do not perform the update. Commands > Networking: Arping: Send a network ARPing to a specified IP address. Ping: Ping a specified IP address. Tracepath: Trace the path to a specified network IP address, discovering MTU along this path Traceroute: Trace the network path to a specified IP address. WAN Toggle: Enable or disable a specified WAN interface for a given amount of time, or check the status of the WAN interface. The VPN Gateway must be on firmware version or higher to accept this command. Page 66

67 Backup WAN Test: Manually run a backup connectivity test on the secondary WAN interface. The VPN Gateway must be on firmware version or higher to accept this command. Manual Tunnels: Commands for configured outbound tunnels of the VPN Gateway device, The tunnel can be selected by either the tunnel index number or name. Up: Brings up the selected tunnel. Down: Brings down the selected tunnel. Bounce: Restarts the selected tunnel. Status: Provides the status of the selected tunnel, such as whether and for how long the device has been up. Check All: Provides status for all configured tunnels. IPSECn: Additional menus provide status and commands for individual IPsec tunnels. Firmware version The following commands are available via the Commands menu for VPN Gateway devices running firmware version 6.1.8: Arping: Send a network ARPing to a specified IP address. Check Status: Perform an immediate SNMP probe of the VPN Gateway device. Firmware: Either check if a firmware update is available, or tell the VPN Gateway device to upgrade its firmware. The specified firmware version is based on the firmware URL defined in the VPN Gateway's AT&T Service Manager profile. There is also an option to revert the device to the rollback firmware version. Ping: Ping a specified IP address. Profile Query: Send the command to perform a partial or full configuration update from the device's AT&T Service Manager profile. The status command can be used to see if an update is available, but not apply the configuration update yet. Reboot: Send the command to reboot the VPN Gateway device. Tracepath: Trace the path to a specified network IP address, discovering MTU along this path Traceroute: Trace the network path to a specified IP address. WAN Toggle: Enable or disable a specified WAN interface for a given amount of time, or check the status of the WAN interface. The VPN Gateway must be on firmware version or higher to accept this command. Backup WAN Test: Manually run a backup connectivity test on the secondary WAN interface. The VPN Gateway must be on firmware version or higher to accept this command. Tunnels: Provides the ability to check the status of all configured outbound tunnels of a VPN Gateway device, including bring a tunnel up/down, bounce a tunnel, or checking a tunnel's status. The name and index of the desired outbound tunnel must be specified to perform these commands. Page 67

68 Firmware versions older than Check Device Status: Perform an immediate SNMP probe of the VPN Gateway device. Check Configuration: Send the command to perform a partial or full update depending on the configuration option specified in the VPN Gateway device's AT&T Service Manager profile. Reboot Device: Send the command to reboot the VPN Gateway device. Page 68

69 VPN Gateway configuration requirements for ARMT Minimum firmware level: ARMT utilizes a management tunnel to communicate with the VPN Gateway device. The management tunnel must be configured correctly in order for ARMT to be able to probe and send commands to the VPN Gateway device. Contact your AT&T SOHO VPN team if assistance is needed configuring the management tunnel of the VPN Gateway device. In addition to the management tunnel, the VPN Gateway device must be configured to send its SNMP Informs to the ARMT server. Several of the notifications sent by ARMT are based on the SNMP informs sent by the VPN Gateway device. Contact your AT&T SOHO VPN team if assistance is needed configuring the SNMP Inform options of the VPN Gateway device. Page 69

70 Cellular Devices Cellular devices refer to a subset of the Digi (previously Accelerated) LTE Router line of products. Supported models are: 6350-SR 6355-SR 6335-MX 6330-MX 6310-DX 6300-CX 6300-LX To display a list of all Cellular devices added to your system: On the Navigation Bar, click Devices. Select Cellular. Cellular devices are listed in tabular form. The majority of the details are applicable to all device categories. For details on those table entries, refer to Devices. The table entries specific to Cellular devices are: Carrier: The cellular provider of the current connection. dbm: The signal strength of the cellular connection measure in dbm. Signal: The signal strength percentage of the cellular connection. Network: The technology type of the cellular connection. Phone Number: The phone number of the current cellular connection. Page 70

