MLU-1 documentation › Web console

Web console reference

Software 3.4 · reviewed 2026-08-20

Getting in

Two addresses, the same console: the LAN address given during installation, and https://192.168.77.1/ on the service port, which works whatever the LAN is doing. Sessions expire after 30 minutes of inactivity and there is no “remember me”.

Five failed sign-ins from one address earn a fifteen-minute lockout for that address. The service port is exempt, deliberately — being locked out of a unit you are standing next to helps nobody.

Page map

Console pageShowsChangesMinimum role
OverviewDevice count, last collection pass, open alerts, queue depth, diskNothingViewer
DevicesInventory: address, model, serial, profile match, last readingLabels, location, profile, exclusionOperator
Devices › DetailOne device: counters, supplies, history, alert logPer-device thresholds and offsetsOperator
DiscoveryRanges, schedule, last scan resultRanges, credentials, scheduleAdministrator
MetersReadings by day and month, flagsSchedule, reset acceptanceOperator
SuppliesLevels, estimates, what is dueThresholds, hidden suppliesOperator
ReleasePools, held jobs, released historyPools, limits, user listAdministrator
AlertsOpen and closed alerts, rules, quiet hoursRules, recipients, suppressionOperator
ExportsScheduled and past exportsSchedules, formats, recipientsAdministrator
System › NetworkInterfaces, DNS, NTP, current offsetAddressing, DNS, NTPAdministrator
System › UsersConsole accounts and rolesAccounts, roles, passwordsAdministrator
System › BackupBackup history and destinationsCreate, restore, scheduleAdministrator
System › SoftwareVersion, update source, historyUpdate, rollbackAdministrator
System › DiagnosticsLive log, service status, self-testBundle collection, service restartAdministrator

Roles

RoleCanCannot
ViewerRead every page except SystemChange anything, see held job names
OperatorDay-to-day: labels, thresholds, acknowledging alerts, running a scanTouch networking, users, software or release pools
AdministratorEverything on the unitRead the content of a held job — nobody can
ServiceEverything, plus shell access and diagnostic bundles—
One Service account, used rarely. Day-to-day work is an Operator job. If the site’s own IT staff hold an Administrator account, that is normal and healthy; a shared Service login on a shared password is neither.

Settings that interrupt collection

Most changes take effect immediately. These five restart a service, which means a gap of under a minute in collection and, for two of them, a broken print at exactly the wrong moment.

ChangeEffectSeverity
LAN addressingConsole and queue drop; every workstation pointing at the old address failsdisruptive
Release enable / disableQueue service restarts; a job printing at that second is lostdisruptive
SNMP credential changeCollection restarts; one pass may be missedminor gap
Time zoneDay boundaries move; today’s report may double-count an hourminor gap
Software updateEverything stops for 3–6 minutesdisruptive

Certificates

A new unit serves a self-signed certificate for its own address, valid for five years. That is adequate for a box reached by three people, and it is what most sites leave in place.

Where the site would rather not train people to click through a warning, install its own certificate for the unit’s DNS name under System › Network › Certificate. Requirements are ordinary: PEM, the full chain, a key without a passphrase, and a subject alternative name that matches the name people actually type. Replacing the certificate restarts the console only — collection and the release queue keep running.