Everything below was run on three buildings on 2026-09-23. Steps marked
later are not skipped by accident: in a third-line building the
patch plan and the port assignment are written per unit when the technician
patches it, so there is nothing to invent up front.
0. Access
- Every operator who onboards buildings needs an admin login in the operator portal. Check Administration → Users and that the person has signed in once.
- Technicians get their own technician sign-in from Installs & Dispatch → Technicians → Set up sign-in (see CPE provisioning).
1. The building record
Site Manager → New site → Building. Fill in what the platform derives names and identifiers from:
Check the Units tab afterwards: the register must show the real unit
numbers (per-floor layout when floors differ — use Change layout → Per level).
Bulk internet
The building’s page has a Bulk internet row (Off, or On with the number of attached products); Change opens the dialog. The flag says the rent includes the internet. Under it you attach wholesale products, each with the wholesale rate and the bulk rate (the difference is the provider’s margin); only products marked Can be included in rent are offered. Once the flag is on, residents see only bulk plans, and every other building offers only paid plans. The flag never changes a live line: lines already on a bulk plan are listed in the dialog and stay as they are. Attaching a product does not create coverage; a provider still needs its contract or pick on the building.Operator discounts
The building’s page has an Operator discounts row beside Bulk internet. It lists the kurnl discounts that run on this building, with their dates. Add or change them under Administration → Operator discounts; the building row is the shortcut. A building that offers bulk internet gets no discount code, since the code never applies to bulk plans. See Operator discounts.2. Rooms
Documentation → Rooms. One MER exists by default; add a SER per secondary telecom room (one per floor in a riser building). Put the room’s real designation and backboard into the note (for example Communications Room B105, backboard TBB-M). Rooms become NetBox locations; the ROOM segment of every unit identifier resolves through the switch that stands in the room.3. Switch
Equipment → Stock → Assign to building (room: MER). The assign mints the canonical name (…|MER|SW01), takes the next free OAM address and mirrors
the device into NetBox. Then on the switch:
- Credential set — pick the shared set for the vendor; never type a login into the switch row.
- Switch label
SW01(SW02 …) — the short name the panels, job sheets and the port map use. - Room — make sure the switch stands in the MER (or the SER it is in).
- Switch layout (the switch’s page) — an access switch by default (subscriber ports plus uplinks); set aggregation only for a switch that carries no subscriber. Check the port roles: the port towards the building uplink — or towards the previous switch when buildings are chained — is Uplink; ports that stay dark are Unused. The catalog sets sensible defaults per model (FS S5860: subscriber ports 1–20, uplinks on its four 25G ports, which run at 10G for standard SFP+ optics; the 40G ports stay unused). A switch without any uplink gets no golden configuration until one is set here. Taking a port off Subscriber asks first — the next golden configuration turns it into a trunk or shuts it down — and is refused while a subscription is live on it. Units are only ever mapped to subscriber ports: the unit port pickers, the patch panel and automatic port assignment never offer an uplink, management or unused port, nor any port of an aggregation switch, and the platform refuses such a mapping if one is attempted.
- Equipment → switch → Golden config. Pick the target iBOS line that
matches
show versionon the unit (7.7 default; 7.5 only as a bridge for older firmware — it has no per-port MAC limit, so the switch is upgraded to 7.7 and the default configuration rolled out again afterwards). - Download. The file contains the switch login (username and secret from the credential set) — handle it like a password, do not post it in chat.
- On the switch:
enable→configure terminal→ paste →end→write. Verify hostname, OAM address and default route against what the portal shows for the switch. If they differ, fix the record in the portal and download again — never edit the file. - Once the switch answers on the OAM network the portal picks it up (health, port map); a Golden config drift finding names anything that differs.
- Golden config in the page header → Preview on switch lists what the switch does not show yet.
- Apply to switch writes it from the portal. The switch is told to reload within ten minutes first, so a lost session brings it back to its saved configuration; the configuration is saved only when the switch shows every line.
- The dialog follows the apply stage by stage — connecting, waiting for the clock, safety reload armed (with its time on the switch clock), sending the lines (counted), verifying, saving, cancelling the reload — with the elapsed time. It takes a minute or two. Closing the dialog does not stop it; opening it again shows where it is. One apply runs per switch at a time: a second one, or a preview, waits until it is done.
- If the switch refuses a line, the dialog names the line and the stage it stopped at, and the time the switch goes back to its saved configuration; nothing is written to it until then.
4. Rack and placement
Documentation → Rack → New rack (default: MER Rack 1, 15U — the standard wall rack in the bill of materials; set the real height if the building differs). The rack stands in the MER room. Then Place device:
The elevation is what the technician sees on the job sheet (Show rack view).
5. Patch panel — when the splice plan is known
The panel is the splice panel of the riser, not a mirror of the switch: in a building with more units than switch ports it has 48, 96 or 144 ports (Estoya’s quote names a 144-fibre rack panel) and every unit is spliced onto a rear port once, while only the active units are patched to a switch port on the front. Its port count is a fact from the splice design — create the panel when that design exists (Documentation → Patch plan → New panel, name, port count, rack units), never as a guess. Seed panels (one 1:1 panel per switch) is only right where the panel really is a 1:1 breakout of the switch. The panel is mirrored into NetBox with front and rear ports; place it in the rack (step 4). Later — the patch plan itself. Rear port ↔ unit (the splice) and front port ↔ switch port (the patch) are recorded when they exist: in a first-line rollout the splicer and the patcher fill the sheet once; in a third-line building the technician’s Patched on the job sheet writes each unit’s patch as it is made. Do not pre-fill a plan you have not seen.6. Circuits
Circuits → New: the building’s uplink (carrier, hand-off interface, speed) and the connection to the NOC, bothplanned; set them live at
turn-up. The health topology and the technician’s site card read them.
7. Minting and provisioning — later
Minting a unit’s location needs its effective switch port. In a third-line building that port exists once the unit is patched, so Mint now runs per unit after the first visit (Units → Path to service → mint pending). A first-line rollout mints the whole register after the patch sheet is filled. Provisioning itself is automatic from the CPE’s first contact — see CPE provisioning.8. Pre-orders
A building can take orders before it is live. On Site detail → Overview, tick Open for pre-orders. Opening and closing both ask for a confirmation. While the building is open, a Pre-orders badge shows on the Sites list, and the site page shows how many orders are waiting.
Open for pre-orders on Site detail › Overview
Activate now. On the customer’s page, a waiting row shows Activate now. It
starts the order without waiting for the move-in pass. It is operator-only: the
customer cannot trigger early activation, and moving the move-in date in the portal
is not available yet.