Register and Manage Network Devices in Umbrella

Introduction

This document describes how to register, authenticate, and manage network devices as identities in Umbrella.

Network Device Registration

A network device is a physical hardware component, typically a router, that you can register as a network device in Umbrella. You can describe a network device as an Identity in Umbrella. You can add a policy to the network device and apply it to all traffic from computers located behind it. You can also generate reports on traffic originating from the network device.

For most users, configuring the egress router to use Umbrella and then applying policy to the network identity achieves similar functionality as an integrated device. However, device integrations can provide additional functionality, which varies on a per-device type basis.

Device manufacturers provide the integration, and support depends on the model and firmware version.

You can register a network device with Umbrella by using either a username and password or an API token. The device itself provides authentication in these forms. You can disregard information related to the API key.

Register a Network Device Using Username and Password

For device manufacturers that support Umbrella or OpenDNS integration, enter the Umbrella username and password in the device interface to authenticate and auto-register the device. Supported manufacturers include:

• Aruba Networks
• Cradlepoint
• Aerohive (integration supported only on HiveManager Classic)

Steps

1. Log into the interface for the network device.
2. Enter the Umbrella account username and password.
3. The network device can authenticate and appear in the Umbrella dashboard in several minutes. You can disregard information about the API token in this process.

Caution: If you are an MSP for Umbrella, do not use your MSP Administrator username and password for authentication. Those credentials associate with your MSP Console and not with the customer or child organization you are configuring. In this instance, make sure that your account is also added as a local full administrator in the child organization or use an existing administrator account for that organization. Youmust have one unique administrator per child or customer organization. 

Register a Network Device Using an API Token

You can register certain network device types using an API token. Major supported appliance types include:

• WLAN Controllers
• 1100 Series Integrated Services Routers (ISR)
• ISR4k

For additional details about these integration types, refer to the Hardware Deployments documentation.

Once you integrate your network device, you need only provide a single organization-specific token, obtained from the Umbrella dashboard, to the device. This action ensures the device appears in the dashboard as a manageable Identity.

Steps to Obtain and Use an API Token

1. Log into Cisco Umbrella and navigate toIdentities > Network Devices.
2. ClickGet My API Tokento obtain the token associated with your organization. The token is tied both to the organization and the device manufacturer.
3. Click the(Copy) icon to copy your API token.
4. Log into your network device and paste the API token in the appropriate location.
   
   

   Note: Some devices can require you to use a command line interface (CLI) or a configuration file to upload the API key to the device. If instructions are unavailable from Cisco, please refer to your device manufacturer.

Manage or Delete Network Devices

The information on managing or deleting network devices now resides in the Umbrella documentation. For more information about deleting network devices, refer to:

• Delete a Network Device (SIG Umbrella)
• Delete a Network Device (DNS Umbrella)