Skip to main content

First-Time Setup

After deployment, secure the admin account and configure integrations.

Default Login​

Open http://<master-ip>:23000, sign in as admin / admin and change the password. To set the initial password instead, run before the first start:

sudo mac env set --global MAC_ADMIN_PASSWORD=<strong-password>
sudo mac start master

If the dashboard says sign-in is off, run sudo mac env unset --global MAC_AUTH_ENABLED, then sudo mac restart master (all on an all-in-one node).

Roles and User Management​

Create named accounts in Settings → Users (roles). Before deleting or demoting admin, confirm another admin can sign in.

Configuring Switch Access​

Set switch SSH credentials (tried in order) and limit them to your management CIDRs:

sudo mac env set --global SWITCH_USER=<switch-user>
sudo mac env set --global SWITCH_PASSWD_LIST=<password1>,<password2>
sudo mac env set --global SWITCH_MGMT_CIDRS=192.0.2.0/24
sudo mac restart master

LLMBoost Auto-Discovery​

Run mac llmboost detect on serving nodes, then set the OpenAI-compatible ports on the master:

sudo mac env set --global LLMBOOST_HOST_PORTS=30080,8000
sudo mac restart master

LLMBOOST_ENGINE_ENDPOINTS adds explicit URLs. For Kubernetes, see LLMBoost.

Optional Settings​

Set these with sudo mac env set --global, then restart the master (all for TZ). See Environment or mac env --all for the rest.

  • gNMI telemetry from SONiC switches on TCP 8080; other switches use SNMP.
  • MAC_SSH_KNOWN_HOSTS, a known_hosts path inside api-server, pins switch SSH host keys; by default MAC trusts the first key it sees.
  • MAC_ALLOWED_ORIGINS allows credentialed API calls from other origins.
  • TZ overrides the host timezone.