The Devices tab is the second top-level tab on the Site Status page. It is always present on every site, regardless of the applications installed.
The tab renders a network-device management application whose content is organized under a menu at the top right. Which application appears depends on whether the edge security device (ESD) has managed switches:
- With managed switches: the SmartSwitch application, with four menu items: Devices, Policies, Switches, and Settings. SmartSwitch provides centralized management of network switches, firewall policies, VLAN segmentation, and device registration.
- Without managed switches: the simpler Device Manager, with only the Devices and Policies menu items.
Devices is the default menu item. The sections below describe each menu item in turn.
Note: This page is a reference for what each menu and field does. For the step-by-step procedure to register a device, see Registering new devices. |
| Element | Description |
|---|---|
| Title | SmartSwitch (or Device Manager on sites without managed switches). |
| Subtitle | "Manage network devices using multiple switches" (SmartSwitch), or "Manage network devices and security policies." (Device Manager). |
| Version | Shown below the subtitle (for example, Ver.R63Cb5). |
| Menu | Bracketed links at the top right: Devices, Policies, Switches, Settings. Switches and Settings appear on SmartSwitch only. |
The following topics dive deeper into each menu.
Devices
The default menu item. It lists the devices seen on the site's network (not the switches themselves). A View dropdown at the top right filters the list (for example, Unregistered, Registered), and the heading reflects the current filter and count (for example, Unregistered Devices (4)).
Note: On sites without managed switches (Device Manager), this view is titled Registered Devices and shows |
Registering, pre-registering, and editing devices requires a role with the Register devices and Edit devices permissions: Admin, Installer, Support Manager, Customer Help Desk, Staff, or Vendor CSR. Only the Admin role can assign the Unrestricted policy. See Managing user permissions.
Header actions
| Element | Description |
|---|---|
| Registered / Unregistered Devices (N) | Section heading. Reflects the current View filter and the number of devices shown. |
| Register Devices | Link (top-right). Starts the registration workflow for unregistered devices. See Registering new devices. |
| Register From Template | Link (top-right). Opens a form where you choose a Template and add devices from it. Each device row has the same fields as the registration form, plus an Add option. |
| Pre-Register Devices | Link (top-right). Opens a form to pre-register devices by MAC address before they connect to the network. |
| View | Dropdown (top-right). Filters the device list. Each option shows a count, for example Unregistered (3), Registered (11), or a segment such as Switch segment (11). |
Device table
| Column | Description |
|---|---|
| DHCP Name | The hostname the device presented over DHCP, when available. |
| Status | The device's current monitoring state (for example, Responding). |
| Segment | The network segment (VLAN) the device is on (for example, POS). |
| IP Address | The device's current IP address. |
| MAC Address | The device's hardware MAC address. |
| DHCP Lease Expires | When the device's current DHCP lease expires. |
When View is set to Registered, the list shows registered devices with these columns: Name, Status (Responding or Not Responding), Last Responded (for example, 5 minutes ago), Segment, IP Address, MAC Address, Device Type, and Policy.
Edit registered devices
In the Registered view, the Edit Devices link opens every registered device in one form, where you can change each device's settings or remove its registration. For the steps, see Changing a registered device.
Pre-register devices form
Opened by the Pre-Register Devices link, this form lets you register devices by MAC address before they connect to the network.
| Column | Type | Description |
|---|---|---|
| Name | Text input | A friendly name for the device being pre-registered. |
| MAC Address | Text input | The device's hardware MAC address. Used to identify the device when it first appears on the network. |
| Segment | Dropdown | The network segment (LAN interface) the device will connect to. Options reflect the configured LAN interfaces on the ESD. |
| IP Address | Text input (read-only until a segment is chosen) | Optional static IP reservation. Grey when DHCP is used; editable when a static assignment is configured. |
| Device Type | Dropdown | The category of device (for example, POS, ATG, DVR). Used for reporting and policy suggestions. |
| Policy | Dropdown | The firewall policy to assign to this device. Defaults to Local. Must match a policy defined under the Policies menu item. |
| Error Status | Dropdown | The status the device raises for the site if it stops responding: None, Info, Warning, or Critical. With None, a non-responding device doesn't change the site's status. Defaults to your company's default error status, or Critical if none is set. |
A Pre-Register Devices submit button and an or Cancel link appear at the bottom. Select Cancel to return to the device list without saving.
