# Admin Operations | v12 | Network Configuration Manager Help

## Admin Operations

### Contents

- [Overview](#overview)
- [Basic Settings](#basic-settings)
- [Server Settings](#server-settings)
- [Discovery](#discovery)
- [Configlets](#configlets)
- [Device Management Operations](#device-management-operations)
- [Compliance](#compliance)
- [User Management](#user-management)
- [Approval Requests](#approval-requests)
- [Finding SysObjectID](#finding-sysobjectid)
- [Changing Password](#changing-password)
- [Changing Language](#changing-language)
- [Support](#support)

## Overview

While configuring Network Configuration Manager for usage in your network, you can perform certain administrative operations. The operations are classified under below categories.

## Basic Settings

The following operations have been classified as "Basic Settings":

1. [Server Settings](#server-settings)
2. Rebranding
3. Trouble-Ticket Settings
4. SNMP Trap Settings
5. Database Administration

## Server Settings

### TFTP Server Setting

Network Configuration Manager uses TFTP server to transfer the configuration files to-and-fro the devices. In case, Network Configuration Manager is running in multi-homed machines, you can specify the interface to be used for transferring the configuration files from/to the devices. The interface specified here will be used for transferring (backup, upload) configuration files of all devices in inventory.

To specify a particular interface:

1. Go to "Settings" >> "General Settings" >> "Server Settings" >> "TFTP Server".
2. Select the required IP from the drop-down. Click "Save".
3. To give effect to this change, you need to restart Network Configuration Manager server.

### SCP Server Setting

Network Configuration Manager provides the option to use SCP to transfer the configuration files to-and-fro the devices. In case, Network Configuration Manager is running in multi-homed machines, you can specify the interface to be used for transferring the configuration files from/to the devices. The interface specified here will be used for transferring (backup, upload) configuration files of all devices in inventory.

To specify a particular interface:

1. Go to "Settings" >> "General Settings" >> "Server Settings" >> "SCP Server".
2. Select the required IP from the drop-down. Click "Save".
3. To give effect to this change, you need to restart Network Configuration Manager server.

### Syslog Server Setting

By default, Network Configuration Manager binds its syslog listener to port 514. In case, your machine is multi-homed and if you want to run some other application with a syslog server in the same machine, you can bind the Network Configuration Manager syslog server to a specific interface leaving the other interface(s) for use by other application(s).

To specify a particular interface:

1. Go to "Settings" >> "General Settings" >> "Server Settings" >> "Syslog Server".
2. Select the required IP from the drop-down. Click "Save".
3. To give effect to this change, you need to restart Network Configuration Manager server.

## Rebranding

Rebranding option helps you replace Network Configuration Manager logo that is displayed in the web client as well as in the reports, with your company's logo. You can also change the product name if needed.

To replace NCM logo and product in the web client and reports:

1. Go to "Settings" >> "General Settings" >> "Rebranding".
2. Enter the Product Name that you want to display in the Reports.
3. Browse and import the Image to replace the NCM logo that is displayed in the web client and reports.
4. Click "Save".
5. Once done with the above changes, restart OpManager.

## Trouble Ticket Settings

Upon detecting changes in configuration, Network Configuration Manager provides the option to generate [trouble tickets](https://www.manageengine.com/network-configuration-manager/help/change-management-v12.html#sending-trouble-tickets) to your Help Desk. You can set your Help Desk email ID here.

- Go to "Settings" >> "Global Settings" >> "Trouble Ticket Settings".
- Enter Help Desk email ID and click "Save" to give effect to the settings.

## SNMP Trap Settings

SNMP v2 traps could be sent to a specific host upon [detecting a configuration change](https://www.manageengine.com/network-configuration-manager/help/change-management-v12.html#sending_snmp_traps). Settings could be done for that purpose here.

To send SNMP trap to the desired host:

- Go to "Settings" >> "Global Settings" >> "SNMP Trap".
- Enter hostname or IP address of the recipient. Also, enter SNMP port and community. Default values: 162 for port and public for community.
- Click "Save".

## User Management

User Management operations such as adding new users and assigning them roles, editing the existing users and deleting the user could be performed only by the Administrators. Operators do not have this privilege.

Administrators can:

1. View all existing users.
2. Create new users.
3. Change the access level and device list of existing users.
4. Delete an existing user.

### Default Credentials

**Note:** The default login name and password for fresh Network Configuration Manager installation is `admin` and `admin` respectively. The default email ID has been configured as `admin@manageengine.com`. After logging in, change the email ID for admin user. Otherwise, when you invoke "Forgot Password", email would be sent to `admin@manageengine.com`.