71 Cellular Device Details To display detailed information about a Cellular device: 1. On the Navigation Bar, click Devices. 2. Select Cellular. The Cellular Devices page displays. 3. Click the Device ID for a Cellular device. The Device Details panel displays. NOTE: The Device Details panel can also be displayed from any device event panel, which are available in various places throughout the ARMT graphical interface (the Dashboard, Maps page, etc.). Click the Device ID to display the Device Details panel. The majority of details provided on the Cellular device Details tab are applicable to all categories of devices. For details on those table entries, refer to Devices. The device details specific to Cellular devices are: Uplink IP Address: The IP address of the current WAN network connection of the Cellular device. Primary Interface: The currently used WAN connection interface. Page 71

72 Configuration tab You can select the group configuration that should be inherited by this device. Click Save when complete. Settings tab The majority of details provided on the Cellular Settings tab are applicable to all categories of devices. For details on those table entries, refer to Devices. The device details specific to Cellular devices are listed below. Data Plan: The data plan assigned to the device. If the user has the ability to change the data plan, a drop-down will be displayed and lists the available data plans for the organization the device belongs to. Once a data plan is associated with the device, any cellular data used by the device will be tracked in the data plan, which can be viewed and managed by clicking the Edit button for an Organization. Associated Devices tab The Associated Devices tab lists any devices that the Cellular device is associated with, indicating that they are connected to each other. The following information is provided about the associated device: Device ID: The identifying MAC address for the associated device. Model: If the associated device is a type of device supported by ARMT, the model type of the device, as understood by ARMT, will be listed here. If the device is not supported by ARMT, the category will be listed with a dash (-). Interface: The physical interface of the VPN Gateway device that the associated device is connected to. Type: The type of connection that the VPN Gateway device has with the associated device. IP Address: The IP address of the associated device. Connected: How long the devices have been associated. Detach: Provides a button that allows you to remove the association between the devices. Cellular Details panel The Cellular Details panel lists details for the cellular modem. The name of the cellular modem is listed in the title bar of the Modem panel. In the example above, the cellular modem name is Page 72

73 Sierrawireless340u. If a cellular device has multiple modems, there will be multiple modem panels, each one corresponding to one of the cellular device's modems. A modem entry can be removed by clicking the red trash icon at the top-right of the specific modem tab. Carrier: The cellular provider of the modem. Signal Strength: The current RSSI signal strength percentage of the modem. Signal bars: The current signal bars, based on the signal strength. Speed Test: The five most recent (if any) speed tests performed on the device. Speed tests are generated by sending the Speed Test command to the device. NOTE: In order to minimize the speed test s impact on cellular data consumption, the results are an estimation of the available throughput of the device, and may not represent the full network speed available. Phone Number: The phone number of the modem. RSSI: The Received Signal Strength Indicator (RSSI) of the modem. RSSI provides information about total received wide-band power, including signal interference and thermal noise. RSRP: An LTE-specific value, representing the Reference Signal Received Power of the modem. RSRP is the average power of resource elements that carry cellular specific reference signals over the entire bandwidth. RSRQ: An LTE-specific value, representing the Reference Signal Receive Quality (RSRQ) of the modem. RSRQ is a combination of RSSI and RSRP and indicates the quality of the received reference signal. SiNR: The signal-to-interference-plus-noise ratio of the modem. SNR: The signal-to-noise ratio of the modem. IMEI: The IMEI value of the modem. ESN: The ESN value of the modem. Note that the ESN value only applies to CDMA cellular networks. ICCID: The ICCID value of the modem. Revision: The hardware version of the modem. APN: The APN that the modem is currently connected with. Note that not all modems require an APN. ECIO: The signal-to-noise ratio of the modem. The lower the Ec/Io value, the greater the noise. CNTI: The technology type that the modem is currently connected to. Band: The frequency or type of cellular band the modem is currently connected to. CID: The CID identifier of the modem's current connection. LAC: The LAC identifier of the modem's current connection. USB Speed: The speed of the USB port(s) on the Cellular device, measured in Mbps. 480 indicates USB 2.0 High Speed and 12 indicates USB 2.0 Full Speed. Page 73

