Ceragon FibeAir IP-20C User Manual Download

Page: 263 / 597

FibeAir IP-20C/S/E

User Guide

Ceragon Proprietary and Confidential

Page 263 of 597

10.

Access Management and Security

This section includes:



Configuring the General Access Control Parameters



Configuring the Password Security Parameters



Configuring the Session Timeout



Configuring Users



Configuring RADIUS



Configuring X.509 CSR Certificates



Blocking Telnet Access



Uploading the Security Log



Uploading the Configuration Log

Related topics:



Changing Your Password



Operating in FIPS Mode



Configuring AES-256 Payload Encryption

Summary of Contents for FibeAir IP-20C

Page 2: ...Product may use open source software among them O S software released under the GPL or GPL alike license Open Source License Inasmuch that such software is being used it is released under the Open Source License accordingly The complete list of the software being used in this product including their respective license and the aforementioned public available changes is accessible at Network element...

Page 3: ...t Knowing the IP Address 35 2 4 Changing Your Password 36 2 5 Configuring In Band Management 37 2 6 Changing the Management IP Address 37 2 7 Configuring the Activation Key 39 2 7 1 Activation Key Overview 39 2 7 2 Viewing the Activation Key Status Parameters 40 2 7 3 Entering the Activation Key 41 2 7 4 Activating Demo Mode 41 2 7 5 Displaying a List of Activation Key Enabled Features 41 2 8 Sett...

Page 4: ... Configuring HSB Radio Protection 84 3 6 3 Configuring 2 2 HSB Protection on an IP 20C Unit 87 3 6 4 Viewing the Configuration of the Standby unit 87 3 6 5 Editing Standby Unit Settings 88 3 6 6 Viewing Link and Protection Status and Activity 88 3 6 7 Manually Switching to the Standby Unit 89 3 6 8 Disabling Automatic Switchover to the Standby Unit 89 3 6 9 Disabling Unit Protection 90 3 7 Configu...

Page 5: ...7 4 12 Displaying Unit Inventory 128 5 Radio Configuration 129 5 1 Viewing the Radio Status and Settings 129 5 2 Configuring the Remote Radio Parameters 132 5 3 Configuring ATPC 135 5 4 Configuring Header De Duplication and Frame Cut Through 136 5 4 1 Viewing Header De Duplication and Frame Cut Through Counters 138 5 5 Configuring AES 256 Payload Encryption 142 5 6 Configuring and Viewing Radio PM...

Page 6: ...EXP Bit Classification Table 207 7 3 Configuring Policers Rate Metering 208 7 3 1 Policer Rate Metering Overview 208 7 3 2 Configuring Policer Profiles 209 7 3 3 Assigning Policers to Interfaces 211 7 3 4 Configuring the Ingress and Egress Byte Compensation 215 7 4 Configuring Marking 216 7 4 1 Marking Overview 216 7 4 2 Enabling Marking 216 7 4 3 Modifying the 802 1Q Marking Table 217 7 4 4 Modif...

Page 7: ...s Management and Security 263 10 1 Configuring the General Access Control Parameters 264 10 2 Configuring the Password Security Parameters 266 10 3 Configuring the Session Timeout 267 10 4 Configuring Users 267 10 4 1User Configuration Overview 268 10 4 2Configuring User Profiles 269 10 4 3Configuring Users 271 10 5 Configuring RADIUS 273 10 5 1RADIUS Overview 273 10 5 2Activating RADIUS Authentic...

Page 8: ...figuring In Band Management CLI 336 13 7 Changing the Management IP Address CLI 336 13 8 Configuring the Activation Key CLI 338 13 8 1Activation Key Overview CLI 338 13 8 2Viewing the Activation Key Status Parameters CLI 338 13 8 3Entering the Activation Key CLI 339 13 8 4Activating Demo Mode CLI 339 13 8 5Displaying a List of Activation Key Enabled Features CLI 339 13 9 Setting the Time and Date ...

Page 9: ... CLI 359 14 5 3Configuring 2 2 HSB Protection on an IP 20C Unit CLI 360 14 5 4Viewing the Configuration of the Standby unit CLI 360 14 5 5Editing Standby Unit Settings CLI 360 14 5 6Viewing Link and Protection Status and Activity CLI 361 14 5 7Manually Switching to the Standby Unit CLI 362 14 5 8Disabling Automatic Switchover to the Standby Unit CLI 362 14 5 9Disabling Unit Protection CLI 362 14 6...

Page 10: ...adio Configuration CLI 388 16 1 Viewing and Configuring the Remote Radio Parameters CLI 388 16 1 1Displaying Communication Status with the Remote Radio CLI 389 16 1 2Displaying the Remote Radio s Link ID CLI 389 16 1 3Muting and Unmuting the Remote Radio CLI 389 16 1 4Displaying the Remote Radio s RX Level CLI 389 16 1 5Configuring the Remote Radio s TX Level CLI 389 16 1 6Configuring Remote ATPC ...

Page 11: ... 4 Configuring Automatic State Propagation CLI 446 17 4 1Configuring Automatic State Propagation to an Ethernet Port CLI 447 17 4 2Enabling Automatic State Propagation CLI 448 17 4 3Deleting Automatic State Propagation CLI 449 17 4 4Displaying Automatic State Propagation Parameters CLI 449 17 5 Viewing Ethernet PMs and Statistics CLI 450 17 5 1Displaying RMON Statistics CLI 450 17 5 2Configuring E...

Page 12: ...file to an Interface CLI 497 18 6 5Configuring Weighted Fair Queuing WFQ CLI 498 18 7 Displaying Egress Statistics CLI 502 18 7 1Displaying Queue Level PMs CLI 502 18 7 2Displaying Service Bundle Level PMs CLI 503 19 Ethernet Protocols CLI 505 19 1 Configuring Adaptive Bandwidth Notification ABN CLI 505 19 1 1Adaptive Bandwidth Notification Overview CLI 505 19 1 2Configuring an ABN Entity CLI 505 ...

Page 13: ...Enabling HTTPS CLI 538 21 6 Blocking Telnet Access CLI 539 21 7 Uploading the Security Log CLI 539 21 8 Uploading the Configuration Log CLI 540 22 Alarm Management and Troubleshooting CLI 542 22 1 Viewing Current Alarms CLI 542 22 2 Viewing the Event Log CLI 542 22 3 Editing Alarm Text and Severity CLI 542 22 3 1Displaying Alarm Information CLI 542 22 3 2Editing an Alarm Type CLI 543 22 3 3Setting...

Page 14: ...al GbE Interface SFP LEDs 559 23 4 3Management FE Interface RJ 45 LEDs 559 23 4 4Radio LED 559 23 4 5Status LED 559 23 4 6Protection LED 560 23 5 IP 20E Connector Pin outs 560 23 5 1Eth2 Eth3 GbE Optical Interface SFP CSFP 560 23 5 2MGT Eth4 GbE Electrical Interface RJ 45 561 23 5 3EXT Port 561 23 5 4Power Adaptor 561 23 5 5RSL Interface 562 23 6 IP 20E LEDs 563 23 6 1Eth1 PoE GbE Interface RJ 45 ...

Page 15: ...e to strong high frequency electromagnetic fields may cause thermal damage to personnel The eye cornea and lens is easily exposed Any unnecessary exposure is undesirable and should be avoided In radio relay communication installations ordinary setup for normal operation the general RF radiation level will be well below the safety limit In the antennas and directly in front of them the RF intensity...

Page 16: ...wer should be switched off If this is not possible the cable must be disconnected from the transmitter before it is disconnected from the receiver When the cable is reconnected it must be connected to the receiver before it is connected to the transmitter Special Requirements for North America Grounding This equipment is designed to permit connection between the earthed conductor of the DC supply ...

Page 17: ... circuit connection Special Requirements for Norway and Sweden Equipment connected to the protective earthing of the building installation through the mains connection or through other equipment with a connection to protective earthing and to a cable distribution system using coaxial cable may in some circumstances create a fire hazard Connection to a cable distribution system has therefore to be ...

Page 18: ...outes les alimentations électriques Bruit de machine d ordre 3 GPSGV le plus haut niveau de pression sonore s élève à 70 dB A au maximum dans le respect de la norme ISO EN 7779 Allgemeine Vorsichtsmaßnahmen für die Anlage Wenn andere Steuerelemente verwendet Einstellungen vorgenommen oder Verfahren durchgeführt werden als die hier angegebenen kann dies gefährliche Strahlung verursachen Beachten Si...

Page 19: ...on of Hazardous Toxic Substances Component Hazardous Substance Lead Pb Mercury Hg Cadmium Cd Hexavalent Chromium Cr VI Polybrominated Biphenyls PBB Polybrominated Diphenyl Ethers PBDE PCB Circuit Modules Comply Comply Comply Comply Comply Comply Mechanical Parts Comply Comply Comply Comply Comply Comply Cables Comply Comply Comply Comply Comply Comply ...

Page 20: ...plies to CeraOS version 8 3 What You Should Know Some features described in this manual may not be available in the current release Please consult the Release Notes for the functionality supported in the specific release you are using Target Audience This manual is intended for use by individuals responsible for configuration and administration of an IP 20 system or network Related Documents FibeA...

Page 21: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 21 of 597 Section I Introduction ...

Page 22: ... dual core compact all outdoor backhaul Ethernet product that combines radio baseband and Carrier Ethernet functionality in a single durable box for outdoor installations IP 20C offers the convenience of an easy installation procedure and full compatibility with RFU C antennas It is designed for use in network configurations which require high capacity solutions IP 20C covers the entire licensed f...

Page 23: ...ually well suited to be used as a high capacity aggregation link connecting an array of small cells or BTS sites to a macro site Note This document refers to IP 20E hardware release 2 R2 For instructions on using IP 20E hardware release 1 R1 refer to the FibeAir IP 20C S E User Guide Rev E for CeraOS 8 2 or earlier versions 1 4 PoE Injector Overview The PoE injector box is designed to offer a sing...

Page 24: ... and user groups A Web Based EMS connection to the unit can be opened using a Web browser Internet Explorer Mozilla Firefox or Google Chrome The Web Based EMS uses a graphical interface The Web Based EMS shows the actual unit configuration and provides easy access to any interface A wide range of configuration testing and system monitoring tasks can be performed through the Web EMS Note The alarms...

Page 25: ...eb EMS Page Optionally you can display a representation of the IP 20 front panel by clicking either the arrow in the center or the arrow at the right of the bottom toolbar Figure 1 Displaying a Representation of the Front Panel Figure 2 Main Web EMS Page with Representation of Front Panel IP 20C S ...

Page 26: ...by units separately if necessary The title above the main section indicates whether you are working with the Active or Standby TCC For details on configuring HSB radio protection see Configuring HSB Radio Protection Note HSB protection is only available for IP 20C and IP 20S Figure 4 Main Web EMS Page with Active and Standby Tabs Certain pages include a Related Pages drop down list on the upper ri...

Page 27: ...ing the Interfaces Interface Manager Management Inventory Displaying Unit Inventory Management Unit Info Uploading Unit Info Management Reset Performing a Hard Cold Reset Management Set to Factory Default Setting the Unit to the Factory Default Configuration Management Unit Redundancy Configuring HSB Radio Protection Management Networking Local Changing the Management IP Address Defining the IP Pr...

Page 28: ...meters Security Access Control User Profiles Configuring User Profiles Security Access Control User Accounts Configuring Users Security Access Control Password Management Configuring the Password Security Parameters Security Access Control Change Password Changing Your Password Security Access Control Radius Radius Configuration Configuring RADIUS Security Access Control Radius Radius Users Viewin...

Page 29: ...tatistics Traffic Capacity Throughput Displaying Capacity and Throughput PMs PM Statistics Traffic Utilization Displaying Utilization PMs PM Statistics Traffic Frame error rate Displaying Frame Error Rate PMs Diagnostics Loopback Performing Radio Loopback Groups XPIC Configuring XPIC Groups Multi Radio Configuring Multi Carrier ABC Groups MIMO Configuring MIMO and Space Diversity Table 4 IP 20 Web...

Page 30: ...es Configuring Queue Shaper Profiles QoS Shaper Service Bundle Profiles Configuring Service Bundle Shaper Profiles QoS Scheduler Priority Profiles Configuring Priority Profiles QoS Scheduler WFQ Profiles Configuring WFQ Profiles Protocols Adaptive Bandwidth Notification Configuring Adaptive Bandwidth Notification ABN Protocols LLDP Remote Management Displaying Peer Status Protocols LLDP Advanced C...

Page 31: ...ation is planned for future release and the Sync menu does not appear Sub Menus For Further Information SyncE Regenerator Configuring SyncE Regenerator Sync Source Reserved for future use Outgoing Clock Reserved for future use 1588 TC Reserved for future use Table 6 IP 20 Web EMS Menu Hierarchy Quick Configuration Menu Sub Menus For Further Information Link Setup PIPE 1 0 Configuring a 1 0 Link Us...

Page 32: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 32 of 597 Section II Web EMS Configuration ...

Page 33: ...2 1 Assigning IP Addresses in the Network Before connection over the radio hop is established it is of high importance that you assign the IP 20 unit a dedicated IP address according to an IP plan for the total network See Changing the Management IP Address By default a new IP 20 unit has the following IP settings IP address 192 168 1 1 Subnet mask 255 255 255 0 Warning If the connection over the ...

Page 34: ...the initial settings before changing Note The IP 20 IP address as well as the password should be changed before operating the system See Changing the Management IP Address and Changing Your Password 1 Select Control Panel All Control Panel Items Network and Sharing Center 2 Click Change the adapter settings 3 Select Local Area Connection Properties Internet Protocol Version 4 TCP IP and set the fo...

Page 35: ...his requires a Ceragon Networks proprietary Ethernet cable This cable should be ordered from Ceragon Networks according to the following table Cables for Direct CPU Connection Product Cable Marketing Model Cable Description IP 20C and IP 20S IP 20_MIMO_Prot_ mng_spltr CABLE RJ45M TO 2xRJ45F 1 0M WITH GLANDS UV PROTECTED IP 20E IP 20_Mini MNG CBL CABLE MiniDP TO RJ45F 0 2M FOR FIELD DEBUG To log in...

Page 36: ... name and password User Name admin Password admin 7 Click Apply 8 After a connection is established you can view or configure the unit s IP address using the Web EMS See Changing the Management IP Address 2 4 Changing Your Password It is recommended to change your default Admin password as soon as you have logged into the system To change your password 1 Select Platform Security Access Control Cha...

Page 37: ...ch is configured in the system The root user password and instructions for changing this password are available from Ceragon Customer Support It is strongly recommended to change this password 2 5 Configuring In Band Management You can configure in band management in order to manage the unit remotely via its radio and or Ethernet interfaces Each IP 20C unit includes a pre defined management servic...

Page 38: ...e unit will receive communications whether they are sent to its IPv4 address or its IPv6 address 4 In the Subnet mask field enter the subnet mask 5 Optionally in the Default gateway field enter the default gateway address 6 Optionally in the IPv6 Address field enter an IPv6 address for the unit You can enter the address in IPv6 format in this field and or in IPv4 format in the IP Address field The...

Page 39: ... See Displaying Unit Inventory Each required feature and capacity should be purchased with an appropriate activation key It is not permitted to enable features that are not covered by a valid activation key In the event that the activation key enabled capacity and feature set is exceeded an Activation Key Violation alarm occurs and the Web EMS displays a yellow background and an activation key vio...

Page 40: ...a date code used for validation of the current activation key cipher Violation runtime counter hours In the event of an Activation Key Violation alarm this field displays the number of hours remaining in the 48 hour activation key violation grace period Sanction state If an Activation Key Violation alarm has occurred and the 48 hour activation key violation grace period has expired without the sys...

Page 41: ...umber an Activation Key Loading Failure event is sent to the Event Log When a legal activation key cipher is entered an Activation Key Loaded Successfully event is sent to the Event Log 2 7 4 Activating Demo Mode To activate demo mode 1 Select Platform Activation Key Activation Key Configuration The Activation Key Configuration page opens Figure 10 2 In the Demo admin field select Enable 3 Click A...

Page 42: ...the feature is allowed under the activation key that is currently installed in the unit Activation key violation status Indicates whether the system configuration violates the currently installed activation key with respect to this feature 2 8 Setting the Time and Date Optional Related Topics Configuring NTP IP 20 uses the Universal Time Coordinated UTC standard for time and date configuration UTC...

Page 43: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 43 of 597 Figure 12 Time Services Page 2 Configure the fields listed in Table 10 3 Click Apply ...

Page 44: ... relative to GMT This is used to offset the clock relative to GMT according to the global meridian location UTC Offset Minutes The required minutes offset positive or negative relative to GMT This is used to offset the clock relative to GMT according to the global meridian location Daylight Saving Start Time Month The month when Daylight Savings Time begins Day The date in the month when Daylight ...

Page 45: ...led Radio interfaces are enabled Note IP 20S and IP 20E units have a single radio interface To enable or disable interfaces 1 Select Platform Management Interface Manager The Interface Manager page opens displaying all of the system s traffic and management interfaces Figure 13 Interface Manager Page To enable or disable an individual interface 1 Select the interface in the Interface Manager table...

Page 46: ...ltiple interfaces 1 Select the interfaces in the Interface Manager table or select all the interfaces by selecting the check box in the top row 2 In the Multiple Selection Operation section underneath the Interface Manager Table select Admin status Up or Admin status Down Figure 15 Multiple Selection Operation Section Interface Manager Page 3 Click Apply Note The Operational Status field displays ...

Page 47: ... To configure the radio parameters 1 Select Radio Radio Parameters The Radio Parameters page opens For IP 20C units the Radio Parameters page initially displays a table as shown in Figure 16 For IP 20S units and IP 20E units a page appears similar to Figure 17 which shows an IP 20C page Figure 16 Radio Parameters Page IP 20C 2 For IP 20C units select the carrier in the Radio table see Figure 16 an...

Page 48: ... field set the transmission radio frequency in MHz ii In the RX Frequency MHz field set the received radio frequency in MHz iii Click Apply The system automatically calculates and displays the frequency separation in the TX to RX frequency separation MHz field based on the configured TX and RX frequencies iv Optionally select Set also remote unit to apply the frequency settings to the remote unit ...

Page 49: ... parameters in the Status parameters section see Viewing the Radio Status and Settings 2 11 Configuring the Radio MRMC Script s Related Topics Displaying MRMC Status Multi Rate Multi Constellation MRMC radio scripts define how the radio utilizes its available capacity Each script is a pre defined collection of configuration settings that specify the radio s transmit and receive levels link modulat...

Page 50: ...ed by the IP 20C and IP 20E For an up to date list of scripts supported by the IP 20C IP 20S and IP 20E in this release see the IP 20C IP 20S and the IP 20E Release Notes Figure 18 MRMC Symmetrical Scripts Page IP 20C ETSI Figure 19 MRMC Symmetrical Scripts Page IP 20E ETSI Figure 20 MRMC Symmetrical Scripts Page IP 20C FCC ...

Page 51: ...e page shown below Figure 21 MRMC Symmetrical Scripts Page Configuration 5 In the MRMC Script operational mode field select the ACM mode Fixed or Adaptive Fixed ACM mode applies constant Tx and Rx rates However unlike regular scripts with a Fixed ACM script you can specify a maximum profile to inhibit inefficient transmission levels In Adaptive ACM mode Tx and Rx rates are dynamic An ACM enabled r...

