NetCloud Manager Registration
Cradlepoint NetCloud Manager is Cradlepoint’s next generation management and application platform. NetCloud Manager (NCM) integrates cloud management with your Cradlepoint devices to improve productivity, increase reliability, reduce costs, and enhance the intelligence of your network and business operations.
Click here to learn more and sign up for a free 30-day NCM trial.
Depending on your ordering process, your devices may have already been bulk-loaded into NCM. If so, simply log in at cradlepointecm.com using your NCM credentials and begin managing your devices seamlessly from the cloud.
If your device has not yet been loaded into your NCM account, you need to register. Log into NetCloud OS (NCOS) and click on the NetCloud Logo. Enter your NCM username and password, and click on “Register”.
Once you have registered your device, go to https://cradlepointecm.com and log in using your NCM credentials.
For more information about how to use Cradlepoint NetCloud Manager, see the following:
First Time Setup
When you log in to NetCloud OS (NCOS) for the first time, you will be automatically directed to the FIRST TIME SETUP WIZARD, which will walk you through basic steps to customize your router. To return to the First Time Setup Wizard after your initial login, go to SYSTEM → SETUP WIZARDS in the dropdown menu. You have the ability to configure any of the following:
- Administrator Password
- Time Zone
- WiFi Network Name
- Security Mode
- Failure Check
Cradlepoint recommends that you change the router’s ADMINISTRATOR PASSWORD, which is used to log into NetCloud OS (NCOS). The administrator password is separate from the WiFi security password, although initially the Default Password is used for both.
NOTE: If you plan to use your router in a PCI DSS compliant environment, do not use this setting. Use the “Advanced Security Mode” settings under the Router Security tab in System Settings → Administration instead.
You can select your TIME ZONE from a dropdown list. (This may be necessary to properly show time in your router log, but typically your router will automatically determine your time zone through your browser.)
WiFi Network Name
Cradlepoint recommends that you customize your WiFi network name. Type in your personalized network name here. You can also enable the Guest Network feature (for more configuration options, see Networking → Local Networks → WiFI Radio).
WiFi Security Mode
Choose the WIFI SECURITY MODE that best fits your needs:
- BEST (WPA2): Select this option if your wireless adapters support WPA2-only mode. This will connect to most new devices and is the most secure, but may not connect to older devices or some handheld devices such as a PSP.
- GOOD (WPA1 & WPA2): Select this option if your wireless adapters support WPA or WPA2. This is the most compatible with modern devices and PCs.
- POOR (WEP): Select this option if your wireless adapters only support WEP. This should only be used if a legacy device that only supports WEP will be connected to the router. WEP is insecure and obsolete and is only supported in the router for legacy reasons. The router cannot use 802.11n modes if WEP is enabled; WiFi performance and range will be limited.
- NONE (OPEN): Select this option if you do not want to activate any security features.
Cradlepoint recommends BEST (WPA2) WiFi security. Try this option first and switch only if you have a device that is incompatible with WPA2.
Choose a personalized WPA PASSWORD or WEP KEY. This password will be used to connect devices to the router’s WiFi broadcast once the security settings have been saved.
- WPA Password: The WPA Password must be between 8 and 64 characters long. A combination of upper and lower case letters along with numbers and special characters is recommended to prevent hackers from gaining access to your network.
- WEP Key: A WEP Key must be either a hexadecimal value of 5 or 13 characters or a text value of 10 or 26 characters.
Configuring Failure Check
It is possible for a WAN interface to go down without the router recognizing the failure. (For example: the carrier for a cellular modem goes dormant, or your Ethernet connection is properly attached to a modem but the modem becomes disconnected from its Internet source.) Enable Failure Check to ensure that you can get out to the Internet via your primary WAN connection. This option is disabled by default because it may use data unnecessarily. Use this in combination with failover. For cellular modems, use this in combination with Aggressive Reset (Connection Manager under Modem Settings in the interface/rule editor).
Idle Check Interval: Set the number of seconds the router will wait between checks to see if the WAN is still available. (Default: 30 seconds. Range: 10-3600 seconds.)
Monitor while connected: Select from the dropdown menu. (Default: Off.)
- Active Ping: A ping request will be sent to the Ping Target. If no data is received, the ping request will be retried 4 times at 5-second intervals. If still no data is received, the device will be disconnected and failover will occur. When “Active Ping” is selected, the next line gives an estimate of data usage in this form: “Active Ping could use as much as 9.3 MB of data per month.” This amount depends on the Idle Check Interval.
- Off: Once the link is established the router takes no action to verify that it is still up.
Ping IP Address: If you selected “Active Ping”, you will need to input an IP address that will respond to a ping request. This IP address must be an address that can be reached through your WAN connection (modem/Ethernet). Some ISPs/Carriers block certain addresses, so choose an address that all of your WAN connections can use. For best results, select an established public IP address. For example, you might ping Google Public DNS at 184.108.40.206 or Level 3 Communications at 220.127.116.11.
Review the details and record your wireless network name, administrative password, and WPA password (or WEP key). Move your mouse over your WiFi password to reveal it.
Please record these settings for future access. You may need this information to configure other wireless devices.
NOTE: If you are currently using the device's WiFi network, reconnect to the network using the new wireless network name and security password.
Click FINISH to save the settings and update them to your router.
IP Passthrough Setup
You can quickly enable IP passthrough with the IP Passthrough Setup Wizard available under SYSTEM → SETUP WIZARDS → IP Passthrough Setup. IP passthrough takes a WAN data source and passes the IP address through to Ethernet LAN.
Using this function requires many changes to your router configuration. The IP Passthrough Setup Wizard will automatically make these changes for you: simply read through the wizard and select Enable IP Passthrough on the second page. For further configuration options, see Networking → Local Networks → Local IP Networks.
Review the list of changes to ensure they are compatible with your router needs:
- All Ethernet ports will be set to LAN (i.e. you cannot use Ethernet as an Internet source for your router).
- All WAN devices will have Load Balance disabled and the highest priority device will be used.
- All network groups except the primary network group will be removed.
- All wireless interfaces will be removed from the primary network group. (It is possible to have a wireless interface associated with another network.)
- All router-based VPN and GRE services will be disabled.
- The Routing Mode will be set to IP Passthrough. (Networking → Local Networks → Local IP Networks in the “Local Network Editor” under “IP Settings”)
- The Subnet Selection Mode will be set to "Automatically Create Subnet" (Networking → Local Networks → Local IP Networks in the “Local Network Editor” under “IP Settings” – this shows once IP Passthrough is set as the Routing Mode). You have the option to override this and select Force 24 Subnet, which forces a subnet of 255.255.255.0 and uses the first available address in the network as the gateway. This is for compatibility with equipment that may not handle modem addressing schemes; this should not be used unless necessary.
Any Ethernet WAN connections should be disconnected before IP passthrough is enabled.
This article not have what you need? Not find what you were looking for? Think this article can be improved? Please let us know at firstname.lastname@example.org.