# Huawei iMaster NCE Campus Setup

---

#### Prerequisites

1. Sign up for a Reseller account by contacting the SafeDNS Sales team (<sales@safedns.com>).
2. Create a sub-account for each tenant or group of tenants, implementing the multi-tenant capability of SafeDNS.
3. Configure the filtering rules for each tenant.
4. Receive the public Subscription API key from the SafeDNS manager.  
    To read more about API methods, please check the [Subscription API documentation](https://docs.safedns.com/books/subscription-api/page/subscription-api-guide).

---

#### Setup

##### Connect a SafeDNS account to iMaster NCE controller  


[![Screenshot_245.png](https://docs.safedns.com/uploads/images/gallery/2023-09/scaled-1680-/NEtX66rfGBJDcqpL-screenshot-245.png)](https://docs.safedns.com/uploads/images/gallery/2023-09/NEtX66rfGBJDcqpL-screenshot-245.png)

1. Navigate to **System &gt; System Settings &gt; Third-Party Service &gt; DNS Interconnection Parameters**.
2. Fill information in the following fields: 
    - DNS IP-Address Main: 195.46.39.39
    - DNS IP-Address Secondary: 195.46.39.40
    - Account: sub-account to connect to SafeDNS
    - Public key: public Subscription API key

---

##### Activate URL-Filtering

1. Select a site in iMaster NCE controller, on which you want to use URL Filtering
2. Navigate to **Provision &gt; Physical Network &gt; Site Configuration**.
3. Select a site from the site drop-down list in the upper left corner.
4. Navigate to the **Site Configuration** tab.
5. Navigate to **AP &gt; Advanced**.
6. Enable DHCP.
7. Set DHCP server parameters.
8. Enable Third-party URL Filtering.

[![Screenshot_246.png](https://docs.safedns.com/uploads/images/gallery/2023-09/scaled-1680-/MrFaB5nyVXDLbQ2d-screenshot-246.png)](https://docs.safedns.com/uploads/images/gallery/2023-09/MrFaB5nyVXDLbQ2d-screenshot-246.png)

---

##### (Optional) Update TLS certificate

A SafeDNS certificate is used for unidirectional authentication between iMaster NCE-Campus and a third-party SafeDNS server.  
This operation is involved in URL filtering by SafeDNS.

<p class="callout info">By default, the SafeDNS certificate is preinstalled on iMaster NCE-Campus.  
</p>

Contact SafeDNS if you need an updated certificate.

1. Log in to iMaster NCE Campus as the system administrator.
2. Navigate to **System &gt; System Management &gt; Certificate Management**.
3. Select **Service Certificate Management  
    [![Screenshot_247.png](https://docs.safedns.com/uploads/images/gallery/2023-09/scaled-1680-/I722rD4iDadkBoKd-screenshot-247.png)](https://docs.safedns.com/uploads/images/gallery/2023-09/I722rD4iDadkBoKd-screenshot-247.png)**
4. Select CampusCfgService\_SafeDNS.
5. Click on the Trust Certificate tab.
6. Click Import.  
    [![Screenshot_248.png](https://docs.safedns.com/uploads/images/gallery/2023-09/scaled-1680-/8uTOgnN6EV5lU0En-screenshot-248.png)](https://docs.safedns.com/uploads/images/gallery/2023-09/8uTOgnN6EV5lU0En-screenshot-248.png)
7. Set Certificate Format to DER.
8. Select the certificate file and click Submit.
9. Wait for 2 minutes.
10. Restart the CampusCfgService service for the certificate to apply:  
    
    1. Log in to the management panel.
    2. Navigate to Product &gt; System Monitoring &gt; Service tab.
    3. Search for CampusCfgService.
    4. Select the service.
    5. Click Stop.
    6. Click Start.
11. Log in to the iMaster NCE Campus and check whether the certificate file is successfully uploaded to the following path: `/opt/oss/NCECAMPUS/apps/CampusCfgService/controller/configuration/safedns`