Page 52: ... Displays the script s adjacent channel polarization mode Latency Level Indicates whether the script is a normal or low latency script Symmetry Indicates that the script is symmetrical Normal Only symmetrical scripts are supported in the current release Standard Indicates whether the script is compatible with ETSI or FCC ANSI standards or both MRMC Script operational mode The ACM mode Fixed or Ada...

Page 53: ...10 2048 QAM Table 13 Available Radio Profiles IP 20E Profile Modulation Profile 0 BPSK Profile 1 QPSK Profile 2 8 QAM Profile 3 16 QAM Profile 4 32 QAM Profile 5 64 QAM Profile 6 128 QAM 2 12 Enabling ACM with Adaptive Transmit Power When planning ACM based radio links the radio planner attempts to apply the lowest transmit power that will perform satisfactorily at the highest level of modulation ...

Page 54: ... appears similar to Figure 17 which shows an IP 20C page 2 For IP 20C units select the carrier in the Radio table see Figure 16 and click Edit A separate Radio Parameters page opens The page is essentially identical to the IP 20E and IP 20S page except for the addition of a Radio location parameter Figure 22 Radio Parameters Page Per Carrier IP 20C 3 In the Adaptive TX power admin field select Ena...

Page 55: ... 20C or an IP 20S node to be FIPS compliant the unit must be FIPS compliant hardware A FIPS compliant IP 20C or IP 20S unit has a unique part number ending in the letters AF in the following format IP 20C AF IP 20S AF Note To display the part numbers of the hardware components of your IP 20 unit see Displaying Unit Inventory Special labels must be affixed to a FIPS compliant IP 20C or IP 20S unit ...

Page 56: ...he MD5 option for SNMPv3 is blocked After any system reset the length of time before users can log back into the system is longer than usual due to FIPS related self testing For a full list of FIPS requirements including software configuration requirements refer to the Ceragon IP 20 FIPS 140 2 Security Policy available upon request 2 14 Configuring Grouping Optional At this point in the configurat...

Page 57: ...on Proprietary and Confidential Page 57 of 597 2 15 Creating Service s for Traffic In order to pass traffic through the IP 20 you must configure Ethernet traffic services For configuration instructions see Configuring Ethernet Service s ...

Page 58: ...ction is only supported with IP 20C and IP 20S 3 1 System Configurations This section lists the basic system configurations and the IP 20 product types that support them as well as links to configuration instructions Table 14 System Configurations Configuration Supported Products Link to Configuration Instructions Multi Carrier ABC Multi Radio IP 20C Configuring Multi Carrier ABC Link Aggregation ...

Page 59: ...e of link is used to configure a node that functions as a repeater passing traffic between two other nodes See Configuring a 1 0 Repeater Link Using the Quick Configuration Wizard 2 0 Multi Carrier ABC Configures a 2 0 Multi Carrier ABC group consisting of an Ethernet interface or LAG and the two radio interfaces See Configuring a 2 0 Multi Carrier ABC Link Using the Quick Configuration Wizard For...

Page 60: ...r a LAG for the link Note To create a LAG click Create LAG The Create LAG Group page opens For instructions on creating LAG groups see Configuring Link Aggregation LAG 3 In the Radio Interface field select a radio interface for the link 4 In the Pipe Type field select the Attached Interface type for the service that will connect the radio and Ethernet interfaces Options are s tag A single S VLAN i...

Page 61: ...d RFU type 9 To mute the TX output of the RFU select On in the TX mute field To unmute the TX output of the RFU select Off 10 Click Next Page 3 of the 1 0 Quick Configuration wizard opens Figure 26 1 0 Quick Configuration Wizard Page 3 11 In the Script ID field select the MRMC script you want to assign to the radio For a full explanation of choosing an MRMC script see Configuring the Radio MRMC Sc...

Page 62: ...field is Maximum Profile Enter the maximum profile for the script in the Maximum Profile field See Configuring the Radio MRMC Script s 14 Click Next Page 4 of the 1 0 Quick Configuration wizard opens Figure 27 1 0 Quick Configuration Wizard Page 4 15 In the In Band Management field select Yes to configure in band management or No if you do not need in band management If you select Yes the Manageme...

Page 63: ...lete configuration of the link click Submit If you want to go back and change any of the parameters click Back After you click Submit the unit is reset 3 2 2 Configuring a 1 0 Repeater Link Using the Quick Configuration Wizard To configure a 1 0 repeater radio to radio link using the Quick Configuration wizard 1 Select Quick Configuration Link Setup PIPE 1 0 Repeater Page 1 of the 1 0 Repeater Qui...

Page 64: ...figuration Wizard Page 2 4 In the Radio 2 Interface field select the second radio interface for the link 5 In the Pipe Type field select the Attached Interface type for the service that will connect the radios Options are s tag A single S VLAN is classified into the service points dot1q A single C VLAN is classified into the service points Note For a full explanation of Ethernet Services service t...

Page 65: ... MHz field set the transmission radio frequency in MHz ii In the RX Frequency MHz field set the received radio frequency in MHz iii In the TX Level dBm field enter the desired TX signal level TSL The range of values depends on the frequency and RFU type iv To mute the TX output of the RFU select On in the TX mute field To unmute the TX output of the RFU select Off 8 Click Next Page 4 of the 1 0 Re...

Page 66: ...ofile to use according to the channel fading conditions iii Do one of the following If you selected Fixed in the Operational Mode field the next field is Profile Select the ACM profile for the radio in the Profile field If you selected Adaptive in the Operational Mode field the next field is Maximum Profile Enter the maximum profile for the script in the Maximum Profile field See Configuring the R...

Page 67: ...uick Configuration wizard opens This page displays the parameters you have selected for the link Figure 34 1 0 Repeater Quick Configuration Wizard Page 6 Summary Page 14 To complete configuration of the link click Submit If you want to go back and change any of the parameters click Back After you click Submit the unit is reset ...

Page 68: ...interface or a LAG for the group Note To create a LAG click Create LAG The Create LAG Group page opens For instructions on creating LAG groups see Configuring Link Aggregation LAG 3 In the Radio 1 Interface field select the first radio interface for the group Note The Number of Radio Interfaces field is read only 4 In the Pipe Type field select the Attached Interface type for the service that will...

Page 69: ...tion Page 6 In the Radio 2 Interface field select the second radio interface for the group 7 Click Next The Radio XPIC Configuration page opens If you want to set up an XPIC configuration select the radio pair For full instructions on configuring XPIC including antenna alignment instructions see Configuring XPIC Figure 37 2 0 Multi Carrier ABC Quick Configuration Wizard Radio XPIC Configuration Pa...

Page 70: ... radio parameters for each interface If you selected XPIC in the Radio XPIC Configuration page you configure the parameters for the group rather than the individual interfaces Figure 38 2 0 Multi Carrier ABC Quick Configuration Wizard Radio Parameters Configuration Page Figure 39 2 0 Multi Carrier ABC Quick Configuration Wizard Radio Parameters Configuration Page XPIC ...

Page 71: ...ge of values depends on the frequency and RFU type iv To mute the TX output of the RFU select On in the TX mute field To unmute the TX output of the RFU select Off 10 Click Next The Radio MRMC Script Configuration page opens You can configure the MRMC script parameters for each interface For an XPIC group you configure the parameters for the group rather than the individual interfaces Figure 40 2 ...

Page 72: ...nnel fading conditions iii Do one of the following If you selected Fixed in the Operational Mode field the next field is Profile Select the ACM profile in the Profile field If you selected Adaptive in the Operational Mode field the next field is Maximum Profile Enter the maximum profile for the script in the Maximum Profile field See Configuring the Radio MRMC Script s 12 Click Next The Management...

Page 73: ...s This page displays the parameters you have selected for the group Figure 43 2 0 Multi Carrier ABC Quick Configuration Wizard Summary Page 17 To complete configuration of the Multi Carrier ABC group click Submit If you want to go back and change any of the parameters click Back After you click Submit the unit is reset ...

Page 74: ...in the group while still behaving as a single Ethernet interface In Multi Carrier ABC mode traffic is dynamically divided among the carriers at the Layer 1 level without requiring Ethernet Link Aggregation Load balancing is performed regardless of the number of MAC addresses or the number of traffic flows During fading events which cause ACM modulation changes each carrier fluctuates independently...

Page 75: ...e a Multi Carrier ABC group 1 Select Radio Groups Multi Carrier ABC The Multi Carrier ABC page opens Figure 44 Multi Carrier ABC Group Page Empty 2 Click Create Group The first page of the Create ABC Group wizard opens Figure 45 Create ABC Group Wizard First Page 3 Optionally enter a descriptive name for the group in the Group Name field ...

Page 76: ...succeed unless Radio slot 2 port 1 is selected first and Radio slot 2 port 2 is selected second 6 Click Next The next page of the Create Group wizard opens 7 In the Member 2 field select a radio interface 8 Click Next A summary page opens Figure 47 Create ABC Group Wizard Finish Page 9 Click Submit A message appears indicating whether or not the operation was successful 10 Click Close to close the...

Page 77: ... the Remove Member field Note Although you may select the Radio members in any order you wish member removal will not succeed unless Radio slot 2 port 1 is removed first and Radio slot 2 port 2 is removed second 3 Click Apply 4 Repeat these steps to remove additional members from the group 3 3 3 Deleting a Multi Carrier ABC Group To delete a Multi Carrier ABC group 1 Select Radio Groups Multi Carr...

Page 78: ...nterfaces in order to create a wider aggregate link For example LAG can be used to create a 4 Gbps channel You can create up to four LAG groups The following restrictions exist with respect to LAG groups Only physical interfaces including radio interfaces not logical interfaces can belong to a LAG group Interfaces can only be added to the LAG group if no services or service points are attached to ...

Page 79: ... assigned to a LAG group appear in the dropdown list 4 In the LAG Member 1 field select an interface to assign to the LAG group Only interfaces not already assigned to a LAG group appear in the dropdown list 5 Click Next A new Create LAG Group page opens Figure 50 Create LAG Group Page 2 6 In the LAG Member 2 field select an additional interface to assign to the LAG Group 7 To add additional inter...

Page 80: ...e reason 3 4 2 2 Editing a LAG Group To edit an existing LAG group 1 Select Ethernet Interfaces Groups LAG The LAG page opens 2 Select the LAG group you want to edit in the Link Aggregation table 3 Click Edit underneath the Link Aggregation table The Link Aggregation Edit page opens Figure 52 Link Aggregation Edit Page 4 Do one or both of the following To remove an interface from the LAG Group sel...

Page 81: ...ink Aggregation table or select all the LAG groups by selecting the check box in the top row 2 Click Delete underneath the Link Aggregation table 3 5 Configuring XPIC Note This option is only relevant for IP 20C units This section includes XPIC Overview Configuring the Antennas Configuring the Radio Carriers Creating an XPIC Group 3 5 1 XPIC Overview Cross Polarization Interference Canceller XPIC ...

Page 82: ...Modem XPI field of the Radio Parameters page in the Web EMS See Viewing the Radio Status and Settings 6 The XPI should be at least 25dB If it is not you should adjust the OMT assembly on the back of the antenna at one side of the link until you achieve the highest XPI which should be no less than 25dB Adjust the OMT very slowly in a right left direction OMT adjustment requires very fine movements ...

Page 83: ...C Script s Note XPIC support is indicated by an X in the script name For example mdN_A2828X_111_1205 is an XPIC enabled script mdN_A2828N_130_100 is not an XPIC enabled script For a list of XPIC support enabled scripts refer to the most recent FibeAir IP 20C Release Notes 3 In the XPIC page create an XPIC group that consists of the two RMCs that will be in the XPIC group See Creating an XPIC Group...

Page 84: ...escription For a full explanation of 1 1 HSB radio protection support in IP 20S refer to the IP 20S Technical Description 3 6 2 Configuring HSB Radio Protection You must perform the initial configuration of a 1 1 or 2 2 HSB system using a splitter cable for each unit to provide a management connection to each unit For instructions on preparing and connecting the splitter cables refer to the Instal...

Page 85: ...en the system returns online all management must be performed via the Active unit using the IP address you defined for that unit The IP address you defined for the unit which is now the Standby unit is no longer valid and the management port of the Standby unit becomes non operational Management of the Standby unit is performed via the Active unit via the cable between the two MIMO Prot ports on t...

Page 86: ...n the Active unit such as setting the frequency assigning MRMC scripts unmuting the radio and setting up radio groups such as XPIC or Multi Carrier ABC Multi Radio ii Perform all necessary Ethernet configurations on the Active unit such as defining Ethernet services iii In the Unit Redundancy page click Copy to Mate to copy the configuration of the Active unit to the Standby unit Confirm the actio...

Page 87: ...on is necessary other than the configuration described above To enable the second radio carrier on both units use the Interface Manager page see Figure 13 The following figure shows the Interface Manager page with both radio carriers enabled Figure 56 Interface Manager Page Both Radio Carriers Enabled 3 6 4 Viewing the Configuration of the Standby unit You can view the settings of the standby unit...

Page 88: ...dio TX mute in the TX mute field of the Edit Radio Parameters window Refer to Configuring the Radio Parameters Clearing the Radio and RMON counters in the TX mute field of the Counters Page Refer to Displaying and Clearing Defective Block Counters Setting the activation key configuration in the Activation Key and Demo admin fields of the Activation Key Configuration Page see Configuring the Activa...

Page 89: ...or HSB radio protection according to their priority with the highest priority triggers listed first 1 Loss of active unit 2 Lockout 3 Radio Ethernet interface failure 4 Manual switch At any point you can manually switch to the Standby unit provided that the highest protection fault level in the Standby unit is no higher than the highest protection fault level on the Active unit To manually switcho...

Page 90: ...a MIMO or Space Diversity Group 3 7 1 MIMO and Space Diversity Overview Line of Sight LoS Multiple Input Multiple Output MIMO achieves spatial multiplexing by creating an artificial phase de correlation by deliberate antenna distance at each site in deterministic constant distance At each site in an LoS MIMO configuration data to be transmitted over the radio link is split into two bit streams MIM...

Page 91: ... you must enable MIMO Mate Management Access in order to manage both units via in band management When MIMO Mate Management Access is enabled the two units exchange incoming management packets ensuring that all management data is received by both units Note that MIMO Mate Management Access should only be enabled if both of the following conditions exist In band management External switch using LAG...

Page 92: ... 2 Space Diversity select 2 0 Space Diversity after setting up the hardware configuration for 2 2 Space Diversity See 2 2 Space Diversity 4 Click Next The Create MIMO Group page is updated and displays your system configuration Figure 59 Create MIMO Group Page 2 5 Click Submit to create the MIMO or Space Diversity group Click Close to cancel and close the window 6 After creating the group you must...

Page 93: ...p The MIMO Edit page opens Figure 60 MIMO Edit Page 3 In the Admin state field Select Enable to enable the MIMO or Space Diversity configuration Select Disable to disable the MIMO or Space Diversity configuration 4 Click Apply 3 7 5 Setting the Role of a MIMO or Space Diversity Group For 4x4 MIMO configurations and 2 2 Space Diversity configurations you must set the role of the group to Master or ...

Page 94: ...eld 5 Click Apply 3 7 6 Resetting MIMO In hardware failure scenarios MIMO 4x4 provides a resiliency mechanism that enables the link to continue functioning as a 2 0 XPIC link To restore full MIMO operation the faulty equipment must be replaced The replacement equipment must be pre configured to the same configuration as the equipment being replaced Once the new equipment has been properly installe...

Page 95: ...anually To calculate it manually you must measure the following RSL levels per receiver 1 Mute all remote transmitters except the transmitter for the link you want to measure and measure the local RSL level RSL_Wanted 2 Mute all remote transmitters except the same polarization interferer and measure the local RSL2 RSL_Int The MMI is equal to RSL_Wanted RSL_Int To view MMI and XPI Levels 1 Select R...

Page 96: ...of 99 XPI Cross Polarization Interference This is only relevant in 4x4 configurations where each unit operates in dual polarization XPIC mode The XPI value should be at least 25 dB For further information see Configuring XPIC 3 7 8 Deleting a MIMO or Space Diversity Group You can delete a MIMO or Space Diversity Group To delete a MIMO or Space Diversity Group 1 Before deleting a MIMO or Space Dive...

Page 97: ...single radio carrier mode you must perform the following steps 1 Verify that XPIC is disabled See Configuring XPIC 2 Disable Multi Carrier ABC as described in Deleting a Multi Carrier ABC Group 3 Disable one of the two radio interfaces as described in Enabling the Interfaces Interface Manager 4 Mute the disabled radio interface as described in Configuring the Radio Parameters ...

Page 98: ...NMP Configuring Trap Managers Installing and Configuring an FTP or SFTP Server Upgrading the Software Backing Up and Restoring Configurations Setting the Unit to the Factory Default Configuration Performing a Hard Cold Reset Configuring Unit Parameters Configuring NTP Displaying Unit Inventory Related topics Setting the Time and Date Optional Enabling the Interfaces Interface Manager Uploading Uni...

Page 99: ...Local The Local Networking Configuration page opens Figure 64 Local Networking Configuration Page 2 In the IP address Family field select the IP protocol the unit will use when initiating communications The options are IPv4 or IPv6 4 2 Configuring the Remote Unit s IP Address You can configure the IP address of a remote unit To configure the IP address of a remote unit 1 Select Platform Management...

Page 100: ... Remote Networking Configuration Page IP 20C Figure 66 Remote Networking Configuration Page IP 20S and IP 20E 2 For IP 20C units select the carrier in the Radio table see Figure 65 and click Edit A separate Remote IP Configuration page opens The page is identical to the IP 20C and IP 20S page ...

Page 101: ... 6 Optionally in the Remote IPv6 Address field enter an IPv6 address for the remote unit You can enter the address in IPv6 format in this field and or in IPv4 format in the IP Address field The unit will receive communications whether they are sent to its IPv4 address or its IPv6 address 7 If you entered an IPv6 address enter the IPv6 prefix length in the Remote IPv6 Prefix Length field 8 Optional...

Page 102: ...d and the Remote IPv6 Default Gateway as desired 4 3 Configuring SNMP P 20C IP 20S and IP 20E support SNMP v1 V2c and v3 You can set community strings for access to IP 20 units IP 20C IP 20S and IP 20E support the following MIBs RFC 1213 MIB II RMON MIB Proprietary MIB Access to the unit is provided by making use of the community and context fields in SNMPv1 and SNMPv2c SNMPv3 respectively To conf...

Page 103: ... community string for the SNMP read community 4 In the SNMP Write Community field enter the community string for the SNMP write community 5 In the SNMP Trap Version field select V1 V2 or V3 to specify the SNMP version Note The SNMP MIB Version field displays the current SNMP MIB version the unit is using 6 In the V1V2 Blocked field select Yes if you want to block SNMPv1 and SNMPv2 access so that o...

Page 104: ...f 597 To add an SNMP user 1 Select Platform Management SNMP V3 Users The V3 Users page opens Figure 69 V3 Users Page 2 Click Add The V3 Users Add page opens Figure 70 V3 Users Add Page 3 Configure the SNMP V3 Authentication parameters as described below 4 Click Apply then Close ...

Page 105: ...tions are None SHA MD5 Encryption Privacy Mode Select an encryption privacy protocol for the user Options are None DES AES Access Mode Select an access permission level for the user Options are Read Write User Read Only User 4 4 Configuring Trap Managers You can configure trap forwarding parameters by editing the Trap Managers table Each line in the Trap Managers table displays the setup for a man...

