Contents

Copyright ©
Document Revision History
About this User Guide
Lighthouse overview
Lighthouse architecture
Lighthouse VM host requirements
Lighthouse to Node interactions
Using Multiple Lighthouses
EULA and GPL
Installing Lighthouse
Installing on VMWare
VMware vSphere 6.0 client on Windows
Import the Lighthouse VM Open Volume Format (.ovf) image
Launch the Opengear Lighthouse virtual machine
Access the console of a running but headless Lighthouse instance
VMware Workstation Player on Windows as host
VMware Workstation Pro on Windows as host
Installing on Hyper-V
Hyper-V running on Windows 10/Windows Server 2016
VirtualBox on Windows as host
Installing on Linux hosts
Virtual Machine Manager (KVM) on Ubuntu as host
Boxes on Fedora Workstation as host
Boxes on CentOS as host
Installing in the Cloud
Azure environment
Amazon Web Services (AWS) environment
Launch a Lighthouse Instance on AWS
Set a Password for a root user
Adding Disk Space to Lighthouse
Using the new disk to increase the lh_data logical volume
Setting up Lighthouse
Loading Lighthouse
Lighthouse IP addresses
First boot of the Lighthouse VM
Logging into Lighthouse
Setting the Lighthouse hostname
Adding external IP addresses manually
Examine or modify the Lighthouse SSL certificate
Set the Lighthouse internal clock
Setting up Networking Requirements
Examine or modify Lighthouse Session Settings
Examine or change the MTU of the Lighthouse VPN tunnel
Network connections
SNMP Manager Settings
Enable or modify SNMP Service
Cellular Health Settings and Dashboard
Lighthouse MIBs
Setting up Multiple Instances of Lighthouse
Setting up a multiple instance
Enabling Alternate REST API Ports
Configuring Subnets for a Multiple Instance Lighthouse
Disconnecting a dependent instance
Promoting a secondary instance
Upgrading a multiple instance Lighthouse
Upgrading Dependent Multiple Instances of Lighthouse
Upgrading Lighthouse
Prepare to Upgrade Lighthouse
Upgrading the system from within Lighthouse
Upgrading the Lighthouse system via the Local Terminal
Troubleshooting the Upgrade Process
Upgrade NetOps Modules
Configuration Backup
Configuration Restore
Subscribing to Lighthouse
Adding a new subscription to Lighthouse
Assigning subscriptions to nodes
Shut Down or Restart Lighthouse
Finding the current Lighthouse instance version
Shut down a running Lighthouse instance
Restarting a running Lighthouse instance
Returning a Lighthouse instance to factory settings
Managing Lighthouse Nodes
Monitor Nodes
Monitor Ports
Filtering pages displaying nodes
Filtering using the Free Text Search field
Filtering using Smart Groups
Filtering using Ports
Enrol Nodes
The Enrolled Nodes page
Enrollment bundles
Creating an enrollment bundle
Structure of an enrollment bundle
Enrolling nodes
Enrollment via Node Web UI
Enrollment via Lighthouse Web UI
Enrolling Nodes via OM, ACM, CM, and IM Web UI
Mass Enrollment using ZTP
Enrollment via USB drive
Backing up Nodes
Work with Nodes
Connecting to a node’s web-management interface
Connecting to a node’s serial ports via Console Gateway
Access via HTML5 Web Terminal
Access a serial port via SSH
Example Console Gateway session
Selecting nodes using shell-based tools
Node organization and filtering
Filter Nodes
Creating Smart Groups
Editing an existing Smart Group
Creating Port Filters
Editing an existing Port Filter
Upgrading Nodes via the UI
Firmware Files
Upload a firmware file
Delete a firmware file
Node Upgrade Tasks
Create an upgrade task
Cancel an upgrade task
Copy a scheduled task
Delete an upgrade task
Retry an upgrade task
Node Upgrade Runtime Behaviour
Promoting a Secondary instance to Primary
Downgrading and Skipping Versions
Time Zones
Offline nodes
Node Connection interrupted
Unenrolling Nodes at Upgrade
Lighthouse Availability and Stability
Manage Ports
Filtering pages displaying ports
Filtering Ports using the Free Text Search field
Filtering Ports using Smart Groups
Filtering Ports using the Port Filters
Filtering by Port Tags
Create a new port tag
Edit a port tag
Delete a port tag
Assign a port tag
Configuring Lighthouse
Create Templates
Creating new users and groups templates
Modifying existing users and groups templates
Deleting users or groups from a template
Deleting users and groups templates
Create Authentication Templates
Creating new authentication templates
Modifying existing authentication templates
Deleting authentication templates
Create Script Templates
Creating new script templates
Modifying existing script templates
Deleting script templates
Use Templates
Apply Templates
Manually Activate Secure Provisioning or Software Defined Infrastructure via Template
Technical support reports
Lighthouse CLI, Serial Port and REST API logging
Using ogconfig-cli to enable logging
Config searches using ogconfig-cli
Add node and port to Lighthouse logs
Example logs
Enable logging
Disable logging
Syslog export
Configuring Lighthouse for Network traffic Mirroring
Managing Lighthouse Users
Work with Groups
About Groups
Creating new groups and roles
Create a new group
Editing a user group
Use an existing group as a template for a new group
Create a new Role
Work with Users
About NON-System Users
Create new local users
Create New Local Users for Remote Authentication
Modify existing users
Expire user password
Set Login Restrictions
Disable a Lighthouse root user
Delete users
SAML Configuration for SSO
Generic IdP Setup
Generic IdP SAML Attribute
Lighthouse Setup
Examples of Specific IdP Setups
Configure AUTH0 for IdP
Configure AUTH0 Metadata for IdP
Configure AUTH0 Lighthouse for IdP
Configure AUTH0 Roles setup for IdP
Limitations
Configuring Remote Authentication
LDAP Configuration
RADIUS configuration
TACACS+ configuration
Set password policy
Password fields in Lighthouse
Enabling Advanced Functionality
Introduction
About NetOps
NetOps Platform Security
Changing Docker IP Ranges
NetOps Module Management
Update NetOps Modules Without Docker Access
Upgrade NetOps Modules
Activate a NetOps Module
Deactivate (remove) a NetOps Module
Automation Gateway
Connect to a Remote Managed Device
Connect with REST/HTTP/HTTPS APIs
Automation Gateway Service Discovery
IP ACCESS
Enable IP Access in Lighthouse
Using Advanced Options of IP Access
Network Access Policies
Accessing Multiple VLANs or Ports
Troubleshooting IP Access
SECURE PROVISIONING
How Secure Provisioning Works
Vendor Managed Devices Supported by Secure Provisioning
Local Network Services Provided by Nodes
Secure Provisioning Configuration
Activate the Secure Provisioning Module on Lighthouse
UI-based WorkFLow
CLI based WorkFLow
Configure Device Resources via ZTP
Run a Script on a Newly Provisioned Device
Monitor the ZTP Progress of a Managed Device
WAN Gateway Services
Advanced Options
Troubleshooting Secure Provisioning
Command line tools
node-info
node-upgrade
An example node-upgrade run
Results and Error Messages in node-upgrade
cron
sysflash
Support for mounting the hard disks with ogconfig-cli
Support for multiple instance Lighthouse with ogconfig-cli
CLI support for configuring Network traffic mirroring
Network Traffic Mirror
Glossary