Zyxel NCC – Reprovision Live Tool: Overview, Usage Scenarios, Limitations, and Best Practices

Cloud-managed networks rely on accurate and synchronized configuration delivery from Nebula Control Center (NCC). However, in some scenarios—such as cloud provisioning conflicts, failed pushes, or desynchronized device states - network devices may not reflect the correct cloud configuration.

The Reprovision Live Tool provides administrators with a fast and safe way to force NCC to resend all cloud configurations to targeted cloud-managed devices. This enables:

Supported Device Types

The Reprovision Live Tool is available only for devices that fully participate in NCC cloud provisioning.

Supported:

• Access Points

• Switches (including stacking)

• NSG Series Firewalls

• ATP / USG FLEX Series Firewalls

• USG FLEX H Series Firewalls

• SCR50AXE & USG LITE 60AX Security Routers

Not Supported:

• Mobile Routers

• Accessories (e.g., PoE extenders)

These device types do not use full cloud reprovisioning and are intentionally excluded.

When to Use the Reprovision Tool

Reprovisioning is a short-term recovery method used when:

• The device shows configuration desynchronization with NCC

• NCC displays the correct settings, but the device still operates with outdated or partial configurations

• A previous provisioning attempt was interrupted or corrupted

• The device is functioning, but cloud-managed parameters were not applied properly

Reprovisioning ensures a complete reset of cloud settings from NCC to the device.

Configuration Status Requirement: “Up to date” Only

Reprovisioning is available only when the device’s configuration status in NCC is Up to date.

If the device status is Not up to date:

• The Reprovision button becomes greyed out

• Hovering on the button displays an explanation message

• The tool cannot be initiated until the device finishes sync

Reprovisioning During Auto Configuration Recovery (Switches)

Switches may enter Auto Configuration Recovery Lock when NCC provisioning causes the switch to lose connection. In this case:

1. NCC locks the switch to prevent further configuration pushes

2. All upcoming provisioning commands are queued

3. Reprovision Live Tool can still be initiated while the switch is locked

4. NCC will send all queued and reprovisioned configurations only after the administrator presses Unlock on the device page

How Auto Configuration Recovery Works (recap)

• This mechanism restores the switch to its last known good configuration

• NCC blocks further provisioning during recovery

• The administrator must manually unlock the switch to resume normal operation

Reprovisioning During Misconfigured IP/VLAN Conditions

If the device loses communication with NCC due to incorrect network settings (e.g., wrong VLAN or management IP), NCC handles provisioning as follows:

• Provisioning is executed in batches called provisioning sets

• NCC must receive a provision-received message from the device to clear a set from the queue

• The only exception is the management IP/VLAN setting, which is sent once only, even if acknowledgement is not received

• NCC repeatedly cycles through the remaining provisioning sets until the queue is empty

This ensures that once the device regains connectivity, all pending configuration sets are applied.

How Auto Configuration Recovery Works (recap)

• This mechanism restores the switch to its last known good configuration

• NCC blocks further provisioning during recovery

• The administrator must manually unlock the switch to resume normal operation

Reprovisioning During Misconfigured IP/VLAN Conditions

If the device loses communication with NCC due to incorrect network settings (e.g., wrong VLAN or management IP), NCC handles provisioning as follows:

• Provisioning is executed in batches called provisioning sets

• NCC must receive a provision-received message from the device to clear a set from the queue

• The only exception is the management IP/VLAN setting, which is sent once only, even if acknowledgement is not received

• NCC repeatedly cycles through the remaining provisioning sets until the queue is empty

This ensures that once the device regains connectivity, all pending configuration sets are applied.

Configuration and Device Status Indicators

The presentation includes examples demonstrating how NCC displays:

• Config Status (Up to date / Not up to date)

• Device Status (connectivity, heartbeat, etc.)

Administrators should verify both statuses before initiating Reprovision.