Page 106: ...itiating Communications IPv6 Address If the IP address family is configured to be IPv6 enter the destination IPv6 address Traps will be sent to this IP address See Defining the IP Protocol Version for Initiating Communications Description Enter a description of the trap manager optional Admin Select Enable or Disable to enable or disable the selected trap manager Community Enter the community stri...

Page 107: ... you are using Note For FTP it is recommended to use FileZilla_Server software that can be downloaded from the web freeware For SFTP it is recommended to use SolarWinds SFTP SFCP server freeware If you are using IPv6 to perform the operation make sure to use FileZilla version 0 9 38 or higher to ensure IPv6 support If you are using another type of FTP or SFTP server make sure the application versi...

Page 108: ...TP SFTP folder For example in FileZilla Server i From the Edit menu select Users ii In the Users window select Shared folders iii Underneath the Shared folders section click Add and browse for your shared FTP folder iv Select the folder and click OK v In the Shared folders section select your shared FTP folder vi In the Files and Directories sections select all of the permissions vii Click Set as ...

Page 109: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 109 of 597 Figure 74 FileZilla Server Shared Folder Setup ...

Page 110: ...rently installed and running on the system modules 1 Select Platform Software Versions The Versions page opens For a description of the information provided in the Versions page see Table 17 Versions Page Columns Figure 75 Versions Page Table 17 Versions Page Columns Parameter Definition Package Name The name of the software package Target Device The specific component on which the software runs R...

Page 111: ...bundle to the files currently installed in the IP 20 and its components so that only files that need to be updated are actually downloaded A message is displayed for each file that is actually downloaded Note When downloading an older version all files in the bundle may be downloaded including files that are already installed Software bundles can be downloaded via FTP or SFTP After the software do...

Page 112: ...family is configured to be IPv4 enter the IPv4 address of the PC or laptop you are using as the FTP SFTP server in the Server IPv4 address field See Defining the IP Protocol Version for Initiating Communications 9 If the IP address family is configured to be IPv6 enter the IPv6 address of the PC or laptop you are using as the FTP SFTP server in the Server IPv6 Address field See Defining the IP Pro...

Page 113: ...ess even if Download Success is displayed in the Download status field until the unit displays the message No new software modules found In case of failure wait at least 30 minutes and repeat the software download 15 Click Install The installation begins You can view the status of the installation in the Download Install Status Parameters section of the Download Install Download Install page See T...

Page 114: ...ll status The status of any pending software installation Possible values are Ready The default value which appears when no installation is in progress Verifying installation files The system is verifying the files to be installed Installation in progress The installation files have been verified and the installation is in progress If an error occurs during the installation an appropriate error me...

Page 115: ...allation For example in Figure 77 the timer is set for two hours after the timer was configured 02 00 4 Click Apply 5 Select Platform Software Download Install The Download Install page opens Figure 76 6 In the Timed Installation field select Yes 7 Click Apply 8 Click Install A confirmation window opens 9 Click OK The Download Installation page is refreshed to include the following fields Time to ...

Page 116: ... units You can also backup and save configuration files Configuration files can only be copied between units of the same type i e IP 20C to IP 20C IP 20S to IP 20S and IP 20E to IP 20E This section includes Configuration Management Overview Viewing Current Backup Files Setting the Configuration Management Parameters Exporting a Configuration File Importing a Configuration File Deleting a Configura...

Page 117: ...may want to use one restore point to keep a last good configuration another to import changes from an external server and the third to store the current configuration You can apply a configuration file to the system from any of the restore points 4 7 2 Viewing Current Backup Files The system provides three restore points to manage different configuration files Each restore point contains a single ...

Page 118: ...en from the Name field in the Unit Parameters page See Configuring Unit Parameters Valid Reserved for future use 4 7 3 Setting the Configuration Management Parameters When importing and exporting configuration files the IP 20 functions as an FTP or SFTP client You must install FTP or SFTP server software on the PC or laptop you are using to perform the import or export For details see Installing a...

Page 119: ...he IP address family is configured to be IPv4 enter the IPv4 address of the PC or laptop you are using as the FTP server in the Server IP address field See Defining the IP Protocol Version for Initiating Communications 8 If the IP address family is configured to be IPv6 enter the IPv6 address of the PC or laptop you are using as the FTP server in the IPv6 Server Address field See Defining the IP P...

Page 120: ...Click Apply to save your settings 4 7 4 Exporting a Configuration File You can export a saved configuration file from one of the system s three restore points to a PC or laptop To export a configuration file 1 Verify that you have followed all the steps in Setting the Configuration Management Parameters 2 Select Platform Configuration Configuration Management The Configuration Management page open...

Page 121: ...value which appears when no import or export is in progress File in Transfer The file import is in progress If an error occurs during the import or export an appropriate error message is displayed in this field When the import or export is complete one of the following status indications appears Succeeded Failure The next time the system is reset the File Transfer status field returns to Ready Aft...

Page 122: ...ppropriate error message is displayed in this field When the backup is complete one of the following status indications appears Succeeded Failure The next time the system is reset the Backup file creation status field returns to Ready 4 7 8 Restoring a Saved Configuration You can replace the current configuration with any configuration file saved to one of the system s three restore points by rest...

Page 123: ... On the PC or laptop unzip the file Configuration_files zip 4 Edit the cli_script txt file using clish commands one per line 5 Save and close the cli_script txt file and add it back into the Configuration_files zip file 6 Import the updated Configuration_files zip file back into the unit See Importing a Configuration File 7 Restore the imported configuration file See Restoring a Saved Configuratio...

Page 124: ...t configuration while retaining the unit s IP address settings and logs To restore the factory default settings 1 Select Platform Management Set to Factory Default The Set to Factory Default page opens Figure 81 Set to Factory Default Page 2 Click Set to Factory Default The unit is restored to its factory default settings This does not change the unit s IP address or FIPS configuration ...

Page 125: ...97 4 9 Performing a Hard Cold Reset To initiate a hard cold reset on the unit 1 Select Platform Management Reset The Reset page opens Figure 82 Reset Page 2 Click Reset 3 A prompt appears asking if you want to proceed with the reset Click Yes to initiate the reset The unit is reset ...

Page 126: ...escription Descriptive information about the unit This information is used for debugging and should include information such as the unit type System up time The time since the system was last reinitialized Contact person The name of the person to be contacted if and when a problem with the system occurs optional Location The actual physical location of the node or agent optional Longitude The unit...

Page 127: ...nfigure the NTP Parameters 1 Select Platform Management NTP Configuration The NTP Configuration page opens Figure 84 NTP Configuration Page 2 In the Admin field select Enable 3 In the NTP version field select the NTP version you want to use Options are NTPv3 and NTPv4 NTPv4 provides interoperability with NTPv3 and with SNTP 4 In the NTP server IP address field enter the IP address of the NTP serve...

Page 128: ... which the NTP client is currently locked Client lock status Indicates if the NTP client is locked on a remote NTP server Possible values are LOCK The NTP client is locked on the remote server LOCAL The NTP client is locked on the local system clock free running clock N A The NTP client is not locked on any clock 4 12 Displaying Unit Inventory To view the unit s part number and serial number 1 Sel...

Page 129: ...i Carrier ABC Configuring XPIC Configuring HSB Radio Protection Configuring MIMO and Space Diversity Operating an IP 20C in Single Radio Carrier Mode Performing Radio Loopback 5 1 Viewing the Radio Status and Settings You can configure the radios and display the radio parameters in the Radio Parameters page Note For instructions how to configure the radio parameters see Configuring the Radio Param...

Page 130: ...7 Figure 86 Radio Parameters Page IP 20C 2 For IP 20C units select the carrier in the Radio table see Figure 86 and click Edit A separate Radio Parameters page opens The page is essentially identical to the IP 20E and IP 20S page except for the addition of a Radio location parameter ...

Page 131: ...Radio Parameters Page Per Carrier IP 20C Table 22 lists and describes the parameters in the Radio table of the IP 20C Radio Parameters page and the Status parameters section of the Radio Parameters configuration page Table 22 Radio Status Parameters Parameter Description Type The RF module type ...

Page 132: ...carrier in dBm RX Level dBm The actual measured RX signal level RSL of the carrier in dBm Modem MSE dB The MSE Mean Square Error of the RX signal measured in dB A value of 99 00 dB means that the modem is not locked Modem XPI dB The XPI Cross Polarization Interference level measured in dB Note Only relevant for IP 20C units Defective Blocks The number of defective radio blocks that have been count...

Page 133: ...re 88 Remote Radio Parameters Page IP 20C Figure 89 Remote Radio Parameters Page IP 20S and IP 20E 2 For IP 20C units select the carrier in the Remote Radio table see Figure 88 and click Edit A separate Remote Radio Parameters page opens The page is identical to the IP 20E and IP 20S page ...

Page 134: ...fies the carrier Remote Radio Location Read only Identifies the location of the remote radio Local Remote Channel Operational Status Read only The operational status of the active in a protection configuration remote channel Remote Receiver Signal Level Read only The Rx level of the remote radio in dBm Remote Most Severe Alarm Read only The level of the most severe alarm currently active on the re...

Page 135: ... other side of the link Without ATPC if loss of frame occurs the system automatically increases its transmit power to the configured maximum This may cause a higher level of interference with other systems until the failure is corrected To enable and configure ATPC and display ATPC settings 1 Select Radio ATPC The ATPC page opens For IP 20C units the Radio Parameters page initially displays a tabl...

Page 136: ...override state 5 4 Configuring Header De Duplication and Frame Cut Through Note Header De Duplication is supported for IP 20C and IP 20S For IP 20E Header De Duplication is planned for future release Header De Duplication enables operators to significantly improve Ethernet throughout over the radio link without affecting user traffic Header De Duplication can be configured to operate on various la...

Page 137: ...wn in Figure 93 For IP 20S units a page appears similar to Figure 94 which shows an IP 20C page Figure 93 Radio Ethernet Interface Configuration Page IP 20C 2 For IP 20C units select the carrier in the Radio Ethernet and Compression table see Figure 93 and click Edit A separate Radio Ethernet Interface Configuration page opens The page is essentially identical to the IP 20E and IP 20S page 3 Click...

Page 138: ...carrying GTP or GRE frames Tunnel Layer3 Header De Duplication operates on Layer 2 Layer 3 and on the Tunnel and T 3 layers for packets carrying GTP or GRE frames Tunnel Layer4 Header De Duplication operates on Layer 2 Layer 3 and on the Tunnel T 3 and T 4 layers for packets carrying GTP or GRE frames 6 Click Apply then Close Note The Utilization threshold field is not applicable 5 4 1 Viewing Hea...

Page 139: ...e Counters Page IP 20C Figure 96 Radio Ethernet Interface Counters Page IP 20S and IP 20E 2 For IP 20C units select the carrier in the Header Compression Counters table Figure 95 and click View A separate Radio Ethernet Interface Configuration page opens The page is essentially identical to the IP 20E and IP 20S page ...

Page 140: ...ace Counters Fields Parameter Description Interface Location Identifies the radio interface Header Compression Counters TX bytes before enhanced HC Bytes on the TX side before Header De Duplication TX compressed bytes Bytes on the TX side that were compressed by Header De Duplication TX frames before enhanced HC Frames on the TX side before Header De Duplication TX frames compressed by enhanced HC...

Page 141: ...that are active on the TX side Number of active flows of user selected flow type Not supported Ethernet Port Counters Port RX good bytes The number of good bytes received on the port since the last time the Radio Ethernet Interface counters were cleared Port RX good frames The number of good frames received on the port since the last time the Radio Ethernet Interface counters were cleared Port TX ...

Page 142: ...ter key can also be generated by the system upon user command The master key is a 32 byte symmetric encryption key The same master key must be manually configured on both ends of the encrypted link The session key is a 32 byte symmetric encryption key used to encrypt the actual data Each link uses two session keys one for each direction For each direction the session key is generated by the transm...

Page 143: ... Encryption Edit page opens Figure 99 Payload Encryption Edit Page 3 In the Admin Mode field select AES 256 to enable payload encryption To disable payload encryption select Disable 4 Configure the master key by doing one of the following Enter a master key in the Master Key field You must enter between 8 and 32 ASCII characters Click Generate key to generate a master key automatically ...

Page 144: ...s of the link The link becomes non valid and traffic stops being forwarded When you enter a master key or when the master key is automatically generated the key is hidden behind dots To copy the master key you must display the key To display the master key click Show Key A new Master key field appears displaying the master key You can copy the key to the clipboard from this field Figure 100 Payloa...

Page 145: ...hich certain PMs are counted such as the number of seconds in which the configured threshold RX and TX levels are exceeded This also enables you to define the levels at which certain alarms are triggered To configure the radio thresholds 1 Select Radio Radio Thresholds The Radio Thresholds page opens Figure 101 Radio Thresholds Page 2 In the Excessive BER admin field select Enable to enable excess...

Page 146: ...counting exceeded seconds if the RSL is below this level RX Level Threshold 2 dBm Specify a second threshold for counting exceeded seconds if the RSL is below this level TX Level Threshold dBm Specify the threshold for counting exceeded seconds if the TSL is below this level MSE PM Threshold dB Specify the modem MSE Mean Square Error threshold for calculating MSE Exceed Threshold seconds XPI PM Th...

Page 147: ... MRMC status parameters Note To display the same parameters for an individual radio in a separate page select the radio in the MRMC script status table and click View Table 26 MRMC Status Parameters Parameter Definition Radio Location Identifies the carrier Slot 2 port 1 or Slot 2 port 2 Note Only relevant for IP 20C units TX profile The current TX profile TX QAM The current TX modulation TX bit r...

Page 148: ...PM Statistics MRMC The MRMC PM Report page opens Figure 104 MRMC PM Report Page 2 For the IP 20C In the Port field select the port that holds the radio for which you want to display PMs 3 In the Interval Type field To display reports in 15 minute intervals select 15 minutes To display reports in daily intervals select 24 hours Table 27 describes the MRMC PMs Note To display the same parameters for...

Page 149: ...ughput Mbps delivered during the interval Integrity Indicates whether the values received at the time and date of the measured interval are reliable An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time 5 6 4 Displaying and Clearing Defective Block Counters The Counters page displays the number of blocks in which err...

Page 150: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 150 of 597 Figure 105 Counters Page IP 20C b ...

Page 151: ...re 106 Counters Page IP 20S and IP 20E 2 For IP 20C units you can select the carrier in the Radio table see Figure 105 and click View to display a page for that carrier A separate Counters page opens Figure 107 Counters Page Per Carrier IP 20C 3 To clear the counters click Clear Counters ...

Page 152: ...ignal Level PM Report Page 2 For the IP 20C in the Port field select the port that holds the radio for which you want to display PMs 3 In the Interval Type field To display reports in 15 minute intervals select 15 minutes To display reports in daily intervals select 24 hours Table 28 describes the Signal Level PMs Note To display the same parameters for a specific interval in a separate page selec...

Page 153: ...e interval TSL thresholds are configured in the Radio Thresholds page See Configuring Radio Thresholds RSL exceed threshold1 seconds The number of seconds the measured RSL exceeded RSL threshold 1 during the interval RSL thresholds are configured in the Radio Thresholds page See Configuring Radio Thresholds RSL exceed threshold2 seconds The number of seconds the measured RSL exceeded RSL threshold...

Page 154: ...Note To display the same parameters for a specific interval in a separate page select the interval in the Modem BER PM table and click View Table 29 Modem BER Aggregate PMs Parameter Definition Interval For 24 hour intervals displays the date of the interval For 15 minute intervals displays the date and ending time of the interval ES Displays the number of seconds in the measuring interval during ...

Page 155: ...t that time 5 6 7 Displaying Modem MSE PMs To display modem MSE Minimum Square Error PMs per radio 1 Select Radio PM Statistics MSE The MSE PM report page opens Figure 110 MSE PM Report Page 2 For the IP 20C in the Port field select the port that holds the radio for which you want to display PMs 3 In the Interval Type field To display reports in 15 minute intervals select 15 minutes To display rep...

Page 156: ...ds the MSE exceeded the MSE PM threshold during the interval The MSE PM is configured in the Radio Thresholds page See Configuring Radio Thresholds Integrity Indicates whether the values received at the time and date of the measured interval are reliable An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time 5 6 8 Dis...

Page 157: ... was below the threshold during the interval XPI thresholds are configured in the Radio Thresholds page See Configuring Radio Thresholds Integrity Indicates whether the values received at the time and date of the measured interval are reliable An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time 5 6 9 Displaying Tra...

Page 158: ...lay reports in 15 minute intervals select 15 minutes To display reports in daily intervals select 24 hours To set the thresholds for capacity and throughput PMs 1 Select Threshold The Ethernet Radio Capacity Throughput Threshold page opens Figure 113 Ethernet Radio Capacity and Throughput Threshold Page 2 Enter the capacity and throughput thresholds you want in Mbps The range of values is 0 to 429...

Page 159: ...during the measured time interval Seconds exceeding Threshold Displays the number of seconds during the measured time interval during which the L1 bandwidth exceeded the configured capacity threshold Peak throughput Mbps Displays the highest throughput in Mbps that occurred for the selected radio during the measured time interval Average throughput Mbps Displays the average throughput in Mbps for ...

Page 160: ...The Utilization PM report page opens Figure 114 Utilization PM Report Page 2 For the IP 20C in the Port field select the port that holds the radio for which you want to display PMs 3 In the Interval Type field To display reports in 15 minute intervals select 15 minutes To display reports in daily intervals select 24 hours To set the thresholds for utilization PMs 1 Select Threshold The Utilization...

Page 161: ...ization of the radio capacity that occurred for the selected radio or group during the measured time interval Average utilization Indicates the average utilization of the radio capacity for the selected radio or group during the measured time interval Seconds exceeding Threshold Displays the number of seconds during the measured time interval during which the L1 bandwidth exceeded the configured u...

Page 162: ...at holds the radio for which you want to display PMs 3 In the Interval Type field To display reports in 15 minute intervals select 15 minutes To display reports in daily intervals select 24 hours Table 34 describes the capacity and throughput PMs Note To display the same parameters for a specific interval in a separate page select the interval in the PM table and click View ...

Page 163: ... the interval For 15 minute intervals displays the date and ending time of the interval FER Displays the frame error rate during the measured time interval Integrity Indicates whether the values received at the time and date of the measured interval are reliable An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time ...

Page 164: ...ernet Services The Ethernet Services Page Adding an Ethernet Service Editing a Service Deleting a Service Enabling Disabling or Deleting Multiple Services Note When setting multiple services to Reserve state make sure to avoid setting the management service to Reserve state Viewing Service Details Configuring Service Points 6 1 1 Ethernet Services Overview Users can define up to 64 Ethernet servic...

Page 165: ...low these guidelines Use the same Service ID for all service fragments along the path of the service Do not re use the same Service ID within the same region A region is defined as consisting of all IP 20 devices having Ethernet connectivity between them Use meaningful EVC IDs Give the same EVC ID service name to all service fragments along the path of the service Do not reuse the same EVC ID with...

Page 166: ...network element s behavior but is used by the NMS for topology management EVC description The Ethernet Virtual Connection EVC description This parameter does not affect the network element s behavior but is used by the NMS for topology management Admin Indicates whether the service is enabled Operational or disabled Reserved You can configure services for later use by defining the service as Reser...