74 Cellular Utilization Chart If the device supports a cellular modem, a cellular utilization chart will be displayed. The chart shows the amount of cellular data used by the device. The initial timespan will display the data usage for the past 24 hours. A user can select different timespans from the Range drop-down. Tunnels panel The Tunnels panel lists status for any IPSec tunnels established by the Cellular device. Each row of the tab indicates a unique IPSec tunnel of the device. Status: Indicates whether or not the Cellular device has established the IPSec tunnel. Last Updated: The last time ARMT received an update concerning this tunnel. IpLocal: The tunnel IP address assigned to the Cellular device. IpRemote: The IP address of the server that the Cellular device built a tunnel to. Network panel The Network panel lists details for network interfaces that belong to the Cellular device. If a Cellular device has multiple networks, there will be multiple network panels, each one corresponding to one of the device's networks. Connection Type: the type of network connection for the interface. Page 74

75 Priority: Indicates if the network connection is the current primary or alternate connection. IP Ranges: The IP addressing for the network. MTU: The MTU size of the network interface. Gateway IP: The default route (gateway IP) of the network interface. Bytes Received: The total amount of data received, measured in bytes, on the network interface since the Cellular device has been online (resets on reboot). Bytes Transmitted: The total amount of data transmitted, measured in bytes, on the network interface since the Cellular device has been online (resets on reboot). Ethernet Speed: If the network type is an Ethernet interface, then this indicates the speed of the Ethernet port. Ethernet Status: If the network type is an Ethernet interface, then this indicates the status of the physical connection on the Ethernet port. Location tab The location details for a Cellular device are displayed on the map in this tab, and can be entered here as well. Contacts tab The Contacts tab provides the name, phone number, and address for the primary contact for the device. To add contact information for this device: 1. Click Add. 2. In the New Contact window, either: Select an existing contact and click Add. Enter information for a new contact and click Create, then select the new contact an click Add. Click Edit to change the contact information, and click Delete to delete the contact. Page 75

76 Cellular configuration Cellular devices are configured through the ARMT application. For details, see Creating a New Cellular Configuration Profile. Page 76

77 Cellular remote commands Remote commands are sent to a Cellular device through an IPSEC tunnel the Cellular device establishes to the Digi (previously Accelerated) remote control server. If the remote control IPSEC tunnel is disconnected, then a user will not be able to send remote commands to the Cellular device. Remote commands are accessed via the Commands menu. The following commands are available via the Commands menu for Cellular devices: Commands > Device: Check status: The cellular device will immediately send its current status. Check signal strength: The cellular device will send its signal strength and network info once every 10 seconds for the next 15 minutes. Perform Speed Test: The cellular device will perform a speed test and send the Upload/ Download results. Check Configuration: The cellular device will immediately pull its configuration and reboot to apply any new settings. Reboot: Reboot the cellular device. Commands > Networking: ARPing Attached Device: The cellular device will attempt to ARPing the client device attached to its Ethernet port. Send Wake-on-LAN to Attached Device: The cellular device will send a wake-on-lan packet to the client device attached to its Ethernet port. Commands > Cellular Modem: Switch to SIM Slot 1: Sends a command to switch to using the SIM in SIM slot 1. Switch to SIM Slot 2: Sends a command to switch to using the SIM in SIM slot 1. Update Modem Firmware: Sends a command to update the modem firmware. Emergency SMS Commands As an alternative to the Remote commands described above, users can also send commands via SMS messaging to a Cellular device. The SIM card used by the Cellular device must have SMS enabled, or the user will not be able to send SMS commands. The available SMS commands that can be sent are listed below. Set Configuration: A pop-up window appears where a user can enter in a configuration option or set of options to apply to the Cellular device. Multiple config options must be separated by a comma. For example, if a user wants to set the APN of a Cellular device to managedvpn, they would enter "modem_apn=managedvpn". Page 77

