ZyXEL Communications ZyWALL 310 - 30.2.2 Cloud CNM SecuManager Commands

Chapter 30 Cloud CNM
ZyWALL Series CLI Reference Guide
244
30.2.1.2 Managed Device Additional Requirements
The managed device must also meet these requirements:
• A managed device must be able to maintain the TCP connection to the XMPP Server using
'whitespace keepalive'.
• A managed device must be able to listen for XMPP Connection Request messages sent from an
allowed list, and respond to these messages when they arrive. When it receives an XMPP Connection
Request message, it must both validate and authenticate the message. It must also continue to listen
for HTTP-based Connection Requests.
• Whenever a managed device receives, successfully validates, and authenticates an XMPP
Connection Request with an Zyxel Device server from an allowed IP address, it must establish a
connection with Zyxel Device server and will respond with a '6 CONNECTION REQUEST' EventCode.
• The managed device may reply with a 'service- unavailable' error, code 503, if the number of
connection requests exceeds a certain threshold (to reduce the possibility of a Denial of Service
attack) or if it is already in a session with another Zyxel Device server.
30.2.2 Cloud CNM SecuManager Commands
The CNM agent allows communications between the Zyxel Device and Cloud CNM SecuManager
server using TR-069 Remote Procedure Calls (RPCs).
You must be in configuration mode (configure terminal) to use the indented commands shown
below.
Table 124 Command Summary: Cloud CNM SecuManager
COMMAND DESCRIPTION
show cnm-agent configuration
Displays current Cloud CNM SecuManager network management
configuration on the Zyxel Device.
[no] cnm-agent activate
Allows management of the Zyxel Device by a Cloud CNM
SecuManager server.
The
no command disallows management of the Zyxel Device by a
Cloud CNM SecuManager server.
[no] cnm-agent auto-get-
acs activate
Automatically lets the Zyxel Device get the Cloud CNM SecuManager
server URL from myZyxel. The Cloud CNM SecuManager server must be
able to access myZyxel and you must have a CNM ID from the Cloud
CNM license.
The
no command disallows the Zyxel Device getting the Cloud CNM
SecuManager server URL from myZyxel, so you must manually configure
it.
(no) cnm-agent enable-
cnm-id
Allows Cloud CNM SecuManager to get the URL from myZyxel.
The no command means you must provide a CNM URL using
cnm-agent manager {https_url|http_url}
[no] cnm-agent cnm-id
<ID>
The CNM ID is used by Cloud CNM SecuManager to get the URL from
myZyxel.Enter the CNM ID exactly as on the Cloud CNM SecuManager
license. The CNM ID can be from 0 to 80 characters long using these
characters:[a-zA-Z0-9-][\.a-zA-Z0-9_-].
The no command removes the CNM ID.