Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Creating a Group


Group Types

On the User Groups tab, click the green button in the lower left corner to create a new group and assign it a group type. There are three types of user groups defining whether the specific user can access both the IP/MPLSView client and web interface, the web interface only, or a particular section of the web interface for VPNs.

  • Full Access: Group for users with both an account to the IP/MPLSView client and the web interface.

  • Web Portal: Group for users with only a web account.

  • Web VPN: Group for users with a limited web account, which only allows them to look at particular VPNs.

Group Privileges

Select a user group from the left pane of the User Groups tab. For each created user group, more specific privileges can then be assigned in the right pane (Features tab), to define which functions users in that group are allowed to access (for example, the Task Manager, Event Browser, or Provisioning functions). The following are the main categories, which are each broken down into more specific functionalities, for which View/Enable and/or Modify privileges can be assigned.

  • Desktop Client [All]: This section covers basic IP/MPLSView client capabilities such as the ability to login, save network files, read in network files, save web data, generate LSP/VPN configlets, and browse files using the File Manager.

  • Desktop Client [Live Network - All]: This section covers basic IP/MPLSView live network capabilities such as the ability to open the live network, configure live network options, run diagnostics tools, trigger a live update (collection) from the Show Command window, assign user administration regions, track changes to device IP addresses and hostnames, and managing hardware vendor/type manager settings.

  • Desktop Client [ Live Network - Maps and Tools ]: This section covers access to the Event Map, BGP Map, Task Manager, Revision Manager, Configuration Conformance window, Hardware Model Template, Traffic Collection Manager, and MIB Browser.

  • Provisioning: This section covers the ability to define templates, configure devices based on templates, view provisioning work orders, and synchronize the planning network with the live network.

  • Desktop Client [Live Network - Hardware Model]: This section covers the ability to view the hardware inventory, and refresh hardware inventory information from live devices.

  • Event Browser: The Event Browser section is used to enable access to the Event Browser and the ability to acknowledge and clear events, run diagnostic commands from the Event Browser, create threshold crossing alerts, edit event subscriptions, edit event severities, and add or remove template driven URL actions.

  • Web Portal - General: This section covers the enabling and disabling of web features that apply both to live networks and offline model networks, such as the ability to access the Java Webstart client, share documents, view IP/MPLSView system monitoring information, manage report groups, and administer web passwords.

  • Web Portal - Live Network: Various web features can be enabled or disabled in this cateogry, such as the ability to view collection files, traffic data, VPN reports, VLAN reports, network reports, summary reports, view the live network, or run diagnostic commands (ping/traceroute).

  • Task Manager Tasks: The various tasks in the Task Manager are listed here, so that a user group can be assigned privileges only to certain tasks.

Note that the contents of this window depend upon the user group type and IP/MPLSView license file. For example, a web user group cannot have Desktop Client privileges assigned to it. The web user group categories are limited to the following: Event Browser (for the web-launched Event Browser), Web Portal - General, Web Portal - Live Network, and Task Manager Tasks.


In addition to assigning functionality to user groups, restrictions to particular regions can be specified. (Note that an additional license key is required for regional assignments). To create a region, click on the Regions tab at the top of the window.

Figure 1: Regions

Regions can be defined by selecting the devices in the table on the left and clicking “Add to New Region” or by creating a new region on the right pane using “Add New Region” and then dragging a device in the tree to the region’s name.

After creating the region, click Apply. Next, switch back to the User Groups tab, and select the Regions tab on the bottom of the window to select particular regions. By default, “All Regions” is selected.

Figure 2: Assigning Regions to a User Group
Assigning Regions to a User Group

VPN Selection

For Web Portal and Web VPN users, access to specific VPNs can also be controlled via the VPN Customers tab toward the bottom of the window. The Web VPN Groups are populated by default according to the data extracted from the configuration files.

Figure 3: VPN Assignment
VPN Assignment