78 Configuration Reset: Restore default configuration on the Cellular device and reboot. Firmware Reset: Restore to the backup firmware image on the Cellular device, and reboot. Factory Reset: Restore default configuration on the Cellular device, restore to the backup firmware image, and reboot. Remote Control: Tell the Cellular device to bring up its remote control tunnel (useful if on low data plan, so the remote control tunnel is not always up using data). Reboot: Reboot the Cellular device. Page 78

79 Cellular configuration requirements for ARMT In order for the ARMT application to monitor a Cellular device, the device must send its syslogs to the ARMT syslog server IP address, the domain of which is armt-logs.accns.com. In order for a Cellular device to get its configuration from the ARMT site, it must be set to pull its configuration from the ARMT configuration server armt-config.att.com. Open the configuration profile for the Cellular device and make the following changes: 1. Under the Central management section, modify Certificate server to certificates/v2 2. Under the Central management section, modify Configuration servers -> Server to 3. Under System -> Log -> Server list, modify Server to armt-logs.accns.com 4. If the device is running firmware older than , you will also need to add the SSL certificate chain of the ARMT server. This cert chain is included by default in firmware versions and higher. 1. Under the Central management section, add the armt.att.com SSL certificate chain to the Certificate authority setting. The SSL certificate chain can be downloaded here. 5. Save the configuration. Page 79

80 Creating a new Cellular configuration profile View a List of All Cellular configuration profiles To view the current list of configuration profiles a user has access to: 1. Click on the Configurations button in the navigation panel. 2. Select Cellular in the drop-down. Create a new configuration profile To create a new configuration profile: 1. Click on the Configurations button in the navigation panel. 2. Select Cellular in the drop-down. 3. Click the plus icon located at the top right of the window. 4. Select the firmware version. The appropriate configuration schema will automatically load. 5. Set any desired settings in the presented configuration schema. Clicking on the drop-down arrow by the name of the configuration option and hovering over the Help text will display a pop-up providing help details about that option, including any default values. Once all the desired configuration options have been specified, click Create. NOTE: If the desired firmware is not listed, it must be uploaded onto the firmware management service, which is hosted at distro.accns.com. Page 80

81 Applying a Cellular configuration profile To apply a configuration profile to a Cellular device, go to the device details page for the specific device. This can be done by searching for the device's MAC address in the search bar, then clicking on the MAC address of the correct device in the results. Once on the details page, select the Configuration tab, then select the new configuration profile from the Group Configuration dropdown menu. Page 81

82 Page 82

83 Deleting a configuration profile Configuration profiles can be deleted by clicking on the Delete button for the appropriate profile on the Cellular Configurations page. A confirmation pop-up will ask you to confirm that you wish to delete the configuration profile. If there are any devices linked to the configuration profile that is being deleted, those devices will remain in ARMT, but they will not have a configuration profile associated with them. After the configuration profile is deleted, you must associate the device to a new configuration profile if you want the device to get a configuration from ARMT. Page 83

84 Adjusting when a Cellular Device is considered Down by ARMT Configuring when a Cellular device is considered down (red status) in ARMT is done by adjusting the Heartbeat Interval and/or Grace Period Duration options in a Cellular device's configuration profile. Heartbeat Interval The Heartbeat Interval option controls how often a device checks in to ARMT. By default, Cellular devices will send a status check-in to ARMT once every 30 minutes. Grace Period The Grace Period Duration option controls how long in addition to the check-in time ARMT should wait before considering a device as Down. The default grace period for Cellular devices is 109 minutes. When this is combined with the default Heartbeat Interval of 30 minutes, this means that Page 84

85 by default ARMT will consider a Cellular device as down if it has not heard from the device within 139 minutes, or 2 hours and 19 minutes. Examples If a user would like to show a Cellular device as down after 1 day of inactivity, they can do so by adjusting the Heartbeat Interval and Grace Period Duration accordingly. Below are several example settings that can be used to achieve this. Option 1: Heartbeat Interval: 10m Grace Period: 23h50m Option 2: Heartbeat Interval: 1h Grace Period: 23h Option 3: Heartbeat Interval: 6h Grace Period: 18h Page 85

