System Management

Management Subsystem
Management System	The management system is centralized and configured using a graphical web interface. The management interface operates in any modern browser, including those on Linux-based operating systems. The management system provides control over all devices from a single terminal. It allows for the application of policies across all devices simultaneously and/or on specific devices. Key features include: - Support for connecting up to 50 workstations. - Three levels of user privileges. - Logging of operator actions.

Management Subsystem

Management System

The management system is centralized and configured using a graphical web interface. The management interface operates in any modern browser, including those on Linux-based operating systems.
The management system provides control over all devices from a single terminal. It allows for the application of policies across all devices simultaneously and/or on specific devices.
Key features include:
- Support for connecting up to 50 workstations.
- Three levels of user privileges.
- Logging of operator actions.

Management Interface	Cluster Mode	Standalone Mode
Web CNCUI	+	-
Web DPIUI	-	+
Command Line Interface (CLI)	-	+
API	+	+
Radius	-	+

The graphical web interface is available in two editions: the basic edition (DPIUI) and the optimized edition for managing traffic points at the "country-scaled DPI" level (CNCUI).

The basic interface DPIUI is designed for managing single Cubro Service Gateway devices or a group of devices functioning as a Packet Core (PCEF), Broadband Remote Access Server (BRAS), Carrier Grade NAT (CG-NAT), or Subscriber Management in telecommunications networks.

The CNCUI web interface is used for managing traffic points on a national scale and addressing regulatory compliance tasks.

Both versions include access to an analytics database and tools for network transparency [QoE].

Functions managed through the WebGUI graphical interface include:

Traffic marking based on L2-L7 protocols (DSCP)
Priority management based on L2-L7 protocols
Direction-based priority management (AS)
Subscriber management (for Service Gateway)
- Policing of subscriber channels
- Access management
- Tariff plan management
Management of black and white lists at the subscriber level (for Service Gateway)
Management of CG-NAT profiles (for Service Gateway)
Management of basic hardware configuration
- Hardware list (provisioning)
- Viewing interface statistics
- Viewing and configuring parameters
- Monitoring hardware status
- Viewing logs
Management of hotspots and captive portals
Analytics database (QoE)
Management of internal accounts and access rights
PCRF configuration management
User protocol management
REST API

Functions managed through the WebCNC graphical interface include:

Management of profiles (channels, traffic exchange points, service providers, and subscribers):
- Management of traffic points (Sites, Internet Gateways)
- Management of virtual channels and service providers (ISP Profiles and vChannels)
  - Definition of profile based on BGP (as-set, community)
  - Definition of profile based on VLAN
  - Static subnet sets
- Subscriber management
  - Definition of profile based on BGP (as-set, community)
  - Static subnet sets
Network traffic marking based on L2-L7 protocol
Direction-based traffic marking (AS)
Bandwidth management
- Policing of traffic points
- Policing of channels and service providers
- Policing of subscribers
- Policing of applications per session
Web and IP filtering (filtering by IP address, HTTP URL, TLS Server Name Indication, TLS Common Name)
- Management of blacklists
- Management of exception lists
- Automated preparation of filtering rules
Management of DNS response substitution
Management of user applications
Configuration for automated report distribution
Management of traffic recording to a remote server
System status monitoring
- Viewing DPI node status (resource utilization, interface utilization)
- Viewing system logs and traffic processing kernel logs
- Viewing deployment queue

Functions managed through the command-line interface (CLI):

Functions managed through the API

Functions managed through the RADIUS server