Page 167: ...a text description of the service up to 64 characters This parameter does not affect the network element s behavior but is used by the NMS for topology management 7 In the Admin field select one of the following options Operational The service is functional Reserved The service is disabled until this parameter is changed to Operational In this mode the service occupies system resources but is unab...

Page 168: ... service is not modified by the service s default CoS 11 Click Apply then Close to close the Ethernet Services Add page 12 Add service points You must add service points to the service in order for the service to carry traffic See Configuring Service Points 6 1 5 Editing a Service To edit a service 1 Select Ethernet Services The Ethernet Services page opens Figure 117 2 Select the service in the S...

Page 169: ...elect Reserved and click Apply To delete the selected services select Delete underneath the Ethernet Services Configuration Table Before deleting a service you must delete any service points attached to the service as described in Deleting a Service Point Figure 119 Multiple Selection Operation Section Ethernet Services Note When setting multiple services to Reserve state make sure to avoid settin...

Page 170: ...ther a Service Access Point SAP or a Service Network Point SNP A Point to Point service can also use Pipe service points An SAP is equivalent to a UNI in MEF terminology and defines the connection of the user network with its access points SAPs are used for Point to Point and Multipoint traffic services An SNP is equivalent to an NNI or E NNI in MEF terminology and defines the connection between t...

Page 171: ...he Ethernet Services Configuration table 3 Click Service Points The Ethernet Service Points page opens Figure 120 Ethernet Service Points Page You can choose to display the following sets of attributes by selecting the appropriate button above the SP Attributes table General See Ethernet Service Points General SP Attributes Table Ingress See Ethernet Service Points Ingress Attributes Egress See Et...

Page 172: ...oints on a single logical interface You cannot configure both SAPs and SNPs on the same logical interface You can configure both SAPs or SNPs on the same logical interface as a MNG service point If you configure a Pipe service point on an interface you cannot configure an SAP SNP or another Pipe service point on the same interface You can however configure an MNG service point on the same interfac...

Page 173: ...S in the Attached Interface Type field select the S VLAN value to classify into the service point 1 4094 or select Untagged You can then add multiple C VLANs via the Attach VLAN option See Attaching VLANs Table 37 describes the available Attached Interface Types Table 37 Attached Interface Types Attached Interface Type Types of Frames Available for Service Point Types dot1q A single C VLAN is clas...

Page 174: ...service point optional The Service Point Name can be up to 20 characters Service point type The service point type Options are SAP Service Access Point SNP Service Network Point MNG Management service point PIPE Pipe service point Learning admin Determines whether MAC address learning for incoming frames is enabled Enable or disabled Disable When enabled the service point learns the source MAC add...

Page 175: ...through the service point This decision can be overwritten at the service level Possible values are 0 to 7 Ethernet Service Points Egress Attributes Select Egress in the Ethernet Service Points page to display the Ethernet Service Points Egress Attributes table Table 39 describes the parameters displayed in the General SP Attributes table Figure 122 Ethernet Service Points Page Egress Attributes T...

Page 176: ... whatever value might have been re assigned by the interface service point or service or whatever value results from marking see Marking admin below S Vlan CoS preservation Determines whether the original S VLAN CoS value is preserved or restored for frames egressing from the service point If S VLAN CoS preservation is enabled the S VLAN CoS value of frames egressing the service point is the same ...

Page 177: ...for the relevant outer VLAN are both set to Enable re marking is not performed If Marking admin and CoS preservation for the relevant outer VLAN are both set to Disable re marking is applied but only according to the values defined for Green frames in the 802 1Q and 802 1AD marking tables Service Bundle ID This can be used to assign one of the available service bundles from the H QoS hierarchy que...

Page 178: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 178 of 597 5 Click Add The Ethernet Service Points Add page opens Figure 123 Ethernet Service Points Add Page ...

Page 179: ... Figure 120 4 Select the relevant service point in the Ethernet Services Points General SP Attributes table 5 Click Edit The Ethernet Service Points Edit page opens The Ethernet Service Points Edit page is similar to the Ethernet Service Points Add page Figure 123 You can edit any parameter that can be configured in the Add Service Point page except Service Point ID Service Point Type and the Gene...

Page 180: ... point To add multiple C VLANs 1 Select Ethernet Services The Ethernet Services page opens Figure 117 2 Select the relevant service in the Ethernet Services Configuration table 3 Click Service Points The Ethernet Service Points page opens Figure 120 4 Select the relevant service point in the Ethernet Services Points General SP Attributes table 5 Click Attached VLAN The Attached VLAN List page open...

Page 181: ...nt C Vlan Encapsulation Select the C VLAN you want to add to the service point S Vlan Encapsulation Read only If the Attached Interface Type for the service point is Bundle S this field displays the S VLAN encapsulation selected when the service point was created If the Attached Interface Type for the service point is Bundle C this field is inactive CoS Overwrite Valid If you want to assign a spec...

Page 182: ...in the C VLAN Encapsulation field This Color overrides the Color decision made at the interface level However if the service point or service are configured to apply their own Color that decision overrides the decision made here If CoS Overwrite Valid is set to false this parameter has no effect To edit a VLAN Classification table entry select the entry in the VLAN Classification table and click E...

Page 183: ...RU Permitted values are 64 to 9612 The default value is 2000 Frames that are larger than the global MRU will be discarded 3 In the S VLAN Ether type field select the S VLAN Ethertype This defines the ethertype recognized by the system as the S VLAN ethertype Options are 0x8100 0x88A8 0x9100 and 0x9200 The default value is 0x88A8 Note The C VLAN Ethertype is set at 0x8100 and cannot be modified 4 C...

Page 184: ...bric In some cases a physical interface corresponds to a logical interface on a one to one basis For some features such as LAG a group of physical interfaces can be joined into a single logical interface The basic interface characteristics such as media type port speed duplex and auto negotiation are configured for the physical interface via the Physical Interfaces page Ethernet services QoS and O...

Page 185: ...ce Radio A radio interface 5 In the Auto negotiation field select On to enable or Off to disable Auto Negotiation When the Media Type is Radio Auto Negotiation is always Off 6 In the Speed field select the maximum speed of the interface Options are Ethernet RJ 45 interfaces 100Mbps HD 100Mbps FD and 1000Mpbs FD Ethernet SFP interfaces Only 1000FD is supported Radio interfaces The parameter is read...

Page 186: ...egotiation process Actual port duplex Displays the actual duplex status of the interface for the link as agreed by the two sides of the link after the auto negotiation process 6 4 Configuring Automatic State Propagation Automatic state propagation enables propagation of radio failures back to the Ethernet port You can also configure Automatic State Propagation to close the Ethernet port based on a...

Page 187: ...ptionally in the Auto state propagation CSF mode admin field select Enable or Disable to enable or disable Client Signal Failure CSF mode In CSF mode the ASP mechanism does not physically shut down the Controlled Interface when ASP is triggered Instead the ASP mechanism sends a failure indication message a CSF message The CSF message is used to propagate the failure indication to external equipmen...

Page 188: ... and average TX and RX rates in seconds both in bytes and in packets for each measured time interval You can also display the number of seconds in the interval during which TX and RX rates exceeded the configured threshold This section includes RMON Statistics Port TX Statistics Port RX Statistics 6 5 1 RMON Statistics To view and reset RMON statistics 1 Select Ethernet PM Statistics RMON The RMON...

Page 189: ...e displays RMON statistics for one of the unit s interfaces To hide or display columns 1 In the header row select the arrow next to any of the columns 2 Select Columns 3 Mark the interfaces you want to display and clear the interfaces you do not want to display Figure 132 RMON Page Hiding and Displaying Columns ...

Page 190: ... includes Displaying Ethernet Port TX PMs Enabling or Disabling Gathering of Port TX PM Statistics per Interface Setting the Ethernet Port TX Threshold 6 5 2 1 Displaying Ethernet Port TX PMs To display Ethernet Port TX PMs 1 Select Ethernet PM Statistics Port TX The Ethernet Port TX PM Report page opens Figure 133 Ethernet Port TX PM Report Page 2 In the Interface field select the interface for w...

Page 191: ...tions on setting the threshold see Setting the Ethernet Port TX Threshold Invalid data flag Indicates whether the values received during the measured interval are valid An x in the column indicates that the values are not valid for example because of a power surge or power failure that occurred during the interval To clear the PMs click Clear All 6 5 2 2 Enabling or Disabling Gathering of Port TX ...

Page 192: ...d sec column shows for each interval the number of seconds the TX bytes exceeded the specified threshold during the interval To view and set this threshold 1 In the Ethernet Port TX PM Report page click Threshold The Ethernet Port Tx Threshold page opens Figure 135 Ethernet Port Tx Threshold Page 2 Enter a threshold between 0 and 4294967295 3 Click Apply then Close ...

Page 193: ...Displaying Ethernet Port RX PMs Enabling or Disabling Gathering of Port RX PM Statistics per Interface Setting the Ethernet Port RX Threshold 6 5 3 1 Displaying Ethernet Port RX PMs To display Ethernet Port RX PMs 1 Select Ethernet PM Statistics Port RX The Ethernet Port RX PM Report page opens Figure 136 Ethernet Port RX PM Report Page 2 In the Interface field select the interface for which you w...

Page 194: ... on setting the threshold see Setting the Ethernet Port RX Threshold Invalid data flag Indicates whether the values received during the measured interval are valid An x in the column indicates that the values are not valid for example because of a power surge or power failure that occurred during the interval To clear the PMs click Clear All 6 5 3 2 Enabling or Disabling Gathering of Port RX PM St...

Page 195: ...d sec column shows for each interval the number of seconds the RX bytes exceeded the specified threshold during the interval To view and set this threshold 1 In the Ethernet Port RX PM Report page click Threshold The Ethernet Port Rx Threshold page opens Figure 138 Ethernet Port Rx Threshold Page 2 Enter a threshold between 0 and 4294967295 3 Click Apply then Close ...

Page 196: ...alized QoS enables operators to handle a wide and diverse range of scenarios IP 20 s smart QoS mechanism operates from the frame s ingress into the switching fabric until the moment the frame egresses via the destination port QoS capability is very important due to the diverse topologies that exist in today s network scenarios These can include for example streams from two different ports that egr...

Page 197: ... s configuration Ingress Rate Metering A hierarchical mechanism that deals with ingress traffic on three different levels interface service point and service point CoS The rate metering mechanism enables the system to measure the incoming frame rate on different levels using a TrTCM standard MEF rate meter and to determine whether to modify the color calculated during the classification stage The ...

Page 198: ...addition to the procedures described in this section you can specify a specific CoS and Color for a specific VLAN ID This is the highest classification priority on the logical interface level and overrides any other classification criteria at the logical interface level Classification by VLAN ID can only be configured via CLI See Configuring VLAN Classification and Override CLI 7 2 1 Classificatio...

Page 199: ...s by configuring them as un trusted For example if 802 1p classification is configured as un trusted for a specific interface the classification mechanism does not perform classification by UP bits This is useful for example if classification is based on DSCP priority bits If no match is found at the logical interface level the default CoS is applied to incoming frames at this level In this case t...

Page 200: ... configure and click Edit The Logical Interfaces Edit page opens Figure 141 Logical Interfaces Edit Page 3 Configure the parameters described in Table 44 4 Click Apply then Close Note The Ingress byte compensation and Egress byte compensation fields are described in Configuring the Ingress and Egress Byte Compensation ...

Page 201: ...uring classification Trust DSCP Select the interface s trust mode for DSCP Trust The interface performs QoS and color classification according to a user configurable table for DSCP to CoS and color classification DSCP classification has priority over MPLS classification so that if a match is found with the DSCP value of the ingressing frame MPLS bits are not considered Un Trust The interface does ...

Page 202: ...fication Table To modify the classification criteria for 802 1Q User Priority UP bits 1 Select Ethernet QoS Classification 802 1Q The 802 1Q Classification page opens Figure 142 802 1Q Classification Page 2 Select the row you want to modify and click Edit The 802 1Q Classification Edit page opens Figure 143 802 1Q Classification Edit Page ...

Page 203: ... 802 1Q CoS The CoS assigned to frames with the designated UP and CFI 802 1Q Color The Color assigned to frames with the designated UP and CFI 4 Click Apply then Close 7 2 4 Modifying the S VLAN 802 1 UP and DEI Bit Classification Table To modify the classification criteria for 802 1AD User Priority UP bits 1 Select Ethernet QoS Classification 802 1AD The 802 1AD Classification page opens Figure 1...

Page 204: ...ge opens Figure 145 802 1Q Classification Edit Page 3 Modify the parameters you want to change 802 1AD UP Read only The User Priority UP bit to be mapped 802 1ADQ DEI Read only The DEI bit to be mapped 802 1AD CoS The CoS assigned to frames with the designated UP and DEI 802 1AD Color The Color assigned to frames with the designated UP and DEI 4 Click Apply then Close ...

Page 205: ...ice Code Point DSCP priority values The DSCP is a 6 bit length field inside the IP datagram header carrying priority information Classification by DSCP can be used for untagged frames as well as 802 1Q tagged or provider VLAN tagged frames To modify the classification criteria for DSCPs 1 Select Ethernet QoS Classification DSCP The DSCP Classification page opens Figure 146 DSCP Classification Page...

Page 206: ... DSCP Classification Edit Page 3 Modify the parameters you want to change DSCP Read only The DSCP value to be mapped Binary Read only The binary representation of the DSCP value Description Read only The description of the DSCP value CoS The CoS assigned to frames with the designated DSCP value Color The Color assigned to frames with the designated DSCP value 4 Click Apply then Close ...

Page 207: ...ts are used to provide QoS capabilities by utilizing the bits set in the MPLS labels Classification by MPLS bits is supported in both untagged and 802 1Q provider tagged frames To modify the classification criteria for MPLS EXP bits 1 Select Ethernet QoS Classification MPLS The MPLS Classification page opens Figure 148 MPLS Classification Page ...

Page 208: ...terfaces Configuring the Ingress and Egress Byte Compensation 7 3 1 Policer Rate Metering Overview The IP 20 switching fabric supports hierarchical policing on the logical interface level You can define up to 250 rate meter policer profiles Note Policing on the service point level and the service point and CoS level is planned for future release IP 20 s policer mechanism is based on a dual leaky b...

Page 209: ...nfiguring Policer Profiles This section includes Adding a Policer Profile Editing a Policer Profile Deleting a Policer Profile 7 3 2 1 Adding a Policer Profile To add a policer profile 1 Select Ethernet QoS Policer Policer Profile The Policer Profile page opens Figure 150 Policer Profile Page ...

Page 210: ...Description A description of the policer profile Policer type Read only The type of policer Always set to MEF TRTCM CIR Enter the Committed Information Rate CIR for the policer in bits per second Permitted values are 0 or 64 000 through 1 000 000 000 bps If the value is 0 all incoming CIR traffic is dropped CBS Enter the Committed Burst Rate CBR for the policer in Kbytes Permitted values are 2 thr...

Page 211: ...le Table Edit page opens The Policer Profile Table Edit page is identical to the Policer Profile Table Add page Figure 151 You can edit any parameter that can be configured in the Policer Profile Table Add page except the Profile ID 7 3 2 3 Deleting a Policer Profile You cannot delete a policer profile that is attached to a logical interface You must first remove the profile from the logical inter...

Page 212: ...erfaces The Logical Interfaces page opens Figure 140 2 Select the interface in the Ethernet Logical Port Configuration Table and click Policers The Policers page opens By default the Policers page opens to the Unicast Policer table Figure 152 3 In the Policer profile field select a profile from the policer profiles defined in the system The Policer profile drop down list includes the ID and descri...

Page 213: ...ld select a profile from the policer profiles defined in the system The Policer profile drop down list includes the ID and description of all defined profiles 5 In the Multicast admin field select Enable to enable policing on multicast traffic flows from the logical interface or Disable to disable policing on multicast traffic flows from the logical interface 6 Click Apply 7 3 3 3 Assigning Broadc...

Page 214: ...lows from the logical interface or Disable to disable policing on broadcast traffic flows from the logical interface 6 Click Apply 7 3 3 4 Assigning Ethertype Policers You can define up to three policers per Ethertype value To assign a policer to an Ethertype 1 Select Ethernet Interfaces Logical Interfaces The Logical Interfaces page opens Figure 140 2 Select the interface in the Ethernet Logical ...

Page 215: ...terface for the specified ethertype 7 Click Apply 8 To assign policers to additional Ethertypes select Ethertype type 2 Policer and Ethertype type 3 Policer and repeat the steps above 7 3 4 Configuring the Ingress and Egress Byte Compensation You can define the ingress and egress byte compensation value per logical interface The policer attached to the interface uses these values to compensate for...

Page 216: ...e VLAN tagged The marking is performed according to global mapping tables that describe the 802 1p UP bits and the CFI bits for C VLAN tags or DEI bits for S VLAN tags The marking bit in the service point egress attributes determines whether the frame is marked as green or according to the calculated color Note The calculated color is sent to the queue manager regardless of whether the marking bit...

Page 217: ... CFI bit mapping that is implemented when marking is enabled To modify the 802 1Q Marking table 1 Select Ethernet QoS Marking 802 1Q The 802 1Q Marking page opens Each row in the 802 1Q Marking page represents a CoS and color combination Figure 156 802 1Q Marking Page 2 Select the row you want to modify and click Edit The 802 1Q Marking Edit page opens Figure 157 802 1Q Marking Edit Page ...

Page 218: ...ying the 802 1AD Marking Table The 802 1AD Marking table enables you to modify the CoS to UP and DEI bit mapping that is implemented when marking is enabled To modify the 802 1AD Marking table 1 Select Ethernet QoS Marking 802 1AD The 802 1AD Marking page opens Each row in the 802 1AD Marking page represents a CoS and color combination Figure 158 802 1AD Marking Page ...

Page 219: ...rity traffic based on CoS You can define up to 30 WRED profiles Each profile contains a green traffic curve and a yellow traffic curve This curve describes the probability of randomly dropping frames as a function of queue occupancy The system also includes two pre defined read only profiles These profiles are assigned profile IDs 31 and 32 A WRED profile can be assigned to each queue The WRED pro...

Page 220: ...cludes Adding a WRED Profile Editing a WRED Profile Deleting a WRED Profile 7 5 2 1 Adding a WRED Profile To add a WRED profile 1 Select Ethernet QoS WRED WRED Profile The WRED Profile page opens Figure 160 WRED Profile Page 2 Click ADD The WRED Profile Add page opens with default values displayed Figure 161 WRED Profile Add Page ...

Page 221: ...ackets for queues with this profile in Kbytes 0 8192 After this value is reached all yellow packets in the queue are dropped 9 In the Yellow curve max drop ratio field enter the maximum percentage 1 100 of dropped yellow packets for queues with this profile 10 Click Apply then Close 7 5 2 2 Editing a WRED Profile To edit a WRED profile 1 Select Ethernet QoS WRED WRED Profile The WRED Profile page ...

Page 222: ...Ethernet Logical Port Configuration table and click WRED The WRED page opens Figure 162 Logical Interfaces WRED Page 3 In the Show Service bundle ID field select 1 Note Service Bundles are bundles of queues grouped together in order to configure common egress characteristics for specific services In the current release only Service Bundle 1 is supported 4 Select a CoS Queue ID and click Edit The L...