Important: Submitting this form pre-registers the devices and modifies the site's device policy enforcement. Cancel out if you are only viewing. |
Policies
Lists all firewall policies configured for the site. The section heading is Manage Policies. For how policies work and how to request a change, see Firewall policies.
The Policies menu is visible to the Admin, Support Manager, Customer Help Desk, and Staff roles, and Admin, Support Manager, and Customer Help Desk can also view a policy's contents. Scale Computing creates, imports, and changes policies as part of the managed service. To request a new policy or a change to one, contact Scale Computing Support.
Header actions
| Element | Description |
|---|---|
| Import Policies from Another Company | Link (top-right), shown to Scale Computing staff. Copies the policy set from another company's site to this one. |
| Add New Policy | Link (top-right), shown to Scale Computing staff. Opens the Add New Site Policy form, which creates a policy for this site. |
Policy table
| Column | Description |
|---|---|
| Icons | Icons before the policy name. A globe icon marks the company-wide (corporate) version of a policy, and a local icon marks a site version that applies only to this site. A lock icon means the policy is being updated at the site and can't be edited until the update finishes. An exclamation-mark icon means the policy has rules for interfaces or segments that this site doesn't have; hover over it to see which. |
| Policy | Policy name. Names marked (default) are system-provided baselines. |
| Description | Human-readable explanation of what the policy permits or restricts. |
| Updated | Timestamp of the most recent change. Empty for default policies. |
| View | Link (custom policies only). Opens the policy detail and edit view. |
Default policies
These five policies are present on all sites:
| Policy | Description |
|---|---|
| Unrestricted (default) | Unrestricted clients have open VPN and Internet access. |
| Local (default) | Local clients have local access only, no VPN, no Internet. |
| VPN (default) | VPN clients have unrestricted access to Tunnels. |
| Monitor (default) | Access to and from this client is not managed by the gateway. In practice, Monitor registers the device without giving it network access: the policy sets no firewall rules, so the ESD keeps blocking the device's traffic. Use it to register a device that shouldn't have network access, so it no longer shows as unregistered. |
| InternetAccess (default) | Clients have unrestricted outbound Internet access only. |
Customer-specific policies
Customer-specific policies define access rules for specific device types, vendors, or use cases (for example, InternetVPN, POSVendor, or ATGVendor). The Updated column shows when each was last changed, and a View link opens the policy for editing. Descriptions typically identify the device type or requirement the policy implements.
Switches
Note: The Switches menu item appears only on sites with managed switches (SmartSwitch). |
Shows the physical switches managed by SmartSwitch. Each managed switch is displayed with a diagram of its front panel, followed by the site's Local Network Segmentation Details table.
Switch display
One section per managed switch. Each section shows:
| Element | Description |
|---|---|
| Switch hostname | Title (for example, SwitchGS110TPv3). The switch model appears on the diagram. The label Scale Computing Managed appears next to it on switches that SmartSwitch manages. |
| Switch diagram | A graphical representation of the physical switch front panel. Ports are color-coded by link state: green = up, grey/white/black = down or unused. Port numbers are labeled. |
| View Switch Details | Link (below the diagram). Opens the port-level detail table for that switch (see below). |
| Warning | Shown instead of the diagram when SmartSwitch can't read the switch, for example WARNING: Failed to reach device or WARNING: Failed to configure SNMP (check credentials). |
| Restart Switch | Link. Sends a reboot command to the switch via the platform. Appears only on switches marked Scale Computing Managed that support a remote restart, for roles with the Restart a switch permission (Admin, Installer, Support Manager, Customer Help Desk, and Staff). Use with caution; this interrupts switch connectivity and all devices connected to it. |
Switch models vary by site. Examples include the NETGEAR GS716Tv2, GS728TPv2, and GS110TPv3.