### Adding New Users

To add new users:

1. Go to Settings >> User Management. Click "Add".
2. Define the "Access Level" (role) – Administrator/Operator.
3. Provide the user's email ID.
4. Enter password (minimum 5 characters).
5. Confirm the new password.
6. Select the required time zone and click "Next".
7. Select the devices/device groups to be assigned.
8. Click "Save".

### Editing Existing Users

1. Go to Settings >> User Management.
2. Click on the user account to be edited.
3. Modify access level and device list as required and click "Update".

### Deleting Existing Users

1. Go to Settings >> User Management.
2. Click the delete icon against the username.

## Privileges for Configuration and Other Operations

| Access Level | Device Addition | Upload (Pushing configuration into the device) | Authority for approving various requests | Compliance | Admin Operations | User Management |
|---|---|---|---|---|---|---|
| Administrator | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) (create, associate compliance policies) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) |
| Operator | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_no.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_yes.gif) (only for authorized devices, subject to approval) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_no.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_no.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_no.gif) | ![](https://www.manageengine.com/network-configuration-manager/help/images/import-vp5621i69e9y/images/rights_no.gif) |

## RADIUS Server Settings

You can make Network Configuration Manager work with a RADIUS server in your environment and leverage RADIUS authentication for user access bypassing local authentication.

### Providing Basic Details about RADIUS Server

1. Go to "Settings" >> "User Management" and click "RADIUS Server Settings".
2. Provide:
   - **Server Name/IP Address**
   - **Server Authentication Port** (default: UDP 1812)
   - **Server Protocol** (PAP, CHAP, MSCHAP, MSCHAP2)
   - **Server Secret**
   - **Authentication Retries**
3. Click "Save".

## Discovery

Devices can be added in three ways:

### 1. Discover Devices

**Pre-requisite:** Devices must be SNMP-enabled.

To initiate discovery:

- Go to Settings >> Discovery.
- Choose discovery method (specific IP, IP range, or file import).
- Create SNMP profile (v1, v2c, v3).

#### SNMP Credential Details

| v1 | v2 | v3 |
|---|---|---|
| Enter SNMP port, read community (mandatory), write community. | Enter SNMP port, read community (mandatory), write community. | Enter SNMP port, User Name, Context Name, Authentication Protocol (MD5/SHA) & Password, Encryption (DES/AES-128) & Password. |

Click "OK" to initiate discovery.

### Format for Discovering Multiple Devices from Flat Files

- Enter hostname or IP or both.
- Each entry in a separate line.
- Separate hostname and IP with space or tab.

**Example:**

```
cisco805
catalyst2900 192.168.117.12
foundry2402
192.168.111.2 cisco1710
```

### Tracking Discovery Status

Track real-time progress and view historical discovery attempts via "Discovery Reports".

### 2. Manual Addition of Devices

1. Go to "Settings" >> "Discovery" >> "IP / Host Name".
2. Provide hostname/IP, vendor, type, series, model and click "Add".
3. Provide credentials when prompted.

### 3. Importing Devices from a Text File

Format:

```
<Hostname or IP Address>,<Device Template Name>,<Series>,<Model>
```

Example:

```
catalyst2900,Cisco IOS Switch,2900,2924
192.168.111.11,Cisco IOS Router,800,805
<ip_address_22>,Force10 E-Series Switch,E600
procurve2524,HP Procurve Switch
```

To import:

1. Go to "Inventory" >> "+" >> "Import Devices from text file".
2. Browse and import the file.
3. Verify in inventory.

## Configlets

Network Configuration Manager offers:

| TFTP Mode | Simple Script Execution | Advanced Script Execution |
|---|---|---|
| Upload partial configuration changes via TFTP. | Execute a single CLI command. | Execute a sequence of inter-connected CLI commands. |

### TFTP Mode Examples

- Enabling TELNET service
- Changing SNMP Community
- Forwarding Syslog messages
- Changing interface

### Simple Script Example

Synchronizing running and startup configuration:

```
copy running-config startup-config
```

### Advanced Script Example

Backing up IOS image to TFTP:

```
<command prompt=']?'>copy flash:/%SOURCE_FILE_NAME% tftp</command>
<command prompt=']?'>%TFTP_SERVER_IP%</command>
<command timeout='70'>%DESTINATION_FILE_NAME%</command>
```

Other advanced examples:

- Uploading OS images / firmware upgrade
- Configuring banner message
- Resetting passwords
- Deleting files from flash

To know more, refer to [Automation using Configlets & Scripts](https://www.manageengine.com/network-configuration-manager/help/automation-using-configlets-v12.html).