Page 223: ...erform queue shaping on the following levels Queue Level Single leaky bucket shaping On the queue level you can configure up to 31 single leaky bucket shaper profiles If no profile is attached to the queue no egress shaping is performed on that queue Service Bundle Level Dual leaky bucket shaping On the service bundle level users can configure up to 256 dual leaky bucket shaper profiles If no prof...

Page 224: ... page opens with default values displayed Figure 165 Queue Shaper Profile Add Page 3 In the Profile ID field select a unique ID to identify the profile Permitted values are 1 31 4 Optionally in the Description field enter a description of the profile 5 In the CIR field enter the Committed Information Rate CIR assigned to the profile in bits per second Permitted values are 16 000 32 000 000 bps wit...

Page 225: ...ofile from the queue then delete the profile See Assigning a Queue Shaper Profile to a Queue To delete a queue shaper profile select the profile in the Queue Shaper Profiles Configuration table Figure 164 and click Delete The profile is deleted To delete multiple queue shaper profiles 1 Select the profiles in the Queue Shaper Profiles Configuration table or select all the profiles by selecting the...

Page 226: ...s are 1 31 4 Optionally in the Description field enter a description of the profile 5 In the CIR field enter the Committed Information Rate CIR assigned to the profile in bits per second Permitted values are 0 32 000 000 bps with granularity of 16 000 32 000 000 1 000 000 000 bps with granularity of 64 000 6 In the PIR field enter the Peak Information Rate PIR assigned to the profile in bits per s...

Page 227: ... profile from the service bundle then delete the profile To delete a service bundle shaper profile select the profile in the Service Bundle Shaper Profiles Configuration table Figure 166 and click Delete The profile is deleted To delete multiple service bundle shaper profiles 1 Select the profiles in the Service Bundle Shaper Profiles Configuration table or select all the profiles by selecting the...

Page 228: ...ervice bundle Service Bundle ID 1 is supported 4 In the CoS queue ID field select the CoS queue ID of the queue to which you want to assign the shaper Queues are numbered according to CoS value from 0 to 7 5 In the Profile ID field select from a list of configured queue shaper profiles See Configuring Queue Shaper Profiles 6 In the Shaper Admin field select Enable to enable egress queue shaping fo...

Page 229: ...the Egress Queue Shaper Configuration Add page Figure 169 5 To assign a different egress queue shaper profile select the profile in the Profile ID field 6 To enable or disable egress queue shaping for the selected queue select Enable to enable egress queue shaping for the queue or Disable to disable egress queue shaping for the queue 7 Click Apply then Close 7 6 5 Assigning a Service Bundle Shaper...

Page 230: ...cal Interfaces Egress Service Bundle Shaper Configuration Add Page Note In this release only one service bundle Service Bundle ID 1 is supported 5 In the Profile ID field select from a list of configured service bundle shaper profiles See Configuring Service Bundle Shaper Profiles 6 In the Shaper Admin field select Enable to enable egress service bundle shaping or Disable to disable egress service...

Page 231: ...file ID field 6 To enable or disable egress service bundle shaping select Enable or Disable 7 Click Apply then Close 7 7 Configuring Scheduling This section includes Scheduling Overview Configuring Priority Profiles Configuring WFQ Profiles Assigning a Priority Profile to an Interface Assigning a WFQ Profile to an Interface 7 7 1 Scheduling Overview Scheduling determines the priority among the que...

Page 232: ... profiles A ninth profile Profile ID 9 is pre configured You can configure Green priorities from 4 highest to 1 lowest An additional four Yellow priority profiles are defined automatically This section includes Adding a Scheduler Priority Profile Editing a Service Scheduler Priority Profile Deleting a Scheduler Priority Profile 7 7 2 1 Adding a Scheduler Priority Profile To add a scheduler priorit...

Page 233: ...IP 20C S E User Guide Ceragon Proprietary and Confidential Page 233 of 597 2 Click Add The Scheduler Priority Profile Add page opens with default values displayed Figure 173 Scheduler Priority Profile Add Page ...

Page 234: ...eduler priority profile 1 Select Ethernet QoS Scheduler Priority Profiles The Scheduler Priority Profile page opens Figure 172 2 Select the profile you want to edit and click Edit The Scheduler Priority Profile Edit page opens This page is similar to the Scheduler Priority Profile Add page Figure 173 You can edit any parameter except the Profile ID 3 Modify the profile 4 Click Apply then Close 7 7...

Page 235: ...onding to eight queues in an interface to which the profile is assigned You can configure up to five WFQ profiles A sixth profile Profile ID 1 is pre configured This section includes Adding a WFQ Profile Editing a WFQ Priority Profile Deleting a WFQ Profile 7 7 3 1 Adding a WFQ Profile To add a WFQ profile 1 Select Ethernet QoS Scheduler WFQ Profiles The Scheduler WFQ Profile page opens Figure 174...

Page 236: ...S Scheduler WFQ Profiles The Scheduler WFQ Profile page opens Figure 174 2 Select the profile you want to edit and click Edit The Scheduler WFQ Profile Edit page opens This page is similar to the Scheduler WFQ Profile Add page Figure 175 You can edit any parameter except the Profile ID 3 Modify the profile 4 Click Apply then Close 7 7 3 3 Deleting a WFQ Profile To delete a scheduler WFQ profile se...

Page 237: ...ration Edit page open by default Figure 176 Logical Interfaces Scheduler Egress Port Scheduling Priority 3 In the Profile ID field select from a list of configured scheduling priority profiles See Configuring Priority Profiles 4 Click Apply then Close 7 7 5 Assigning a WFQ Profile to an Interface To assign a WFQ profile to an interface 1 Select Ethernet Interfaces Logical Interfaces The Logical In...

Page 238: ...gress Port Scheduling WFQ The Egress Port Scheduling WFQ Configuration Edit page opens Figure 177 Logical Interfaces Scheduler Egress Port Scheduling WFQ 4 In the Profile ID field select from a list of configured scheduling priority profiles See Configuring WFQ Profiles 5 Click Apply then Close ...

Page 239: ...ication ABN also known as Ethernet Operation and Maintenance EOAM enables third party applications to learn about bandwidth changes in a radio link when ACM is active Once ABN is enabled the radio unit reports bandwidth information to upstream third party switches The ABN entity creates a logical relationship between a radio interface or a logical group of radio interfaces called the Monitored Int...

Page 240: ...ntity 1 Select Ethernet Protocols Adaptive Bandwidth Notification The ABN Adaptive Bandwidth Notification page opens Figure 178 ABN Adaptive Bandwidth Notification Page 2 Click Add underneath the ABN Configuration and Status table The ABN Configuration and Status Add page opens Figure 179 ABN Configuration and Status Add Page ...

Page 241: ...ge If the bandwidth is below the nominal value when the holdoff period ends the system starts transmitting messages 9 In the MEL field select the Maintenance Level in the messages 10 In the Tx Period field specify how often messages are transmitted when bandwidth is below the nominal value Options are 4 One second 5 Ten seconds 6 One minute 11 In the Tx VLAN field specify the VLAN on which message...

Page 242: ...y 1 Select Ethernet Protocols Adaptive Bandwidth Notification The ABN Adaptive Bandwidth Notification page opens Figure 178 2 Select the ABN entity in the ABN Configuration and Status Table 3 Click Delete The ABN entity is removed from the ABN Configuration and Status Table 8 1 5 Viewing the Statistics for an ABN Entity To view the statistics for an ABN entity 1 Select Ethernet Protocols Adaptive ...

Page 243: ...DP Port Parameters Displaying the Unit s Management Parameters Displaying Peer Unit s Management Parameters Displaying the Local Unit s Parameters Displaying LLDP Statistics 8 2 1 LLDP Overview Link Layer Discovery Protocol LLDP is a vendor neutral layer 2 protocol that can be used by a network element attached to a specific LAN segment to advertise its identity and capabilities and to receive ide...

Page 244: ...stem Management Page Table 48 describes the LLDP remote system management parameters These parameters are read only Table 48 LLDP Remote System Management Parameters Parameter Definition Local Interface Location The location of the local interface Management Address The octet string used to identify the management address component associated with the remote system Address Sub Type The type of man...

Page 245: ...d by the local element depends on the IP protocol IPv4 or IPv6 configured for the unit See Defining the IP Protocol Version for Initiating Communications To display and configure the general LLDP parameters for the unit 1 Select Ethernet Protocols LLDP Advanced Configuration Parameters The LLDP Configuration Parameters page opens Figure 182 LLDP Configuration Parameters Page 2 Modify the configura...

Page 246: ...conds the system waits after the LLDP Admin status becomes Disabled until it will process a request to reinitialize LLDP For instructions on disabling or enabling LLDP on a port see Configuring the LLDP Port Parameters In this release the Reinit Delay is set at 2 Table 50 LLDP Configurable Configuration Parameters Parameter Definition TX Interval Seconds Defines the interval in seconds at which LL...

Page 247: ... and determine how LLDP operates and which TLVs are sent for each port 1 Select Ethernet Protocols LLDP Advanced Configuration Port Configuration The LLDP Port Configuration page opens Figure 183 LLDP Port Configuration Page 2 Select an interface and click Edit The LLDP Port Configuration Edit page opens Figure 184 LLDP Port Configuration Edit Page ...

Page 248: ...cations from the agent to the NMS are enabled True The agent sends a Topology Change trap to the NMS whenever the system information received from the peer changes False Notifications to the NMS are disabled default value 5 Click Apply then Close Table 51 lists and describes the status parameters in the LLDP Port Configuration page Table 51 LLDP Port Configuration Status Parameters Parameter Defin...

Page 249: ... of 597 8 2 5 Displaying the Unit s Management Parameters To display the unit s destination LLDP MAC address 1 Select Ethernet Protocols LLDP Advanced Configuration Destination Address The LLDP Destination Address Table page opens Figure 185 LLDP Destination Address Table Page ...

Page 250: ...ted with the unit for purposes of LLDP transmissions 1 Select Ethernet Protocols LLDP Advanced Configuration Management TLV The LLDP Management TLV Configuration page opens Figure 186 LLDP Management TLV Configuration Page Table 52 lists and describes the status parameters in the LLDP Management TLV Configuration page ...

Page 251: ...ble Indicates whether the unit s Management Address is transmitted with LLDPDUs In this release the Management Address is always sent 8 2 6 Displaying Peer Unit s Management Parameters To display LLDP management information about the unit s nearest neighbor peer 1 Select Ethernet Protocols LLDP Advanced Remote System Management The LLDP Remote System Management page opens Figure 187 LLDP Remote Sy...

Page 252: ...tion instance unique only for the indicated remote system Time Mark The time the entry was created To display unit parameter information received via LLDP from the unit s nearest neighbor peer 1 Select Ethernet Protocols LLDP Advanced Remote System Remote Table The LLDP Remote System Table page opens Figure 188 LLDP Remote System Table Page Table 54 describes the parameters in the LLDP Remote Syst...

Page 253: ...t associated with the remote system Port Sub type The type of port identifier encoding used in the peer s Port ID Time Mark The time the entry was created 8 2 7 Displaying the Local Unit s Parameters To display the unit parameters as transmitted by the LLDP agents 1 Select Ethernet Protocols LLDP Advanced Local System Parameters The LLDP Local System Parameters page opens Figure 189 LLDP Local Sys...

Page 254: ...al unit In this release this parameter is always set to MAC Address Capabilities Supported A bitmap value used to identify which system capabilities are supported on the local system as included in TLVs transmitted by the LLDP agent The bitmap is defined by the following parameters 0 other 1 repeater 2 bridge 3 wlanAccessPoint 4 router 5 telephone 6 docsisCableDevice 7 stationOnly 8 cVLANComponent...

Page 255: ...gure 190 LLDP Local System Port Page Table 56 describes the parameters in the LLDP Local System Port page These parameters are read only Table 56 LLDP Local System Port Parameters Parameter Definition Interface Location Identifies the port Port ID The port s MAC address Port Sub Type The type of encoding used to identify the port in LLDP transmissions In this release this parameter is always set t...

Page 256: ...ent parameters as transmitted by the LLDP agents 1 Select Ethernet Protocols LLDP Advanced Local System Management The LLDP Local System Management page opens Figure 191 LLDP Local System Management Page 2 To display all the parameters select a row and click View Figure 192 LLDP Local System Management View Page ...

Page 257: ...ss Sub Type The format of the local unit s IP Address Address Length Reserved for future use Address Interface ID Reserved for future use Address Interface Sub Type Reserved for future use Address OID Reserved for future use 8 2 8 Displaying LLDP Statistics To display statistics about changes reported via LLDP by the remote unit 1 Select Ethernet Protocols LLDP Advanced Statistic General The LLDP ...

Page 258: ...he remote system has been deleted Drops Reserved for future use Ageouts The number of times the information from the remote system has been deleted from the local unit s database because the information s TTL has expired The RX Ageouts counter in the Port RX page is similar to this counter but is for specific ports rather than the entire unit To display statistics about LLDP transmissions and tran...

Page 259: ...MAC address If the set of TLVs that is selected in the LLDP local system MIB by network management would result in an LLDPDU that violates LLDPDU length restrictions then the No of Length Error statistic is incremented by 1 and an LLDPDU is sent containing the mandatory TLVs plus as many of the optional TLVs in the set as will fit in the remaining LLDPDU length To display statistics about LLDP fra...

Page 260: ...rames received by the LLDP agent on this port Discarded TLVs The number of LLDP TLVs discarded for any reason by the LLDP agent on this port Unrecognized TLVs The number of LLDP TLVs received on the given port that are not recognized by LLDP agent Ageouts The number of age outs that occurred on the port An age out is the number of times the complete set of information advertised by the remote syst...

Page 261: ... In SyncE PRC pipe regenerator mode frequency is transported between two interfaces through the radio link With the system acting as a simple link no distribution mechanism is necessary resulting in improved frequency distribution performance with PRC quality and a simplified configuration Notes SyncE Regenerator currently supports only a single pipe configuration To add a pipe configuration 1 Sel...

Page 262: ...3 Select a Pipe ID 4 Select one of the available interfaces for each Sync Interface Note One of the Sync Interfaces must be a Radio interface and the other must be an Ethernet interface If the two interfaces are the same type the operation will fail Only one radio port is available for IP 20S and IP 20E units 5 Click Apply ...

Page 263: ...ral Access Control Parameters Configuring the Password Security Parameters Configuring the Session Timeout Configuring Users Configuring RADIUS Configuring X 509 CSR Certificates Blocking Telnet Access Uploading the Security Log Uploading the Configuration Log Related topics Changing Your Password Operating in FIPS Mode Configuring AES 256 Payload Encryption ...

Page 264: ...ttempts that will trigger blocking If a user attempts to login to the system with incorrect credentials this number of times consecutively the user will temporarily be prevented from logging into the system for the time period defined in the Blocking period field Valid values are 1 10 The default value is 3 3 In the Blocking period Minutes field enter the length of time in minutes that a user is p...

Page 265: ...e User Accounts page To unblock a user 1 Select Platform Security Access Control User Accounts The Access Control User Accounts page opens Figure 206 2 Select the user and click Edit The Access Control User Accounts Edit page opens Figure 201 Access Control User Accounts Edit Page 3 In the Blocked field select No 4 Click Apply then Close ...

Page 266: ...llowing character types lower case letters upper case letters digits and special characters For purposes of meeting this requirement upper case letters at the beginning of the password and digits at the end of the password are not counted The last five passwords you used cannot be reused 3 In the Password change for first login field select Yes or No When Yes is selected the system requires the us...

Page 267: ...the user session times out and you will have to log in to the system again To modify the session timeout 1 Select Platform Security Protocols Control The Protocols Control page opens Figure 203 Protocols Control Page 2 In the Session timeout Minutes field select a session timeout in minutes from 1 to 60 3 Click Apply 10 4 Configuring Users This section includes User Configuration Overview Configur...

Page 268: ...ocols access channels that can be used to access the system by users to whom the user profile is assigned The system parameters are divided into the following functional groups Security Management Radio TDM Ethernet Synchronization A user profile defines the permitted access level per functionality group For each functionality group the access level is defined separately for read and write operati...

Page 269: ...ser profile contains a detailed set of read and write permission levels per functionality group The system includes a number of pre defined user profiles You can edit these profiles and add user profiles Together the system supports up to 50 user profiles To add a user profile 1 Select Platform Security Access Control User Profiles The Access Control User Profiles page opens Figure 204 Access Cont...

Page 270: ...ed 4 In the Permitted access channels row select the access channels the user will be permitted to use to access the system 5 For each functionality group select one of these options for write level and read level All users with this profile will be assigned these access levels None Normal Advanced 6 Click Apply then Close To view a user profile click next to the profile you want to view To edit a...

Page 271: ...le The user profile defines a set of read and write permission levels per functionality group See Configuring User Profiles To add a new user 1 Select Platform Security Access Control User Accounts The Access Control User Accounts page opens Figure 206 Access Control User Accounts Page 2 Click Add The Access Control User Profiles Add page opens Figure 207 Access Control User Accounts Add Page ...

Page 272: ... user You can use this option to block a user temporarily without deleting the user from the system If you set this option to Yes while the user is logged into the system the user will be automatically logged out of the system within 30 seconds Note Users can also be blocked by the system automatically You can unblock the user by selecting No in the Blocked field See Configuring the General Access...

Page 273: ...ver and provides a RADIUS client for authentication and authorization When RADIUS is enabled a user attempting to log into the system from any access channel CLI WEB NMS is not authenticated locally Instead the user s credentials are sent to a centralized standard RADIUS server which indicates to the IP 20 whether the user is known and which privilege is to be given to the user The following RADIU...

Page 274: ...Page 2 In the Radius Admin field select Enable 3 Click Apply 10 5 3 Configuring the RADIUS Server Attributes To configure the RADIUS server attributes 1 Select Platform Security Access Control Radius Radius Configuration The Radius Configuration page opens Figure 208 2 In the Radius Configuration table select the line that corresponds to the RADIUS server you want to configure Select Server ID 1 t...

Page 275: ...econds that the agent will wait in each communication with the selected RADIUS server before retrying if no response is received 8 In the Secret field enter the shared secret of the RADIUS server The string must be between 22 128 characters long 9 Click Apply then Close In addition to the configurable parameters described above the Radius Configuration page displays the following information for e...

Page 276: ... all Radius users currently connected To view RADIUS users 1 Select Platform Security Access Control Radius Radius Users The Radius Users page opens Figure 210 Radius Users Page The User ID column displays the user s name The Access Channels column displays the access channels the user is allowed to use to access the unit The User Instances column displays the number of open sessions the user curr...

Page 277: ...k next to the user name The page refreshes and displays the additional access level information Figure 211 Radius Users Page Expanded For each of the six functional groups Ethernet Management Radio Security Sync TDM the page displays the Read access level None Regular or Advanced and the Write access level None Regular or Advanced ...

Page 278: ...describe how to create three users an Advanced user with Advanced read write permissions a Normal user with regular read write permissions and a Viewer user with no read write permissions 10 5 5 1 Configuring a Win 2008 RADIUS Server The following sub sections describe how to configure a Win 2008 RADIUS Server to work with an IP 20 device Step 1 Creating Groups and Users To create groups and users...

Page 279: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 279 of 597 Figure 212 Server Manager Creating User Groups ...