86 Legacy Cellular devices Cellular devices refer to the Accelerated Concepts Cellular Extender line of products. Supported models are: 6200-FX NetBridge-SX To display a list of all VPN Gateway devices added to your system: On the Navigation Bar, click Devices. Select Legacy Cellular. Legacy Cellular devices are listed in tabular form. The majority of the details are applicable to all device categories. For details on those table entries, refer to Devices. The table entries specific to Legacy Cellular devices are: Carrier: The cellular provider of the current connection. dbm: The RSSI signal strength of the cellular connection measure in dbm. Signal: The RSSI signal strength percentage of the cellular connection. Network: The technology type of the cellular connection. Phone Number: The phone number of the current cellular connection. Page 86

87 Legacy Cellular Device details To display detailed information about a VPN Gateway device: 1. On the Navigation Bar, click Devices. 2. Select Legacy Cellular. The Legacy Cellular Devices page displays. 3. Click the Device ID for a VPN Gateway device. The Device Details panel displays. NOTE: The Device Details panel can also be displayed from any device event panel, which are available in various places throughout the ARMT graphical interface (the Dashboard, Maps page, etc.). Click the Device ID to display the Device Details panel The majority of details provided on the cellular device Details page are applicable for all categories of devices. For details on those table entries, refer to Devices. The device details specific to Legacy Cellular devices are listed below. Cellular IP Address: The IP address received when connecting to the cellular network. Client MAC Address: The MAC address of the client device (the device connected to the Cellular Extender's Ethernet port). Page 87

88 Client IP Address: The IP address the Cellular Extender device assigned to the client device (the device connected to its Ethernet port). Ethernet Status: The status of the physical link on the Ethernet port of the Cellular Extender. USB Conditioner: Indicates if a USB Conditioner hub device is connected between the Cellular Extender and the USB modem. USB List: Lists the vendor and product IDs of any USB devices connected to the Cellular Extender. Management Tunnel Status Indicates whether the remote command IPSec tunnel is up and active, or disabled. If disabled or down, users will not be able to send remote commands to the Legacy Cellular Device. Note that SMS commands will still work if the SIM card used by the Legacy Cellular device has SMS enabled. Settings tab The majority of details provided on the Legacy Cellular Settings tab are applicable to all categories of devices. The device details specific to Legacy Cellular devices are listed below. Data Plan: The data plan assigned to the device. If the user has the ability to change the data plan, a drop-down will be displayed and lists the available data plans for the organization the device belongs to. Once a data plan is associated with the device, any cellular data used by the device will be tracked in the data plan, which can be viewed and managed by clicking the Edit button for an Organization. Associated Devices tab This tab lists any devices that the Legacy Cellular device has associated with, indicating that they are connected to each other. The tab will include the following details about the associated device. Device ID: The identifying MAC address for the associated device. Model: If the associated device is a type of device supported by ARMT, this entry will display the type of device ARMT knows it as. If the device is not supported by ARMT, the category will be listed with a dash (-). Interface: The physical interface of Legacy Cellular device to which the associated device is connected. Type: How the associated device is connected to the Legacy Cellular device. For example, a type listed as LAN indicates that the associated device is connected to the Legacy Cellular device's LAN Ethernet port. IP Address: The IP address of the associated device. Connected: Indicates when the device association was made and how long the associated device has been connected to the Legacy Cellular device. Page 88

