36
4.6.5.
NTP key
The NTP key enables secure communication between a server and an NTP client, in order to prevent intrusion by a
third-party server.
Page 1: ...y concerns to the carrier BODET SA 1 rue du G n ral de Gaulle 49340 Trementines France Tel support France 02 41 71 72 99 Fax France 02 41 71 72 01 Ref 608065 B www bodet time com This document refers...
Page 2: ...4 5 Communications 9 1 4 6 Lists of network protocols supported 10 1 4 7 Synchronisation sources 10 2 Installation 11 2 1 Checking the package 11 2 2 Safety 11 2 2 1 Installing the equipment 11 2 2 2...
Page 3: ...an account 19 4 2 4 Restoring the default password 20 4 3 Configuring the time zone 21 4 3 1 Defining the local time system and date 21 4 3 2 Creating a time zone manually 21 4 3 3 Creating a time zon...
Page 4: ...em supervision 47 4 9 1 SNMP agent 47 4 10 System monitoring 48 4 10 1 Home page 48 4 10 2 GPS statistics 49 4 10 3 NTP statistics 50 4 10 4 NTP log 51 4 10 5 Alarm history 51 4 11 System tools 52 4 1...
Page 5: ...trol panel inactive 65 8 4 Data synchronisation 65 8 5 USB loading 66 8 6 BODET technical support 66 8 7 History of updates to this guide 66 9 ANNEXES 67 9 1 Annex 1 synchronisation 67 9 1 1 Primary s...
Page 6: ...tsilon Good knowledge of this environment Read through this manual from Chapter 2 Installation If Netsilon is already operational In order to change a specific setting or gain a better understanding o...
Page 7: ...6 VDC power supply terminal 3 81mm terminal 5 Slots for option cards NETWORK option card RJ45 ref 907920 AFNOR option card ref 907940 PULSE option card ref 907942 CURRENT LOOP option card ref 907944 N...
Page 8: ...8 7 Terminal for GPS antenna 8 Alarms input interfaces with the dry contact of the client equipment 9 Serial port 10 ETH0 network card Netsilon 7 100 240 VAC Netsilon 7 18 36 VDC...
Page 9: ...1x Ethernet 4 slots for option cards 1 4 3 Mechanical characteristics Construction Metal case 1 U rack 19 Operating temperature 0 C to 50 C Humidity level 0 90 without condensation Protection class IP...
Page 10: ...configuration and supervision SSH Configuration basique avec des jeux de commandes par le port Ethernet Console Configuration basique avec des jeux de commandes par le port s rie Communications IP Ve...
Page 11: ...on and maintenance of your product 2 2 1 Installing the equipment The installation and maintenance of this device must be performed by accredited personnel This product must not be installed by unauth...
Page 12: ...polarity indicated at the rear of the device 2 4 2 Backup battery CR2032 If replacing the CR2032 battery it is essential to observe the polarity as indicated on the slot of the battery There is a risk...
Page 13: ...ion The default configuration parameters have been selected to facilitate initial configuration A single account is activated on shipment from the factory Default web server user account Username bode...
Page 14: ...ead the IP address on the LCD screen consult the network menu using the Netsilon control panel and LCD screen 3 Enter the IP address as seen on the LCD screen into the web browser Google Chrome Mozill...
Page 15: ...of bits used in the netmask may range from 8 to 30 bits Gateway The gateway address is required if communication with Netsilon is outside the local network By default the gateway is disabled To confi...
Page 16: ...info Username bodetadmin Password admin49 4 1 Start up 4 1 1 Presentation of the main menu dashboard which can be used to view the status of synchronisation sources alarms power supplies and outputs c...
Page 17: ...default English Available languages English French Spanish German Dutch Italian 4 Can be used to select the scrolling parameters displayed on the LCD standby screen Time Local time and date Network IP...
Page 18: ...eneral Settings 2 English is the default language It is also possible to set the period of time after which the web server will disconnect and return to the login page after configuring each parameter...
Page 19: ...nu User management Users 2 Click to add an account and the following window will appear 3 Click to apply the changes refer to Annex 3 to see the differences between administrator and user profiles 4 2...
Page 20: ...the default password In order to restore the default administrator account password follow these steps 1 SECURITY menu User management Account 2 Click and the following window will appear 3 Click to...
Page 21: ...date follow these steps 1 TIME menu Time zones Local time system 2 Click and the following window will appear 3 Manually change the time and date 4 Select the time zone from the drop down menu Time zo...
Page 22: ...s The UTC reference is present by default 2 Click to add a time zone and the following window will appear 1 Enter the name of the new time zone 2 Select the time zone from the drop down menu UTC offse...
Page 23: ...a network output follow these steps 1 NETWORK menu Interfaces ETH0 interface 2 Click and the following window will appear 3 Configure the various parameters 1 With a DHCP server check the box The IP a...
Page 24: ...web server using the domain name 4 4 2 ETHERNET expansion card ref 907920 The network expansion card can be used to synchronise several separate Ethernet networks To configure a network output see Ch...