Page 280: ...Proprietary and Confidential Page 280 of 597 2 Create three users u1 u2 u3 Figure 213 Server Manager Creating Users 3 Attach each user to a group as follows Attach u1 to Radius_Advanced Attach u2 to Radius_Normal Attach u3 to Radius_Viewer ...

Page 281: ... the IP 20 device as a RADIUS client as follows 1 In the Server Manager navigate to Roles Network Policy and Access Services NPS Local RADIUS Clients and Servers RADIUS Clients 2 Right click RADIUS Clients and select New RADIUS Client The New RADIUS Client window appears Figure 214 Server Manager Creating a RADIUS Client ...

Page 282: ...alue in the Secret field of the Radius Configuration Edit page Figure 209 Step 3 Creating a Network Policy Create a network policy for each of the three groups you created Radius_Advanced Radius_Normal Radius_Viewer That is follow the instructions in this section for each of the three groups To create a network policy 1 In the Server Manager navigate to Roles Network Policy and Access Service NPS ...

Page 283: ...3 of 597 Figure 215 Create Network Policy Specify Name and Connection Type 4 Click Next 5 In the Specify Conditions window click Add 6 In the Select Condition window that appears select the User Groups condition and click Add Figure 216 Create Network Policy Select Condition ...

Page 284: ... Select Group window that appears click Advanced 9 In the Select Group window that appears click Find Now to list all groups and then select the appropriate group from the list Radius_Advanced Radius_Normal or Radius_Viewer 10 Click OK Figure 217 Create Network Policy User Group added to Policy s Conditions 11 Click OK to save settings 12 Click Next ...

Page 285: ... Guide Ceragon Proprietary and Confidential Page 285 of 597 13 In the Specify Access Permission window that appears select the Access Granted option Figure 218 Create Network Policy Specifying Access Permission 14 Click Next ...

Page 286: ...re Authentication Methods window that appears make sure only the Unencrypted Authentication PAP SPAP option is selected Figure 219 Create Network Policy Configuring Authentication Methods 16 In the query window that appears click No Figure 220 Create Network Policy Insecure Authentication Method Query ...

Page 287: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 287 of 597 17 In the Configure Constraints window that appears click Next Figure 221 Create Network Policy Configuring Constraints ...

Page 288: ...288 of 597 18 In the Configure Settings window that appears i Remove all Standard RADIUS attributes Make sure the Attributes table is empty Figure 222 Create Network Policy Configuring Settings ii Select the Vendor Specific checkbox and click Add under the Attributes table ...

Page 289: ...agon Proprietary and Confidential Page 289 of 597 19 In the Add Vendor Specific Attribute window that appears i Select Custom in the Vendor drop down field ii Click Add Figure 223 Create Network Policy Adding Vendor Specific Attributes ...

Page 290: ...ck Add Figure 224 Create Network Policy Selecting to Add Attribute Information 21 In the Vendor Specific Attribute Information window that appears i Select Enter Vendor Code ii Enter 2281 in the Enter Vendor Code field iii Select the option Yes It conforms iv Click Configure Attribute Figure 225 Create Network Policy Specifying the Vendor ...

Page 291: ...ach of the six functional groups Ethernet Management Radio Security Sync TDM Therefore in the Attribute value field enter the value corresponding to the access level you wish to permit to members of the group whose policy you are configuring where 2 Advanced 1 Regular 0 None Thus for example enter 2 for all twelve attributes if you are configuring a policy for the Radius_Advanced group This gives ...

Page 292: ...responding to the access channels you wish to permit where the value for each access channel is none 0 serial 1 telnet 2 ssh 4 web 8 nms 16 snmp 32 snmpV3 64 Thus for example enter 127 to allow access from all channels Serial Telnet SSH Web NMS SNMP SNMPv3 Or enter 24 to allow access only from NMS SNMP channels iii Click OK 23 Click OK The following figure shows the Attributes table for the Radius...

Page 293: ... Right click the NPS Local node and select Stop NPS Service ii Right click the NPS Local node and select Start NPS Service Figure 228 Create Network Policy Stopping Starting NPS Services 10 5 5 2 Configuring a Linux FreeRADIUS Server The following sub sections describe how to configure a Linux FreeRADIUS server to work with an IP 20 device To so do you will need to modify the following three files...

Page 294: ...like according to the following example user1 advanced privileges u1 auth type local Cleartext Password 1111 security ro advanced security wo advanced mng ro advanced mng wo advanced radio ro advanced radio wo advanced tdm ro advanced tdm wo advanced eth ro advanced eth wo advanced sync ro advanced sync wo advanced access_channel u1accesschannel fall through yes user2 regular privileges u2 auth ty...

Page 295: ... through yes user3 no privilege viewer u3 auth type local Cleartext Password 3333 security ro none security wo none mng ro none mng wo none radio ro none radio wo none tdm ro none tdm wo none eth ro none eth wo none sync ro none sync wo none access_channel u3accesschannel fall through yes 2 Save the changes in the etc raddb users file ...

Page 296: ... 2 ssh 4 web 8 nms 16 snmp 32 snmpV3 64 For example The value 127 denotes permission to access the device from all channels Serial Telnet SSH Web NMS SNMP SNMPv3 The value 24 indicates permission to access the device only from the Web NMS channels To define each user s access channels 1 In the usr share freeradius dictionary ceragon file configure the values of the access channels according to the...

Page 297: ...et default_not_applicable shortname ceragon ip 20G Keep in mind The secret must be between 22 and 128 characters long Note down the secret because you will need to enter the same value in the Secret field of the Radius Configuration Edit page Figure 209 The shortname is not mandatory but should be added and should be different for each RADIUS client 2 Save the changes to the etc raddb clients conf...

Page 298: ... CSR file See Generating a Certificate Signing Request CSR File 2 Download the certificate to the IP 20 and install the certificate See Downloading a Certificate 3 Enable HTTPS This must be performed via CLI See Enabling HTTPS CLI When uploading a CSR and downloading a certificate the IP 20 functions as an SFTP client You must install SFTP server software on the PC or laptop you are using to perfo...

Page 299: ...ial Page 299 of 597 10 6 1 Generating a Certificate Signing Request CSR File To generate a Certificate Signing Request CSR file 1 Select Platform Security X 509 Certificate CSR The Security Certificate Request page opens Figure 229 Security Certificate Request Page ...

Page 300: ...user simply leave this field blank 12 In the Path field enter the directory path to which you are uploading the CSR Enter the path relative to the SFTP user s home directory not the absolute path To leave the path blank enter 13 In the File Name field enter the name you want to give to the exported CSR 14 If the IP address family is configured to be IPv4 enter the IPv4 address of the PC or laptop ...

Page 301: ... you are uploading the certificate Enter the path relative to the SFTP user s home directory not the absolute path To leave the path blank enter 5 In the File Name field enter the certificate s file name in the SFTP server 6 If the IP address family is configured to be IPv4 enter the IPv4 address of the PC or laptop you are using as the SFTP server in the Server IPV4 address field See Defining the...

Page 302: ...led Enable 3 Click Apply 10 8 Uploading the Security Log The security log is an internal system file which records all changes performed to any security feature as well as all security related events When uploading the security log the IP 20 functions as an FTP or SFTP client You must install FTP or SFTP server software on the PC or laptop you are using to perform the import or export For details ...

Page 303: ...eAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 303 of 597 2 Select Platform Security General Security Log Upload The Security Log Upload page opens Figure 232 Security Log Upload Page ...

Page 304: ...of the PC or laptop you are using as the FTP server in the Server IPv6 address field See Defining the IP Protocol Version for Initiating Communications 8 In the Path field enter the directory path to which you are uploading the files Enter the path relative to the FTP user s home directory not the absolute path To leave the path blank enter 9 In the File Name field enter the name you want to give ...

Page 305: ...guration log the IP 20 functions as an FTP or SFTP client You must install FTP or SFTP server software on the PC or laptop you are using to perform the upload For details see Installing and Configuring an FTP or SFTP Server To upload the configuration log 1 Install and configure an FTP server on the PC or laptop you are using to perform the upload See Installing and Configuring an FTP or SFTP Serv...

Page 306: ...tocol Version for Initiating Communications 8 In the Path field enter the directory path to which you are uploading the files Enter the path relative to the FTP user s home directory not the absolute path To leave the path blank enter 9 In the File Name field enter the name you want to give to the exported configuration log Note The directory path and fie name together cannot be more than If the I...

Page 307: ... debugging purposes can be configured using the CLI See Working in CW Mode Single or Dual Tone CLI 11 1 Viewing Current Alarms To display a list of current alarms in the unit 1 Select Faults Current Alarms The Current Alarms page opens The Current Alarms page displays current alarms in the unit Each row in the Current Alarms table describes an alarm and provides basic information about the alarm F...

Page 308: ...or over the symbol Note You can edit the severity of alarm types in the Alarm Configuration page See Editing Alarm Text and Severity Description A system defined description of the alarm User Text Additional text that has been added to the system defined description of the alarm by users Note You can add user text to alarms in the Alarm Configuration page See Editing Alarm Text and Severity Origin...

Page 309: ...nce number assigned to the event by the system Severity The severity of the event In the Event Log table the severity is indicated by a symbol You can display a textual description of the severity by holding the cursor over the symbol Note You can edit the severity of event types in the Alarm Configuration page See Editing Alarm Text and Severity State Indicates whether the event is currently rais...

Page 310: ... Information To view the list of alarms defined in the system 1 Select Faults Alarm Configuration The Alarm Configuration page opens For a description of the information provided in the Alarm Configuration page see Table 63 Alarm Configuration Page Parameters Figure 237 Alarm Configuration Page Table 63 Alarm Configuration Page Parameters Parameter Definition Sequence Number A unique sequence numb...

Page 311: ...efined probable cause and suggested corrective actions To view an alarm type s probable cause and corrective actions click on the left side of the alarm type s row in the Alarm Configuration page The Probable Cause and Corrective Actions appear underneath the alarm type s row as shown below If there is no that means no Probable Cause and Corrective Actions are defined for the alarm type Figure 238...

Page 312: ...it This file can be uploaded and forwarded to customer support at their request to help in analyzing issues that may occur When uploading a Unit Information file the IP 20 functions as an FTP or SFTP client You must install FTP or SFTP server software on the PC or laptop you are using to perform the upload For details see Installing and Configuring an FTP or SFTP Server To generate and upload a Un...

Page 313: ... the FTP user s home directory not the absolute path To leave the path blank enter 9 In the File Name field enter the name you want to give to the exported Unit Information file 10 Click Apply to save your settings 11 Click Create to create the Unit Information file The following fields display the status of the file creation process File creation status Displays the file creation status You must ...

Page 314: ...eration 11 5 Performing Diagnostics This section includes Performing Radio Loopback Performing Ethernet Loopback Configuring Service OAM SOAM Fault Management FM 11 5 1 Performing Radio Loopback To perform loopback on a radio 1 Select Radio Diagnostics Loopback The Radio Loopbacks page opens Figure 241 Radio Loopbacks Page 2 Select the slot on which you want to perform loopback and click Edit The ...

Page 315: ...loopback field select On 5 Click Apply 11 5 2 Performing Ethernet Loopback Ethernet loopbacks can be performed on any logical Ethernet interface except a LAG When Ethernet loopback is enabled on an interface the system loops back all packets ingressing the interface This enables loopbacks to be performed over the link from other points in the network To perform Ethernet loopback 1 Select Ethernet ...

Page 316: ...dresses during the loopback Swapping addresses prevents Ethernet loops from occurring It is recommended to enable MAC address swapping if LLDP is enabled 6 Click Apply to initiate the loopback 11 5 3 Configuring Service OAM SOAM Fault Management FM This section includes SOAM Overview Configuring MDs Configuring MA MEGs Configuring MEPs Displaying Remote MEPs Displaying Last Invalid CCMS 11 5 3 1 S...

Page 317: ...ment for which connectivity faults are managed via SOAM MA MEG Maintenance Association Maintenance Entity Group An MA MEG contains a set of MEPs MEP Maintenance Association End Points Each MEP is located on a service point of an Ethernet service By exchanging CCMs Continuity Check Messages local and remote MEPs have the ability to detect the network status discover the MAC address of the remote un...

Page 318: ... with an MD Format of None To add an MD 1 Select Ethernet Protocols SOAM MD The SOAM MD page opens Figure 244 SOAM MD Page 2 Click Add The SOAM MD Add page opens Figure 245 SOAM MD Page 3 In the MD Name field enter an identifier for the MD up to 43 alphanumeric characters The MD Name should be unique over the domain 4 In the MD Format field select None ...

Page 319: ...unctionality 6 Click Apply then Close The MHF MIP Creation field displays the type of MHF format included in the CCMs sent in this MD in the current release this is MHF Default The Sender TLV Content field displays the type of TLVs included in the CCMs sent in this MD in the current release this is only Send ID Chassis 11 5 3 3 Configuring MA MEGs You can configure up to 1280 MEGs per network elem...

Page 320: ...Page 3 Configure the fields described in Table 64 4 Click Apply then Close Table 65 describes the status read only fields in the SOAM MA MEG Component table Table 64 SOAM MA MEG Configuration Parameters Parameter Definition MD ID Name Select the MD to which you are assigning the MEP MA MEG short name Enter a name for the MEG up to 44 alphanumeric characters ...

Page 321: ...mong customer provider and or operator roles The number of MEG levels used depends on the number of nested MEs for which the OAM flows are not distinguishable based on the Ethernet layer encapsulation CCM Interval The interval at which CCM messages are sent within the MEG Options are 1 second default 10 seconds 1 minute 10 minutes It takes a MEP 3 5 times the CCM interval to determine a change in ...

Page 322: ...s stage you add both local and remote MEPs The only thing you define at this point is the MEP ID See Adding Local and Remote MEPs 2 Configure the local MEPs At this point you determine which MEPs are local MEPs The system automatically defines the other MEPs you configured in the previous step as remote MEPs See Configuring the Local MEPs 3 Enable the Local MEPs See Enabling Local MEPs Adding Loca...

Page 323: ...you have added local and remote MEPs you must define the MEPs and determine which are the local MEPs 1 Select Ethernet Protocols SOAM MEP The SOAM MEP page opens Table 66 lists and describes the parameters displayed in the SOAM MEP page Figure 250 SOAM MEP Page Note To display MEPs belonging to a specific MEG select the MEG in the Filter by MA MEG field near the top of the SOAM MEP page To display...

Page 324: ... of the Add SOAM MEP wizard opens Figure 251 Add SOAM MEP Wizard Page 1 3 In the MEG Name field select an MA MEG 4 Click Next Page 2 of the Add SOAM MEP wizard opens Figure 252 Add SOAM MEP Wizard Page 2 5 In the Direction field select Down Note In the current release the Up direction is not supported ...

Page 325: ...utomatically generated by the system MA MEG ID An MA MEG ID automatically generated by the system MEP ID The MEP ID Interface Location The interface on which the service point associated with the MEP is located SP ID The service point ID MEP Direction In this release only Down is supported MEP Fault Notification State The initial status of the SOAM state machine MEP Active Indicates whether the ME...

Page 326: ...e a MEP 1 In the SOAM MEP page Figure 250 select the MEP you want to enable 2 Click Edit The SOAM MEP Edit page opens Figure 254 SOAM MEP Edit Page 3 In the MEP Active field select True 4 In the MEP CCM TX Enable field select True 5 In the CCM and LTM Priority field select the p bit that will be included in CCMs sent by this MEP 0 to 7 It is recommended to select 7 6 Click Apply then Close ...

Page 327: ...e MEP ID RMEP Operational State The operational state of the remote MEP RMEP Last rx CCM MAC Address The MAC Address of the interface on which the remote MEP is located RMEP Last CCM OK or Fail Timestamp The timestamp marked by the remote MEP indicated the most recent CCM OK or failure it recorded If none this field indicates the amount of time since SOAM was activated RMEP Last rx CCM RDI Indicat...

Page 328: ...SOAM MEP page opens Figure 250 2 Select a MEP and click Last Invalid CCMS The MEP Last Invalid CCMS page opens Figure 256 MEP Last Invalid CCMS Page The Last RX error CCM message field displays the frame of the last CCM that contains an error received by the MEP The Last RX Xcon fault message field displays the frame of the last CCM that contains a cross connect error received by the MEP Note A cr...

Page 329: ... Searching and Saving a list of MIB Entities 12 1 Restarting the HTTP Server To restart the unit s HTTP server 1 Select Utilities Restart HTTP The Restart HTTP page opens Figure 257 Restart HTTP Page 2 Click Restart The system prompts you for confirmation 3 Click OK The HTTP server is restarted and all HTTP sessions are ended After a few seconds the Web EMS prompts you to log in again ...

Page 330: ...r page opens Figure 258 ifIndex Calculator Page If you have an ifIndex and you want to determine which hardware item in the unit it represents enter the number in the ifIndex number field and click Calculate Index to name A description of the object appears in the Result field To determine the ifIndex of a hardware item in the unit such as an interface card or slot select the object type in the Fu...

Page 331: ...e Even though the MIB Reference Table is customized to these three product groups some of the entities listed in the Table may not be relevant to the particular unit you are using This may occur because of activation key restrictions minor differences between product types or simply because a certain feature is not used in a particular configuration For example the column genEquipUnitShelfSlotConf...

Page 332: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 332 of 597 Section III CLI Configuration ...

Page 333: ... CLI 13 1 General CLI Before connection over the radio hop is established it is of high importance that you assign to the IP 20 unit a dedicated IP address according to an IP plan for the total network See Changing the Management IP Address CLI By default a new IP 20 unit has the following IP settings IP address 192 168 1 1 Subnet mask 255 255 255 0 Warning If the connection over the link is estab...

Page 334: ...g On CLI Use a telnet connection to manage the IP 20 via CLI You can use any standard telnet client such as PuTTy or ZOC Terminal Alternatively you can simply use the telnet ip address command from the CMD window of your PC or laptop The default IP address of the unit is 192 168 1 1 Establish a telnet connection to the unit using the default IP address When you have connected to the unit a login p...

Page 335: ...nd a list of commands that start with the portion of the command you have already entered is displayed To scroll up and down a list use the up and down arrow keys To end the list and return to the most recent prompt press the letter q To ping another network device enter one of the following commands root ping ipv4 address x x x x count number of echo packets root ping ipv6 address ipv6 count numb...

Page 336: ...ment ports and the network element host CPU in a single service In order to enable in band management you must add at least one service point to the management service in the direction of the remote site or sites from which you want to access the unit for management For instructions on adding service points see Configuring Service Points CLI 13 7 Changing the Management IP Address CLI Related Topi...

Page 337: ...escription ipv6 address Eight groups of four hexadecimal digits separated by colons Any valid IPv6 address The IP address for the unit prefix length Number 1 128 The prefix length for the unit gateway Eight groups of four hexadecimal digits separated by colons Any valid IPv6 address The default gateway for the unit optional Examples The command below sets the following parameters IPv4 Address 192 ...

Page 338: ...enable features that are not covered by a valid activation key In the event that the activation key enabled capacity and feature set is exceeded an Activation Key Violation alarm occurs and the Web EMS displays a yellow background and an activation key violation warning After a 48 hour grace period all other alarms are hidden until the capacity and features in use are brought within the activation...

Page 339: ...mation about these features enter the following command in root view root platform activation key show usage all To display a list of the radio capacities that your current activation key supports and their usage information enter the following command in root view root platform activation key show usage radio 13 9 Setting the Time and Date Optional CLI Related Topics Configuring NTP CLI IP 20 use...