89 Detach: A button that, when clicked, can be used to remove the associated device from the table. Cellular Details tab The Cellular Details tab lists details for the cellular modem. The name of the cellular modem is listed in the title bar of the Modem panel. In the example above, the cellular modem name is Sierrawireless340u. If a legacy cellular device has multiple modems, there will be multiple tables, each one corresponding to one of the cellular device's modems. A modem entry can be removed by clicking the red trash icon at the top-right of the specific modem tab. Carrier: The cellular provider of the modem. Signal Strength: The current RSSI signal strength percentage of the modem. Phone Number: The phone number of the modem. RSSI: The Received Signal Strength Indicator (RSSI) of the modem. RSSI provides information about total received wide-band power, including signal interference and thermal noise. RSRP: An LTE-specific value, representing the Reference Signal Received Power of the modem. RSRP is the average power of resource elements that carry cellular specific reference signals over the entire bandwidth. RSRQ: An LTE-specific value, representing the Reference Signal Receive Quality (RSRQ) of the modem. RSRQ is a combination of RSSI and RSRP and indicates the quality of the received reference signal. SiNR: The signal-to-interference-plus-noise ratio of the modem. SNR: The signal-to-noise ratio of the modem. IMEI: The IMEI value of the modem. ESN: The ESN value of the modem. Note that the ESN value only applies to CDMA cellular networks. ICCID: The ICCID value of the modem. Revision: The hardware version of the modem. APN: The APN that the modem is currently connected with. Note that not all modems require an APN. ECIO: The signal-to-noise ratio of the modem. The lower the Ec/Io value, the greater the noise. CNTI: The technology type that the modem is currently connected to. Band: The frequency or type of cellular band the modem is currently connected to. CID: The CID identifier of the modem's current connection. LAC: The LAC identifier of the modem's current connection. USB Speed: The speed of the USB port(s) on the Cellular device, measured in Mbps. 480 indicates USB 2.0 High Speed and 12 indicates USB 2.0 Full Speed. Page 89

90 Cellular utilization chart If the device supports a cellular modem, a cellular utilization chart will be displayed. The chart shows the amount of cellular data used by the device. The initial timespan will display the data usage for the past 24 hours. A user can select different timespans from the Range drop-down. Location tab The location details for a Legacy Cellular device are displayed on the map in this tab, and can be entered here as well. Contacts tab The Contacts tab provides the name, phone number, and address for the primary contact for the device. To add contact information for this device: 1. Click Add. 2. In the New Contact window, either: Select an existing contact and click Add. Enter information for a new contact and click Create, then select the new contact an click Add. Page 90

91 Click Edit to change the contact information, and click Delete to delete the contact. Page 91

92 Legacy Cellular configuration Legacy Cellular devices are configured through the ARMT site. For details, see Creating a new non- Service Manager Legacy Cellular configuration profile. Page 92

93 Legacy Cellular remote commands Remote commands are sent to a Legacy Cellular device through an IPSEC tunnel the Legacy Cellular device establishes to the Accelerated remote control server. If the remote control IPSEC tunnel is disconnected, then a user will not be able to send remote commands to the Legacy Cellular device. Remote commands are accessed via the Commands menu. The following commands are available via the Commands menu for Legacy Cellular devices: Commands > Device: Check status: The cellular device will immediately send its current status. Check signal strength: The cellular device will send its signal strength and network info once every 10 seconds for the next 15 minutes. Perform Speed Test: The cellular device will perform a speed test and send the Upload/ Download results. Check Configuration: The cellular device will immediately pull its configuration and reboot to apply any new settings. Reboot: Reboot the cellular device. Commands > Networking: ARPing Attached Device: The cellular device will attempt to ARPing the client device attached to its Ethernet port. Send Wake-on-LAN to Attached Device: The cellular device will send a wake-on-lan packet to the client device attached to its Ethernet port. Page 93

94 Legacy Cellular configuration requirements Minimum firmware level: In order for the ARMT site to monitor a cellular device, it must send its syslogs to the ARMT syslog server IP address, the domain of which is armt-logs.accns.com. In order for a cellular device to get its configuration from the ARMT site, it must be set to pull its configuration from the ARMT configuration server armt-config.att.com. Page 94

95 Service Manager configuration profiles for Legacy Cellular devices The ARMT application allows legacy cellular devices to receive their configuration profiles from the AT&T Service Manager through ARMT itself, meaning the device does not directly send any profile queries to the Service Manager. Instead, the device request for its configuration from ARMT, which then performs a Service Manager query, parses the response, and sends the configuration to the cellular device. NOTE: This only applies to 6200-FX and NetBridge devices CX devices will have to get their configuration directly from ARMT. In order for a cellular device to get its configuration from the Service Manager through the ARMT site, a profile must be provisioned for the device on a Service Manager server. Below is the list of IP addresses the ARMT application will query for profiles If a legacy cellular device has a profile configured in Service Manager, this configuration will override any configuration profile set in ARMT for the device. If the ARMT application does not receive a Service Manager profile for a cellular device, ARMT will instead send the configuration profile associated with the device in ARMT (if available). For details on how to associate a configuration profile in ARMT with a device, see the next section of this guide. Page 95