Page 25: ...k service see the detailed chapter HTTPS HTTPS Hypertext Transfer Protocol Secure is a communication protocol used to access a secure web server If HTTPS is included in the URL instead of the usual HT...
Page 26: ...DNS The DNS Domain Name System is a protocol which can be used to associate a domain name known as the Hostname e g www netsilon com with an IP address However if queried by a host on the destination...
Page 27: ...public key 3 Types of keys supported RSA 1024 2048 4096 bits DSA 1024 bits fixed ECDSA 256 384 521 bits ED25519 256 bits fixed 4 Generates or deletes the certificates of each type of key To generate a...
Page 28: ...anagement of the equipment in SNMP format Click Configure then refer to Chapter 4 8 System supervision SMTP SMTP Simple Mail Transfer Protocol is used to transfer electronic messages alarms within a c...
Page 29: ...ppear 1 3 possible choices AUTO1 GPS1 NTP 2 3 possible choices None GPS1 NTP 3 Holdover is a status in which the time server continues to transmit a time signal without the presence of a synchronisati...
Page 30: ...ow will appear 2 Click and the following window will appear Set the number of satellites to define the alarm threshold 1 Set the number of satellites between 3 and 8 2 Set the duration after which the...
Page 31: ...NTP packets remote information queries 3 Tick this box to force authentication with a symmetric key or Autokey Without this authentication synchronisation is impossible 4 ntp conf can be used to displ...
Page 32: ...and select a pre defined symmetric key See Chapter 4 5 2 NTP synchronisation 4 Before enabling this parameter enter the autokey See Chapter 4 5 2 NTP synchronisation 5 The Burst option should be enabl...
Page 33: ...l increase in order to reduce network traffic and load on the time servers Chosen range Automatic 3 8 seconds to 17 36 hours 24 minutes and 32 seconds 3 Values 1 32 64 96 128 160 192 and 224 TTL indic...
Page 34: ...horised at the same hierarchical level to know the time both will work to obtain an identical synchronisation Scenario 1 the reference server transmits the time signal Scenario 2 the reference server...
Page 35: ...quick synchronisation Once synchronisation is complete this value will increase in order to reduce network traffic and load on the time servers Chosen range Automatic 3 8 seconds to 17 36 hours 24 min...
Page 36: ...36 4 6 5 NTP key The NTP key enables secure communication between a server and an NTP client in order to prevent intrusion by a third party server...
Page 37: ...network device intended to communicate with Netsilon is correct 2 Enter a number between 1 and 65534 Netsilon supports MD5 authentication by default This function assigns an authenticator composed of...
Page 38: ...er of characters indicated 3 Before a server can be designated as a client or server it must be designated as trusted When designating a server as trusted select Trusted then save A certificate is the...
Page 39: ...in order to pass the information on to the clients To activate NTP Anycast mode follow these steps 1 TIME menu NTP NTP Anycast 2 Click on the following window opens 1 Activate deactivate NTP Anycast...
Page 40: ...40 The AFNOR expansion card enables wired time distribution AFNOR IRIB B 127 standard or by DHF using the DHF transmitter the 2 outputs can transmit a different time different time zone To configure t...
Page 41: ...king and the following window will appear 3 Select the time zone which will be transmitted via the PULSE expansion card output 4 Select the impulse type Minute or minute 5 Set the pulse length in seco...
Page 42: ...DCF via current loop To configure the Current Loop output follow these steps 1 TIME menu Outputs Slot C Current Loop 2 Configure the output by clicking and the following window will appear 3 Select th...
Page 43: ...2 In SMTP service click and the following window will appear 1 Enter the IP address of the receiving server 2 Enter the communication port 3 Enter the name of the sender of the e mails i e the name g...
Page 44: ...erver 192 168 1 254 Port 25 Users e mail Password Admin admin serveurtest com admintest smtp test smtp test serveurtest com admintest netsilon1 netsilon1 serveurtest com admintest 2 Enter the list of...
Page 45: ...32 characters without spaces 3 Select the IP communication version IPV4 4 Enter the IP address of the trap destination server 3 Click 4 Enable the service using the button then save Version V3 1 3 4...
Page 46: ...LED on the front panel of the Netsilon device and notified via a relay contact 3 Tick the box for the alarm to be sent by e mail see Chapter 4 7 1 SMTP configuration 4 Tick the box for the alarm to b...
Page 47: ...llowing window will appear 1 Selecting the SNMP version 2 Enter a community name of between 5 and 32 characters without spaces 3 Select the IP communication version IPV4 4 Enter the IP address of the...
Page 48: ...tatus of the outputs The name of the output its status and a text description This list is dynamic and depends on the number of existing outputs on the product 4 This menu shows the power supply statu...
Page 49: ...GPS reception frame but no synchronisation waiting period to check if the source is reliable 1 GPS frame reception 2 Graph showing the number of satellites detected according to the time Signal recept...
Page 50: ...ng the drop down menu 1 Time offset time offset in relation to the reference synchronisation source 2 Drift compensation gradual correction of the Netsilon oscillator in relation to the source The ide...