Page 340: ...o GMT This is used to offset the clock relative to GMT according to the global meridian location minutes offset Number 0 59 The required minutes relative to GMT This is used to offset the clock relative to GMT according to the global meridian location Examples The following command sets the GMT date and time to January 30 2014 3 07 pm and 58 seconds root platform management time services utc set d...

Page 341: ...ment time services daylight savings time set start date month 5 start date day 30 end date month 10 end date day 1 offset 20 13 10 Enabling the Interfaces CLI By default Ethernet traffic interfaces are disabled and must be manually enabled The Ethernet management interface is enabled Radio interfaces are enabled Note IP 20S and IP 20E units have a single radio interface To enable or disable an int...

Page 342: ...lot 2 port 1 admin up The following command disables radio interface 1 root platform if manager set interface type radio slot 2 port 1 admin down The following command disables Ethernet port 3 root platform if manager set interface type ethernet slot 1 port 3 admin down 13 11 Configuring the Radio Parameters CLI In order to establish a radio link you must Enter radio view Unmute the radio carrier ...

Page 343: ...us Table 74 Radio Mute Unmute CLI Parameters Parameter Input Type Permitted Values Description admin Variable on off Mutes on or unmutes off the radio Examples The following command mutes radio carrier 1 radio 2 1 rf mute set admin on The following command unmutes radio carrier 2 in an IP 20C unit radio 2 2 rf mute set admin off 13 11 3 Configuring the Transmit TX Level CLI To set the transmit TX ...

Page 344: ...e Optional Determines whether to apply the configured TX frequency value to the RX frequency of the remote unit Examples The following command sets the TX frequency of radio carrier 1 in an IP 20C or IP 20S unit to 12900000 KHz and sets the RX frequency of the remote unit to the same value radio 2 1 rf set tx frequency 12900000 local remote enable The following command sets the TX frequency of rad...

Page 345: ...ort acm support Note The list of available scripts reflects activation key enabled features Only scripts within your activation key enabled capacity will be displayed Table 77 MRMC Script CLI Parameters Parameter Input Type Permitted Values Description script type Variable normal asymmetrical Determines the type of scripts to be displayed normal Scripts for symmetrical bandwidth asymmetrical Scrip...

Page 346: ...ed enter the following command in radio view radio x x mrmc set acm support script id script id modulation fixed profile profile To display the current MRMC script configuration enter the following command in radio view radio x x mrmc show script configuration Table 78 MRMC Script Assignation to Radio Carrier CLI Parameters Parameter Input Type Permitted Values Description script id Number Depends...

Page 347: ...form satisfactorily at the highest level of modulation During fade conditions requiring a modulation drop most radio systems cannot increase transmit power to compensate for the signal degradation resulting in a deeper reduction in capacity The IP 20 is capable of adjusting power on the fly and optimizing the available capacity at every modulation point To enable Adaptive TX Power for a radio ente...

Page 348: ...dmin enable To disable FIPS mode enter the following command in root view root platform security fips mode set admin disable Note Changing the FIPS configuration causes a unit reset To display the unit s current FIPS setting enter the following command in root view root platform security fips mode show Status values are enable FIPS mode is enabled disable FIPS mode is disabled After enabling FIPS ...

Page 349: ...roprietary and Confidential Page 349 of 597 13 16 Creating Service s for Traffic CLI In order to pass traffic through the IP 20 you must configure Ethernet traffic services For configuration instructions see Configuring Ethernet Services CLI ...

Page 350: ...onfigurations CLI Configuration Supported Products Link to Configuration Instructions Multi Carrier ABC Multi Radio IP 20C Configuring Multi Carrier ABC CLI Link Aggregation LAG IP 20C S E Configuring Link Aggregation LAG Optional CLI XPIC IP 20C Configuring XPIC CLI HSB Radio Protection IP 20C S Configuring HSB Radio Protection CLI MIMO and Space Diversity IP 20C Configuring MIMO and Space Divers...

Page 351: ...on Load balancing is performed regardless of the number of MAC addresses or the number of traffic flows During fading events which cause ACM modulation changes each carrier fluctuates independently with hitless switchovers between modulations increasing capacity over a given bandwidth and maximizing spectrum utilization The result is 100 utilization of radio resources in which traffic load is bala...

Page 352: ...rrier ABC group go to Multi Carrier ABC group view and enter the following command multi carrier abc group id 1 detach member channel id channel id 14 2 4 Deleting a Multi Carrier ABC Group CLI To delete a Multi Carrier ABC group 1 Remove the members from the group See Removing Members from a Multi Carrier ABC Group CLI 2 Delete the group by entering the following command in root view root multi c...

Page 353: ...nts are attached to the interface Any classification rules defined for the interface are overridden by the classification rules defined for the LAG group When removing an interface from a LAG group the removed interface is assigned the default interface values There are no restrictions on the number of interfaces that can be included in a LAG It is recommended but not required that each interface ...

Page 354: ...static lag remove member interface eth slot slot port port To remove a member radio interface from a LAG go to interface view for the LAG and enter the following command eth group lagx port static lag remove member interface radio slot slot port port To delete a LAG go to interface view for the LAG and simply remove all the members as described above Table 80 LAG Group CLI Parameters Parameter Inp...

Page 355: ...ag2 eth type radio 2 1 exit root platform if manager set interface type ethernet slot 1 port 1 admin up root platform if manager set interface type ethernet slot 1 port 2 admin up The following command displays the name of the LAG to which Ethernet port 1 belongs eth type eth 1 1 static lag show name Static lag group name lag2 The following commands display details about the LAG root ethernet inte...

Page 356: ...nce Canceller XPIC is a feature that enables two radio carriers to use the same frequency with a polarity separation between them Since they will never be completely orthogonal some signal cancelation is required In addition XPIC includes an automatic recovery mechanism that ensures that if one carrier fails or a false signal is received the mate carrier will not be affected This mechanism also en...

Page 357: ...t requires very fine movements and it may take several minutes to achieve the best possible XPI It is recommended to achieve XPI levels between 25dB and 30dB 7 Enable all four radio carriers and check the XPI levels of both carriers at both sides of the link by going to radio view and entering one of the following commands radio x x modem pm xpi show interval 15min radio x x modem pm xpi show inte...

Page 358: ... topics HSB Radio Protection Overview CLI Configuring HSB Radio Protection CLI Configuring 2 2 HSB Protection on an IP 20C Unit CLI Viewing the Configuration of the Standby unit CLI Editing Standby Unit Settings CLI Viewing Link and Protection Status and Activity CLI Manually Switching to the Standby Unit CLI Disabling Automatic Switchover to the Standby Unit CLI Disabling Unit Protection CLI 14 5...

Page 359: ...ive unit 2 To enable protection enter the following command in root view root platform management protection set admin enable The system configures itself for HSB protection The system determines which unit is the Active unit based on a number of pre defined criteria When the system returns online all management must be performed via the Active unit using the IP address you defined for that unit T...

Page 360: ...it any time To view the settings of the standby unit you can run show commands in the standby unit To do so first enter the mate root context as described in Performing CLI operations on the Standby unit CLI then run the relevant show command and then switch back to the active unit 14 5 5 Editing Standby Unit Settings CLI Almost all settings of the standby unit are view only However several settin...

Page 361: ...You can view link and protection status and activity any time To view whether HSB protection is enabled or disabled enter the following command in root view root platform management protection show admin To view whether HSB protection is functional available in practice enter the following command in root view Note that protection is not functional if MIMO is configured or if the management connec...

Page 362: ... manual switch 14 5 8 Disabling Automatic Switchover to the Standby Unit CLI At any point you can perform lockout which disables automatic switchover to the standby unit To disable automatic switchover to the Standby unit use the following command in root view root platform management protection lockout set admin on To re enable automatic switchover to the standby unit use the following command in...

Page 363: ...hieves spatial multiplexing by creating an artificial phase de correlation by deliberate antenna distance at each site in deterministic constant distance At each site in an LoS MIMO configuration data to be transmitted over the radio link is split into two bit streams MIMO 2x2 or four bit streams MIMO 4x4 These bit streams are transmitted via two antennas In MIMO 2x2 the antennas use a single pola...

Page 364: ...a in band management When MIMO Mate Management Access is enabled the two units exchange incoming management packets ensuring that all management data is received by both units Note that MIMO Mate Management Access should only be enabled if both of the following conditions exist In band management External switch using LAG If either of these conditions is not present MIMO Mate Management Access sho...

Page 365: ...MO or Space Diversity Group CLI For 4x4 MIMO configurations and 2 2 Space Diversity configurations you must set the role of the group to Master or Slave This determines the role of the IP 20C unit in the overall MIMO or Space Diversity configuration To set the role of a MIMO or Space Diversity group enter the following command in root view root radio mimo set role group 1 mimo role slave master 14...

Page 366: ...d MIMO advanced state disabled MIMO RFU role slave MIMO 1st carrier MMI 0 0 MIMO 2nd carrier MMI 0 0 MIMO 1st carrier XPI 99 0 MIMO 2nd carrier XPI 99 0 Table 81 MMI and XPI Levels CLI Parameters Parameter Input Type MIMO group type The MIMO or Space Diversity configuration mimo 2x2 2x2 MIMO mimo 4x4 4x4 MIMO 1 plus 0 sd 1 0 BBS Space Diversity 2 plus 0 sd 2 0 XPIC with BBS Space Diversity MIMO gr...

Page 367: ...leting a MIMO or Space Diversity group you must first disable the group using the following command in root view root radio mimo set admin group 1 admin disable Note When the MIMO or Space Diversity group is disabled the system is automatically reset 2 Delete the MIMO or Space Diversity group by entering the following command in root view root radio mimo delete group 1 14 7 Operating an IP 20C in ...

Page 368: ...ersion for Initiating Communications CLI You can specify which IP protocol the unit will use when initiating communications such as downloading software sending traps pinging or exporting configurations The options are IPv4 or IPv6 To define which IP protocol the unit will use when initiating communications enter the following command in root view root platform management ip set ip address family ...

Page 369: ...e following command in radio view radio x x remote unit set default gateway IP ipv4 address To display the remote radio s default gateway enter the following command in radio view radio x x remote unit show default gateway Table 82 Remote Unit IP Address IPv4 CLI Parameters Parameter Input Type Permitted Values Description ipv4 address Dotted decimal format Any valid IPv4 address Sets the default ...

Page 370: ...nit set default gateway ipv6 IPv6 ipv6 address To display the remote radio s default gateway enter the following command in radio view radio x x remote unit show default gateway ipv6 Table 83 Remote Unit IP Address IPv6 CLI Parameters Parameter Input Type Permitted Values Description ipv6 address Eight groups of four hexadecimal digits separated by colons Any valid IPv6 address Sets the default ga...

Page 371: ...ot view root platform security protocols control snmp admin set admin To specify the SNMP version enter the following command in root view root platform security protocols control snmp version set version To specify the SNMP read and write communities enter the following command in root view root platform security protocols control snmpv1v2 set read community read community write community write c...

Page 372: ...ontrol snmp v3 authentication add v3 user name v3 user name v3 user password v3 user password v3 security mode v3 security mode v3 encryption mode v3 encryption mode v3 auth algorithm v3 auth algorithm v3 access mode v3 access mode To remove an SNMP v3 user enter the following command in root view root platform security protocols control snmp v3 authentication remove v3 user name v3 user name To d...

Page 373: ...cess and define an SNMPv3 user with User Name Geno Password abcdefgh security mode authPriv encryption mode DES authentication algorithm SHA and read write access root platform security protocols control snmp admin set enable root platform security protocols control snmp version set v3 root platform security protocols control snmp v1v2 block set yes root platform security protocols control snmp v3...

Page 374: ...r port manager port manager community manager community manager v3 user manager v3 user manager description manager description To enable an SNMP trap manger without modifying its parameters enter the following command in root view root platform security protocols control snmp trap manager admin manager id manager id manager admin manager admin To specify the number of minutes between heartbeat tr...

Page 375: ...l snmp version set is V3 enter the name of a V3 user defined in the system Note Make sure that an identical V3 user is also defined on the manager s side manager description Text String Enter a description of the trap manager optional manager heartbeat Number 0 1440 Specifies the number of minutes between heartbeat traps If you enter 0 no heartbeat traps will be sent Note To reduce unnecessary tra...

Page 376: ...ently running an older version 3 Reset The IP 20 is restarted in order to boot the new software and firmware versions Software and firmware releases are provided in a single bundle that includes software and firmware for all components in the system When you download a software bundle the system verifies the validity of the bundle The system also compares the files in the bundle to the files curre...

Page 377: ... channel server ipv6 set server ip server ipv6 directory directory username username password password To display the software download channel configuration enter one of the following commands root platform software download channel server show root platform software download channel server ipv6 show Table 87 Software Download CLI Parameters Parameter Input Type Permitted Values Description serve...

Page 378: ...stallation DOWNLOAD VERSION status download success process percentage 100 If the software version on the FTP or SFTP server has already been downloaded to the unit the following message appears DOWNLOAD VERSION status all components exist process percentage 0 Important Note If upgrading from version 7 9 or earlier Before you proceed to install the software repeat the download process even if the ...

Page 379: ...the installation process can take up to 30 minutes Only in the event that software installation was not successfully finished and more than 30 minutes have passed can the unit be rebooted If you configured delayed installation you can do any of the following Abort the current delayed installation To do so enter the following command root platform software install abort timer Show the time left unt...

Page 380: ...ystem parameters at the time of creation of the backup file An additional text file which enables you to write CLI scripts in order to make desired changes in the backed up configuration This file is executed by the system after restoring the configuration The system provides three restore points to manage different configuration files Each restore point contains a single configuration file Files ...

Page 381: ... ip address family is IPv6 enter the following command root platform configuration channel server ipv6 set ip address server ipv6 directory directory filename filename username username password password To set the file transfer protocol you want to use FTP or SFTP enter the following command root platform configuration channel set protocol ftp sftp To display the FTP channel parameters for import...

Page 382: ... 1 99 in the directory current with file name version_8_backup zip user name anonymous and password 12345 root platform configuration channel server set server ip 192 168 1 99 directory current filename version_8_backup zip username anonymous password 12345 15 5 3 Backing up and Exporting a Configuration File CLI To save the current configuration as a backup file to one of the restore points enter...

Page 383: ...ration Management Parameters and Backing up and Exporting a Configuration File To import a configuration file enter the following command in root view root platform configuration configuration file import restore point To restore a configuration from a restore point to become the active configuration file enter the following command in root view root platform configuration configuration file resto...

Page 384: ...ported configuration file See Importing and Restoring a Configuration File CLI The unit is automatically reset During initialization the CLI script is executed line by line Note If any specific command in the CLI script requires reset the unit is reset when that command is executed During initialization following the reset execution of the CLI script continues from the following command 15 6 Setti...

Page 385: ...m management system latitude set latitude To define the unit s longitude coordinates enter the following command in root view root platform management system longitude set longitude To define the type of measurement unit you want the system to use enter the following command in root view root platform management set unit_measure_format unit_measure_format To display the type of measurement unit us...

Page 386: ...to neutralize the effects of variable latency To configure NTP enter the following command in root view root platform management ntp set admin admin ntp version ntp version ntp server ip address 1 ntp server ip address To display the current NTP configuration enter the following command in root view root platform management ntp show status Table 92 NTP CLI Parameters Parameter Input Type Permitted...

Page 387: ...ter the following command in root view root platform management inventory show info For example root platform management inventory show info System information card name IP 20 Subtype 350 part number 22 0001 0 serial number F493606212 company name Ceragon Networks Ltd product name AODU DC All outdoor dual radio carriers in one product product description AODU DC All outdoor dual radio carriers in ...

Page 388: ... Configuring Link Aggregation LAG Optional CLI Configuring XPIC CLI Configuring HSB Radio Protection CLI Configuring MIMO and Space Diversity CLI Operating an IP 20C in Single Radio Carrier Mode CLI Note that to view and configure radio parameters you must first enter the radio s view level in the CLI For details refer to Entering Radio View CLI Note For convenience this User Guide generally shows...

Page 389: ...ollowing command in radio view radio x x remote unit mute show status Table 93 Remote Radio Mute Unmute CLI Parameters Parameter Input Type Permitted Values Description admin Variable on off Mutes on or unmutes off the remote unit The following command mutes the remote radio radio 2 1 remote unit mute set admin on The following command unmutes the remote radio radio 2 1 remote unit mute set admin ...

Page 390: ...el for the ATPC mechanism The following command sets the ATPC RX reference level of the remote radio to 55 radio 2 1 remote unit atpc set ref level 55 16 2 Configuring ATPC CLI Automatic TX Power Control ATPC is a closed loop mechanism by which each carrier adjusts its transmitted signal power according to the indication received across the link in order to achieve a desired RSL on the other side ...

Page 391: ...he Header De Duplication module includes an algorithm for learning each new flow and implements compression on the flow type starting with the next frame of that flow type You can determine the depth to which the compression mechanism operates from Layer 2 to Layer 4 You must balance the depth of compression against the number of flows in order to ensure maximum efficiency Multi Layer Enhanced com...

Page 392: ...cation operates on Layer 2 Layer 3 and on the Tunnel and T 3 layers for packets carrying GTP or GRE frames Tunnel Layer4 Header De Duplication operates on Layer 2 Layer 3 and on the Tunnel T 3 and T 4 layers for packets carrying GTP or GRE frames The following command enables Layer 2 Header De Duplication on radio carrier 1 root radio slot 2 port 1 radio 2 1 compression header compression set Laye...

Page 393: ...out number of active flows in count The number of Header De Duplication flows that are active on the TX side 16 4 Configuring Frame Cut Through CLI Using the Frame Cut Through feature frames assigned to queues with 4th priority pre empt frames already in transmission over the radio from other queues Transmission of the pre empted frames is resumed after the cut through with no capacity loss or re ...

Page 394: ...AES is enabled and configured separately for each radio carrier IP 20 uses a dual key encryption mechanism for AES The user provides a master key The master key can also be generated by the system upon user command The master key is a 32 byte symmetric encryption key The same master key must be manually configured on both ends of the encrypted link The session key is a 32 byte symmetric encryption...

Page 395: ...f the radio interface enter the following command in Traffic Encryption view Traffic Encryption 2 x payload encryption mode show The following display indicates that payload encryption is enabled on radio interface 1 Traffic Encryption 2 1 payload encryption mode show Admin Mode AES 256 The following display indicates that payload encryption is disabled on radio interface 1 Traffic Encryption 2 1 ...

Page 396: ...m the output of this command To generate the master key automatically enter the following command in Traffic Encryption view Traffic Encryption 2 x master key generate A random master key is generated You must copy and paste this key to the remote end of the link to ensure that both sides of the link have the same master key To display and copy the master key enter the traffic encryption status sh...

Page 397: ...ay the session key regeneration interval enter the following command in Traffic Encryption view Traffic Encryption 2 x payload encryption session key period show Note Any time payload encryption fails the Operational status of the link is Down until payload encryption is successfully restored ...

Page 398: ...the XPI Thresholds and Displaying the XPI PMs CLI Displaying ACM PMs CLI 16 6 1 Displaying General Modem Status and Defective Block PMs CLI To display the general status of the modem enter the following command in radio view radio x x modem show status The following is a sample output of the modem show status command MSE db 99 00 Defective Blocks count 0 Current Tx profile 0 Current Tx QAM 4 Curre...