96 Creating a new non-service Manager Legacy Cellular configuration profile This sections details how to create and manage a configuration for a cellular device instead of doing so through the AT&T Service Manager. Before creating a new cellular configuration profile, first decide if the profile should inherit any settings from another configuration profile (referred to as the "parent configuration"). This adds the benefit of having a structured and/or tiered configuration environment, where a new configuration inherits all the defaults for an organization, and the user adds the necessary changes to those base settings. To view the current list of configuration profiles a user has access to, click on the Configurations button in the navigation panel and then select Cellular in the dropdown. To create a new configuration profile, first navigate to the Configurations section of ARMT by clicking the Configurations in the Navigation Bar, and then select Cellular in the dropdown. Next click the plus icon located at the top right of the window to create a new cellular configuration. Specify a name for the configuration profile and select the desired parent configuration. If you do not select a parent configuration, the profile will inherit the system default values for a cellular device. Next, enter in any other desired configuration options. Refer to the help boxes for each configuration option for details on what the option is used for as well as what the default value is for the option. Required fields are marked with asterisks (*) and any values inherited from the Page 96

97 parent configuration are listed in red. Once all the desired configuration options have been specified, click Create. Applying a cellular configuration profile To apply a configuration profile to a cellular device, go to the device details page for the specific device. This can be done by searching for the device's MAC address in the search bar, then clicking on the MAC address of the correct device in the results. Once on the details page, select the new configuration profile from the Configuration dropdown menu in the Admin panel. Page 97

98 Page 98

99 Deleting a Legacy Cellular configuration profile Configuration profiles can be deleted by clicking on the Delete button for the appropriate profile on the Legacy Cellular Configurations page. A confirmation pop-up will ask you to confirm that you wish to delete the configuration profile. If there are any devices linked to the configuration profile that is being deleted, those devices will remain in ARMT, but they will not have a configuration profile associated with them. After the configuration profile is deleted, you must associate the device to a new configuration profile if you want the device to get a configuration from ARMT. Page 99

100 Adjusting when a Legacy Cellular device is considered down by ARMT Configuring when a cellular device is considered down (red status) in ARMT is done by adjusting the Status Frequency and/or Grace Period options in a cellular device's configuration profile. Status Update Frequency The Status Update Frequency option controls how often a device checks in to ARMT. By default, cellular devices will send a status check-in to ARMT once every 30 minutes. Grace Period The Grace Period option controls how long in addition to the check-in time ARMT should wait before considering a device as Down. The default grace period for cellular devices is 109 minutes. When this is combined with the default status frequency of 30 minutes, this means that by default ARMT will consider a cellular device as down if it has not heard from the device within 139 minutes, or 2 hours and 19 minutes. Page 100

101 3.5.3 Examples If a user would like to show a cellular device as down after 1 week of inactivity, they can do so by adjusting the Status Frequency and Grace Period accordingly. Below are several example settings that can be used to achieve this. Option 1: Status Update Frequency: 1d Grace Period: 6d Option 2: Status Update Frequency: 1h Grace Period: 6d23h Option 3: Status Update Frequency: 12h Grace Period: 12h6d Page 101

102 Support To request support, contact the standard ANIRA support number at , option 3 then 3 again. Page 102

103 Feedback Each page on the ARMT interface contains a Feedback link at the bottom of the page. Click this link to open a dialog where feedback can be provided. The is sent to an address that is configurable by an ARMT administrator. To configure the feedback address: 1. Click Settings at the top of the navigation bar to open the Settings drop-down menu. 2. Click Admin. The Admin Panel displays, with the Imports tab selected. 3. Click Settings. The Settings tab displays. 4. In Support Contact Information, enter the appropriate address. 5. Click Save Changes. Page 103