Local network segmentation details
Below the switch diagrams, a Local Network Segmentation Details table lists all configured network segments at the site.
| Column | Description |
|---|---|
| Segment | The segment name (for example, BackOffice, POS, VOIP). Matches the VLAN segment names in the Network Configuration block. |
| VLAN ID | The 802.1Q VLAN tag for this segment (for example, 2128 for BackOffice). |
| Gateway IP | The ESD's IP address on this segment, which is the default gateway for devices on the VLAN. |
| Netmask | The subnet prefix length for this segment (for example, 25 for a /25). |
| DHCP Range | The DHCP address pool for this segment (format: <first IP>-<last IP>). Empty for segments not serving DHCP. |
Example segments:
| Segment | VLAN ID | Gateway IP | Netmask | DHCP Range |
|---|---|---|---|---|
| BackOffice | 2128 | 10.10.3.129 | 25 | 10.10.3.215-10.10.3.254 |
| MgmtWiFi | 4040 | 10.240.0.1 | 24 | 10.240.0.2-10.240.0.10 |
| Music | 2064 | 10.10.3.65 | 26 | 10.10.3.112-10.10.3.126 |
| OfficeWiFi | 4043 | 10.243.0.1 | 24 | 10.243.0.2-10.243.0.249 |
| Open | 1000 | 10.10.2.1 | 26 | 10.10.2.48-10.10.2.62 |
| POS | 1128 | 10.10.2.129 | 25 | 10.10.2.215-10.10.2.254 |
| PrivateWiFi | 4042 | 10.242.0.1 | 24 | 10.242.0.2-10.242.0.249 |
| PublicWiFi | 4041 | 10.241.0.1 | 24 | 10.241.0.2-10.241.0.249 |
| Surveillance | 1064 | 10.10.2.65 | 26 | 10.10.2.112-10.10.2.126 |
| Switch | 4016 | 10.169.254.1 | 24 | |
| VOIP | 2000 | 10.10.3.1 | 26 | 10.10.3.48-10.10.3.62 |
View switch details
Selecting View Switch Details under a switch opens a read-only table of every port on that switch. Each row represents one physical port.
| Column | Description |
|---|---|
| Port | The physical port number on the switch. |
| Segment | The network segment (VLAN) assigned to the port (for example, Gateway, MgmtWiFi, POS, Switch, or Unrecognized). |
| Link Status | Whether the port currently has an active link (Up) or not (Down). |
| Link Speed | The negotiated link speed for the port (for example, 1 GB). |
| Device Name | The friendly name(s) of the device(s) detected on the port. A port may list several entries; long lists are truncated with a N more unrecognized device line. Unregistered devices appear as Unrecognized Device, or with a suggested segment tag and a registration hint such as [POS] Try ports 3-30. |
| Device MAC Address | The hardware MAC address(es) detected on the port. |
| Port Security Settings | The current port-locking state for the port. Blank when no lock is applied. |
| PoE Enabled | Whether the port is supplying Power over Ethernet (Yes or No). Appears only when the site runs SmartSwitch version R41000 or later and the switch reports PoE status for its ports. |
Switch metadata appears at the bottom of the table: Uptime, FIM Code, Firmware version, and, when the switch reports it, Serial Number. An Edit Switch Port Security button (bottom-right) opens the editable view described below.
Edit switch port security
Selecting Edit Switch Port Security makes the port table editable. It's available to roles with the Modify switch port security settings permission: Admin, Support Manager, Customer Help Desk, Staff, and Vendor CSR. The Port Security Settings column is replaced by radio controls for each port.
| Column | Description |
|---|---|
| Lock Port | Radio control to lock the port so that only currently connected devices may use it. |
| Lock MACs | Radio control to lock the specific MAC addresses currently seen on the port. |
| Unlock All | Radio control (default selection) leaving the port open with no MAC/port locking. Some switch models show Unlock instead, and have no Lock MACs option. |
Page actions:
| Element | Description |
|---|---|
| Lock All Unused Ports | Link (bottom-right). Applies port locking to every port with no active link in one action. |
| Update Switch Port Security | Button. Submits all pending port-security changes to the switch. Changes don't take effect until you select it. |
| or Cancel | Link. Discards pending changes without applying them. |
When the PoE Enabled column is shown, the editable view also has a PoE Enabled checkbox for each port.