Page 51: ...s possible to perform a search of this log using the search bar 4 10 5 Alarm history To view the history of alarms and acknowledge them follow these steps 1 HISTORY menu Alarms To refresh this list cl...
Page 52: ...TEM menu Tools Upgrade and backup 2 Click and the following window will appear for selection of the file to import The file to be imported must have a FileName nets extension Why save a configuration...
Page 53: ...server will be broken because the IP address is lost it is necessary to reconfigure the network settings to access the web server refer to Chapter 3 Commissioning and perform the operations described...
Page 54: ...se steps 1 SYSTEM menu Tools Option cards 2 Select the expansion card to be removed 3 Click and the following window will appear if this removal is performed but the expansion card is still present it...
Page 55: ...you to log into Netsilon remotely e g PuTTY 2 Note the IP address of Netsilon 7 3 Open the program PuTTY 4 Enter the IP address 5 Enter the default ID and password to access the command set Remember...
Page 56: ...licking on 3 Copy the public key to paste to the SSH parameters of Netsilon see page 26 Copy the key from the PuTTY generator Paste the key to Netsilon 4 Save the private key to your PC 5 Download a p...
Page 57: ...57 8 Enter the location on your PC containing the private key matching the public key copied to Netsilon 9 Enter the user 10 Click on the following window opens...
Page 58: ...tsilon e g PuTTY 2 Open the program PuTTY 3 Enter the communication port 4 Click on Serial to check the parameters of the ASCII RS 232 serial connection 9600 baud 1 start bit 8 data bits 1 stop bit no...
Page 59: ...ia the web server menus are automatically closed after 45 seconds of inactivity on the control panel 10 54 32 Tues 19 SEP 2016 10 54 32 Tues 19 SEP 2016 System ok Network Network ok USB transfer USB t...
Page 60: ...em ok Network 10 54 32 Tues 19 SEP 2016 10 54 32 Tues 19 SEP 2016 System ok Network Product info ok Version Version ok Option cards Option cards ok Language Netsilon 00 0b 84 05 25 27 ok Netsilon V1 1...
Page 61: ...he CIDR addressing No IP address No gateway ok 192 168 1 0 24 No gateway ok Without a DHCP server With a DHCP server1 10 54 32 Tues 19 SEP 2016 10 54 32 Tues 19 SEP 2016 10 54 32 Tues 19 SEP 2016 Syst...
Page 62: ...work Network ok USB transfer Backup ok Download soft UC Download soft UC ok Connect USB key then press ok exit C Connect USB key then press ok exit C Select prog load Select save Confirm load ok soft...
Page 63: ...ETH0 port is shown on a label on the rear of the Netsilon device 10 54 32 Tues 19 SEP 2016 Enter TECHNICIAN code _00000 ok Lock keyboard ok Restore bodetadmin Unlock keyboard ok Restore bodetadmin Lo...
Page 64: ...input is available e g for a GPS synchronisation source check that Netsilon is connected to this antenna 2 The GPS antenna installation is operational where applicable Flashing red Synchronisation lo...
Page 65: ...name and the home page will open However the connection is not secure and is indicated as follows It is possible to force the connection see Chapter HTTPS Enable cookies Cookies must be enabled in ord...
Page 66: ...If the USB key is not detected on the USB port check that The USB port is not locked Via the web server System menu General Front panel The format file system of the USB key is FAT16 FAT32 or NTFS 8...
Page 67: ...tion with the primary source e g GPS Loss of synchronisation from the primary source Holdover Re synchronisation with the primary source 1 this is a status in which Netsilon can transmit a time signal...
Page 68: ...synchronisation source Freerun on product start up Timeout for synchronisation with the primary source e g GPS Timeout for synchronisation with the secondary source e g NTP No synchronisation switch t...
Page 69: ...g NTP Loss of synchronisation from the secondary source Holdover No synchronisation switch to freerun Scenario 2 no synchronisation source Freerun on product start up Timeout for both synchronisation...
Page 70: ...protocol Outputs configure outputs option cards Time zone configure local time system Time zone define time zones History GPS statistics NTP statistics NTP logs Alarms acknowledge alarms and consult...
Page 71: ...Outputs configure outputs option cards R W R W Time zone configure local time system R W R W Time zone define time zones R W R W History GPS statistics R R NTP statistics R R NTP logs R R Alarms ackno...
Page 72: ...otocol Outputs configure outputs option cards Time zone configure local time system Time zone define time zones History GPS statistics NTP statistics NTP logs Alarms acknowledge alarms and consult ala...
Page 73: ...of satellites detected Alarm alarmnbminor Indicates the number of active minor alarms alarmnbmajor Indicates the number of active major alarms alarmnbcritical Indicates the number of active critical a...
Page 74: ...ccount password or the public key 1 Make an SCP file transfer to Netsilon using authentication by default account password scp authorized_keys scp 10 10 200 5 ssh scp 10 10 200 135 password admin49 al...