Note: The PoE Enabled checkbox is the basis of the remote power-cycle workflow: clearing PoE for a port and selecting Update Switch Port Security cuts power to the connected device; re-checking and updating again restores it. This lets staff power cycle ceiling-mounted access points, IP cameras, and other PoE devices without being on site. Full steps are in Power over Ethernet (PoE) in SmartSwitch. |
Port security and PoE changes are sent only to switches marked Scale Computing Managed.
Settings
Note: The Settings menu item appears only on sites with managed switches (SmartSwitch). |
Scale Computing manages the switch configuration on this menu as part of the managed service. You can view it here. To add a switch or change its settings, contact Scale Computing Support.
Manages the physical switches SmartSwitch communicates with: their connection settings, SNMP credentials, and configuration templates. It can show Configured Switches, Add Switches (when SmartSwitch has found switches that aren't configured yet), and Available Switch Templates. The page notes that all fields are required.
Configured switches
Lists the switches already registered to the site. Each switch occupies a row, with an expandable second line of SNMPv3 detail fields.
| Column | Description |
|---|---|
| Hostname | The hostname and MAC address of the switch (for example, SwitchGS110TPv3 (00:00:5E:00:53:30)). |
| IP Address | Management IP address of the switch (for example, 10.169.254.20). |
| MAC Address | Hardware MAC of the switch. |
| Template | Dropdown selecting the configuration template applied to the switch (for example, example_110TPv3_192_220726.cfg). Templates define VLAN assignments, port configurations, and QoS settings. |
| SNMP Credential | The SNMP credential used to communicate with the switch. |
| Scale Computing Managed | Checkbox. When selected, Scale Computing can make changes to the switch, such as port locking, PoE, restarts, configuration backup, and firmware management. When cleared, SmartSwitch only monitors the switch. See SmartSwitch. |
| SNMPv3 | Checkbox. Checked = SNMPv3 is used for secure communication with this switch. |
| Delete | Trash-can control (far right) to remove the switch from management. |
The expandable detail line for each switch holds: Web UI Username, Web UI Password, SNMPv3 Authentication Protocol (for example, SHA), and SNMPv3 Encryption Protocol (for example, DES).
Add switches
When SmartSwitch has found switches on the site that aren't configured yet, Settings shows an Add Switches section. Each discovered switch is listed by hostname and MAC address with an Add checkbox, a Template, an SNMP Credential, Web UI Username and Web UI Password, SNMPv3 Authentication Protocol (MD5 or SHA), SNMPv3 Encryption Protocol (AES or DES), and the Scale Computing Managed and SNMPv3 checkboxes. If no switches are configured yet, the Configured Switches section doesn't appear.
The switches listed under Add Switches are registered devices on the site whose MAC address belongs to a switch manufacturer.
On sites running SmartSwitch version R57000 or later, Settings also has an Add Unregistered Switches section. Use it to add a switch that isn't registered as a device: enter its Hostname, IP Address, and MAC Address, along with the same template, credential, and checkbox settings. All fields are required.
If no configuration templates are available for your company, Settings shows No configuration templates available. Contact the Scale Computing NOC for installation.
The Update Switch Configuration button at the bottom submits changes, including any switches selected to add. The request is queued and reaches the ESD the next time it checks in; the page says this can take up to 3 minutes. Until then, the configuration shows as having pending changes and can't be edited.
Important: Update Switch Configuration re-sends the settings for every configured switch, not just the one you changed, and SmartSwitch restarts to apply them. During the restart the Switches view may show This application failed to start or This application is disabled. |
Available switch templates
A dropdown listing the available switch configuration templates, with a Download Template button to export the selected template file.