Page 399: ...egate show interval 15min Modem BER PM table Interval Integrity ES SES UAS BBE 0 1 0 0 333 0 1 1 0 0 900 0 2 1 0 0 900 0 3 1 0 0 900 0 4 1 0 0 900 0 5 1 0 0 900 0 6 1 0 0 900 0 7 1 0 0 900 0 8 1 0 0 900 0 radio 2 1 To display modem BER PMs in daily intervals enter the following command in radio view radio x x framer pm aggregate show interval 24hr The following is a sample output of the framer pm ...

Page 400: ...lowing command in radio view radio x x modem show ber The excessive ber parameter determines whether or not excessive BER is propagated as a fault and considered a system event For example if excessive ber is enabled excessive BER can trigger a protection switchover To enable or disable Excessive BER Admin enter the following command in root view root radio excessive ber set admin admin To display...

Page 401: ...reshold2 Number 75 15 The second RSL threshold dBm The following command sets the RSL thresholds to 30 dBm and 60 dBm respectively radio 2 1 rf pm rsl set threshold1 30 threshold2 60 16 6 5 Configuring TSL Thresholds CLI The number of seconds during which the TX Signal Level exceeds the TSL threshold are counted as TSL Exceed Threshold Seconds See Displaying RSL and TSL Levels CLI To set the TSL t...

Page 402: ...wer failure that occurred at that time Min RSL dBm The minimum RSL Received Signal Level that was measured during the interval Max RSL dBm The maximum RSL Received Signal Level that was measured during the interval Min TSL dBm The minimum TSL Transmit Signal Level that was measured during the interval Max TSL dBm The maximum TSL Transmit Signal Level that was measured during the interval TSL excee...

Page 403: ... The BER level above which a Signal Degrade alarm is issued for errors detected over the radio link The following command sets the Signal Degrade threshold at 1e 7 radio 2 1 modem signal degrade set threshold 1e 7 16 6 8 Configuring the MSE Thresholds and Displaying the MSE PMs CLI To configure the MSE Mean Square Error threshold enter the following command in radio view radio x x modem set mse ex...

Page 404: ...0 0 00 900 7 1 0 00 0 00 900 8 1 0 00 0 00 900 9 1 0 00 0 00 900 10 1 0 00 0 00 900 radio 2 1 To display MSE Mean Square Error PMs in daily intervals enter the following command in radio view radio x x modem pm mse show interval 24hr The following is sample output of the modem pm mse show interval 24hr command radio 2 1 modem pm mse show interval 24hr Modem MSE PM Table Interval Integrity Min MSE ...

Page 405: ...ds Indicates the number of seconds the MSE exceeded the MSE PM threshold during the interval The following command sets the MSE threshold to 30 radio 2 1 modem set mse exceed threshold 30 16 6 9 Configuring the XPI Thresholds and Displaying the XPI PMs CLI To configure the modem XPI threshold for calculating XPI Exceed Threshold seconds enter the following command in radio view radio x x modem set...

Page 406: ...ld seconds 1 1 55 00 0 00 0 2 1 55 00 0 00 0 3 1 55 00 0 00 0 4 1 55 00 0 00 0 5 1 55 00 0 00 0 6 1 55 00 0 00 0 7 1 55 00 0 00 0 8 1 55 00 0 00 0 9 1 55 00 0 00 0 10 1 55 00 0 00 0 11 1 55 00 0 00 0 12 1 55 00 0 00 0 13 1 55 00 0 00 0 14 1 55 00 0 00 0 15 1 55 00 0 00 0 16 1 55 00 0 00 0 17 1 55 00 0 00 0 18 1 55 00 0 00 0 19 1 55 00 0 00 0 20 1 55 00 0 00 0 radio 2 1 To display XPI PMs in daily ...

Page 407: ... 00 0 00 0 20 1 55 00 0 00 0 radio 2 1 Table 108 XPI PMs CLI Parameter Description Interval The number of the interval 1 30 for daily PM reports and 1 96 for 15 minute PM reports Integrity Indicates whether the values received at the time and date of the measured interval are reliable 1 in the column indicates that the values are not reliable due to a possible power surge or power failure that occ...

Page 408: ...min MRMC PM Table Interval Integrity Min profile Max profile Min bitrate Max bitrate 0 1 0 0 43389 43389 1 1 0 0 43389 43389 2 1 0 0 43389 43389 3 1 0 0 43389 43389 4 1 0 0 43389 43389 5 1 0 0 43389 43389 6 1 0 0 43389 43389 7 1 0 0 43389 43389 8 1 0 0 43389 43389 9 1 0 0 43389 43389 10 1 0 0 43389 43389 radio 2 1 To display ACM PMs in daily intervals enter the following command in radio view radi...

Page 409: ...ts and 1 96 for 15 minute PM reports Integrity Indicates whether the values received at the time and date of the measured interval are reliable 1 in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time Min profile Indicates the minimum ACM profile that was measured during the interval Max profile Indicates the maximum ACM p...

Page 410: ...LI Defining the MAC Address Forwarding Table for a Service CLI 17 1 1 Ethernet Services Overview CLI Users can define up to 64 Ethernet services Each service constitutes a virtual bridge that defines the connectivity between logical ports in the IP 20 network element This version of IP 20 supports the following service types Multipoint MP Point to Point P2P Management MNG In addition to user defin...

Page 411: ... EVC ID within the same region It is recommended to follow these guidelines for creating service points Always use SNP service points on NNI ports and SAP service points on UNI ports For each logical interface associated with a specific service there should never be more than a single service point The transport VLAN ID should be unique per service within a single region That is no two services sh...

Page 412: ...e service This parameter does not affect the network element s behavior but is used by the NMS for topology management Example The following command adds a Multipoint service with Service ID 18 root ethernet service add type mp sid 18 admin operational evc id Ring_1 description east_west The following command adds a Point to Point service with Service ID 10 root ethernet service add type p2p sid 1...

Page 413: ...example service 1 service info show service info service id 1 service type p2p service admin operational Maximal MAC address learning entries 131072 default cos 0 cos mode preserve sp cos decision EVC id N A EVC description N A split horizon group disable configured multicast grouping no service 1 To display the attributes of a service and its service points go to service view for the service and ...

Page 414: ...vice admin mode To display a service s admin mode go to service view for the service and enter the following command Service SID service admin show state Table 113 Ethernet Service Operational State CLI Parameters Parameter Input Type Permitted Values Description service admin mode Variable Operational reserved The administrative state of the service operational The service is functional reserved ...

Page 415: ...e the Default CoS service SID service default cos set cos cos Table 114 Ethernet Service CoS Mode CLI Parameters Parameter Input Type Permitted Values Description cos mode Variable default cos preserve sp cos decision default cos Frames passing through the service are assigned the default CoS defined below This CoS value overrides whatever CoS may have been assigned at the service point or interfa...

Page 416: ...Parameter Input Type Permitted Values Description evcid Text String Up to 20 characters Defines an Ethernet Virtual Connection EVC ID This parameter does not affect the network element s behavior but is used by the NMS for topology management evc description Text String Up to 64 characters A text description of the service This parameter does not affect the network element s behavior but is used b...

Page 417: ...gical interface Service points define the movement of frames through the service Each service point includes both ingress and egress attributes Each service point for a Point to Point or Multipoint service can be either a Service Access Point SAP or a Service Network Point SNP A Point to Point service can also use Pipe service points An SAP is equivalent to a UNI in MEF terminology and defines the...

Page 418: ...lassification CLI SNP Classification CLI Pipe Service Point Classification CLI MNG Service Point Classification CLI Overview of Service Point Classification CLI Service points connect the service to the network element interfaces It is crucial that the network element have a means to classify incoming frames to the proper service point This classification process is implemented by means of a parsi...

Page 419: ...nts can be used with the following Attached Interface Types Dot1q All C VLANs and untagged frames that enter the interface are classified to the same service point S Tag All S VLANs and untagged frames that enter the interface are classified to the same service point MNG Service Point Classification CLI Management service points can be used with the following Interface Types Dot1q A single C VLAN ...

Page 420: ... Legal Service Point Interface Type Combinations per Interface Pipe and MNG SP Type Pipe MNG SP Type Attached Interface Type 802 1q S Tag 802 1q Q in Q S Tag SAP 802 1q No No Yes No No Bundle C No No Yes No No Bundle S No No No Yes No All to One No No No No No Q in Q No No No Yes No SNP 802 1q No No Yes No No S Tag No No No No Yes Pipe 802 1q Only one Pipe SP Allowed No Yes No No S Tag No Only one...

Page 421: ...nterface group slot slot port port vlan vlan sp name sp name To add a service point with a Bundle C interface type go to service view for the service and enter the following command service SID sp add sp type sp type int type bundle c spid sp id interface group interface group slot slot port port sp name sp name To add a service point with a Bundle S interface type go to service view for the servi...

Page 422: ...t Only valid for SAP service point types dot1q A single C VLAN is classified to the service point Valid for all service point types s tag A single S VLAN is classified to the service point Valid for SNP and MNG service point types bundle c tag A set of multiple C VLANs is classified to the service point Only valid for SAP service point types bundle s tag A single S VLAN and a set of multiple C VLA...

Page 423: ...P 20C units 1 2 For a radio interface in IP 20S and IP 20E units 1 The port or radio carrier on which the service point is located vlan Number or Variable 1 4094 except 4092 which is reserved for the default management service or Untagged Defines the VLAN classified to the service point This parameter should not be included for service points with an interface type of bundle C tag For instructions...

Page 424: ...ID 10 to Service 37 with interface type bundle s tag This service point is located on radio carrier 2 in an IP 20C unit S VLAN 100 is classified to the service point service 37 sp add sp type sap int type bundle s tag spid 10 interface radio slot 2 port 2 outer vlan 100 sp name Radio The following command adds an SAP service point with Service Point ID 10 to Service 37 with interface type qinq Thi...

Page 425: ...D 1 to Service 1 with interface type dot1q This service point is connected to Eth1 service 1 sp add sp type pipe int type dot1q spid 1 interface eth slot 1 port 1 sp name pipe_dot1q The following command adds a Pipe service point with Service Point ID 2 to Service 1 with interface type dot1q This service point is located on radio carrier 1 service 1 sp add sp type pipe int type dot1q spid 2 interf...

Page 426: ...d Values Description sp id Number 1 32 for P2P and MP services 1 30 for MNG services The Service Point ID state Variable Allow disable Determines whether frames with a broadcast destination MAC address are allowed to ingress the service via this service point Examples The following command allows frames with a broadcast destination MAC address to ingress Service 37 via Service Point 1 service 37 s...

Page 427: ...on made at the interface level This decision can still be overwritten at the service level cos Number 0 7 If cos mode is sp def cos this is the CoS assigned to frames that pass through the service point This decision can be overwritten on the service level Examples The following commands configure Service Point 1 in Service 37 to apply a CoS value of 5 to frames that ingress the service point serv...

Page 428: ... disable 17 1 4 5 Configuring Service Point Egress Attributes CLI A service point s egress attributes are attributes that operate upon frames ingressing via the service point This includes VLAN preservation and marking attributes This section includes Configuring VLAN and CoS Preservation CLI Configuring Service Bundles CLI Attaching a VLAN Bundle to a Service Point CLI Configuring VLAN and CoS Pr...

Page 429: ...lue might have been re assigned by the interface service point or service or whatever value results from marking see Configuring Marking CLI Examples The following command enables C VLAN CoS preservation for Service Point 1 on Service 37 service 37 sp cvlan cos preservation mode set spid 1 mode enable The following command disables C VLAN CoS preservation for Service Point 1 on Service 37 service ...

Page 430: ...e results from marking see Configuring Marking CLI Examples The following command enables C VLAN preservation for Service Point 1 on Service 37 service 37 sp cvlan preservation mode set spid 1 mode enable The following command disables C VLAN preservation for Service Point 1 on Service 37 service 37 sp cvlan preservation mode set spid 1 mode disable Configuring S VLAN CoS Preservation CLI To confi...

Page 431: ...1 on Service 37 service 37 sp svlan cos preservation mode set spid 1 mode enable The following command disables S VLAN CoS preservation for Service Point 1 on Service 37 service 37 sp svlan cos preservation mode set spid 1 mode disable Configuring Service Bundles CLI You can use service bundles to personalize common sets of egress queue attributes that can be applied to multiple service points In ...

Page 432: ...bundle s tag service point go to service view for the service and enter the following command service SIP sp bundle cvlan remove spid sp id vlan vlan to vlan to vlan To removed untagged frames from a bundle c tag or bundle s tag service point go to service view for the service and enter the following command service SIP sp bundle remove untagged spid sp id To display a service point s attributes i...

Page 433: ...ributes go to service view for the service to which the service point belongs and enter the following command service SID sp service point info show spid sp id Table 130 Display Service Point Attributes CLI Parameters Parameter Input Type Permitted Values Description sp id Number 1 32 for P2P and MP services 1 30 for MNG services The Service Point ID Example The following command displays the attr...

Page 434: ...0 can learn up to 131 072 MAC addresses If necessary due to security issues or resource limitations you can limit the size of the MAC address forwarding table The maximum size of the MAC address forwarding table is configurable per service in granularity of 16 entries When a frame arrives via a specific service point the learning mechanism checks the MAC address forwarding table for the service to...

Page 435: ...To display the global aging time for the MAC address forwarding table enter the following command root ethernet service learning ageing time show Table 133 MAC Address Forwarding Table Aging Time CLI Parameters Parameter Input Type Permitted Values Description time Number 15 3825 The global aging time for the MAC address forwarding table in seconds Example The following command sets the global agi...

Page 436: ...ac 00 11 22 33 44 55 spid 1 The following command deletes MAC address 00 11 22 33 44 55 associated with Service Point 1 from the MAC address forwarding table for Service 10 service 10 service mac learning table del static mac 00 11 22 33 44 55 spid 1 17 1 5 5 Displaying the MAC Address Forwarding Table CLI You can display the MAC address forwarding table for an interface a service or for the entir...

Page 437: ...ble MAC address learning for a service point go to service view for the service and enter the following command service SID sp learning state set spid sp id learning learning Table 135 Enabling MAC Address Learning CLI Parameters Parameter Input Type Permitted Values Description sp id Number 1 32 The Service Point ID of the service point associated with the MAC address learning Variable Enable dis...

Page 438: ...iguring the C VLAN Ethertype CLI Configuring the MRU CLI 17 2 1 Configuring the S VLAN Ethertype CLI To configure the S VLAN Ethertype enter the following command in root view root ethernet generalcfg ethertype set svlan value ethertype To display the system S VLAN ethertype enter the following command in root view root ethernet generalcfg ethertype show svlan Table 136 Configure S VLAN Ethertype ...

Page 439: ...ze size To display the system MRU enter the following command in root view root ethernet generalcfg mru show Table 137 Configure MRU CLI Parameters Parameter Input Type Permitted Values Description size Number 64 to 9612 Defines the global size in bytes of the Maximum Receive Unit MRU Frames that are larger than the global MRU will be discarded Example For example the following command sets the sy...

Page 440: ...haracteristics such as media type port speed duplex and auto negotiation are configured on the physical interface level Ethernet services QoS and OAM characteristics are configured on the logical interface level Note You cannot change the configuration of the Management interface By default the Management interface has the following configuration Auto negotiation ON Full Duplex RJ45 100Mbps This s...

Page 441: ...ing Interface View CLI Parameters Parameter Input Type Permitted Values Description size Number 64 to 9612 Defines the global size in bytes of the Maximum Receive Unit MRU Frames that are larger than the global MRU will be discarded slot Number Ethernet 1 Radio 2 Depends on the interface and unit type port Number GbE 1 1 GbE 2 2 GbE 3 3 Radio Carrier 1 1 Radio Carrier 2 IP 20C only 2 The port numb...

Page 442: ... The following prompt appears eth type group 64 1 Note For simplicity the examples in the following sections show the prompt for an Ethernet interface 17 3 2 Displaying the Operational State of the Interfaces in the Unit CLI To display a list of all interfaces in the unit and their operational states enter the following command root platform if manager show interfaces The following is a sample out...

Page 443: ...ayer 1 media type RJ45 An electrical RJ 45 Ethernet interface SFP An optical SFP Ethernet interface Example The following command sets GbE 1 to RJ 45 electrical eth type eth 1 2 media type state set rj45 The following command sets GbE 2 to SFP eth type eth 1 2 media type state set sfp 17 3 5 Configuring an Interface s Speed and Duplex State CLI To configure an Ethernet interface s maximum speed an...

Page 444: ...ion autoneg state Variable On off Enables or disables auto negotiation on the physical interface Example The following command enables auto negotiation for GbE 2 eth type eth 1 2 autoneg state set on 17 3 7 Configuring an Interface s IFG CLI The IFG attribute represents the physical port Inter frame gap Although you can modify the IFG field length it is strongly recommended not to modify the defau...

Page 445: ...type eth 1 1 preamble set 8 The following command displays the current preamble for GbE 1 eth type eth 1 1 preamble get 17 3 9 Adding a Description for the Interface CLI You can add a text description for an interface To add a description go to interface view for the interface and enter the following command eth type eth x x description set description To delete a description go to interface view ...

Page 446: ...rt 1 eth type eth 1 1 rmon statistics show clear on read yes layer 1 yes The following commands enter interface view for radio carrier 1 in an IP 20C or IP 20S unit and display statistics for the interface without clearing the statistics root ethernet interfaces radio slot 2 port 1 eth type radio 2 1 rmon statistics show clear on read no layer 1 no 17 4 Configuring Automatic State Propagation CLI ...

Page 447: ... eth slot eth slot eth port eth port multi radio group multi radio group To configure propagation of an HSB SD protection group failure to an Ethernet port use the following command root auto state propagation add eth port to protection group eth slot eth slot eth port eth port protection group protection group Table 146 Automatic State Propagation to an Ethernet Port CLI Parameters Parameter Inpu...

Page 448: ...ort and determine whether remote interface failures are also propagated use the following command root auto state propagation configure eth port eth slot eth slot eth port eth port asp admin asp admin remote fault trigger admin remote fault trigger admin csf mode admin csf mode admin Table 147 Enable Automatic State Propagation CLI Parameters Parameter Input Type Permitted Values Description eth s...

Page 449: ...ate Propagation CLI Parameters Parameter Input Type Permitted Values Description eth slot Number 1 Always enter 1 eth port Number 1 3 The interface to which you wanted to propagate faults from the selected radio or group 17 4 4 Displaying Automatic State Propagation Parameters CLI To display all automatic state propagation configurations on the unit use the following command root auto state propag...

Page 450: ...ce go to interface view for the interface and enter the following command eth type eth x x rmon statistics show clear on read clear on read layer 1 layer 1 Table 150 RMON Statistics CLI Parameters Parameter Input Type Permitted Values Description clear on read Boolean yes no If you enter yes the statistics are cleared once you display them layer 1 Boolean yes no yes Statistics are represented as L...

Page 451: ...play whether or not PM gathering is enabled for an Ethernet interface as well as the configured thresholds go to interface view for the interface and enter the following command eth type eth x x pm show configuration Table 151 Port PM Thresholds CLI Parameters Parameter Input Type Permitted Values Description rx layer1 rate thershold Number 0 4294967295 The exceed threshold for port RX PMs in byte...

Page 452: ...rvals go to interface view for the interface and enter the following command eth type eth x x pm show rx mcast packets interval 15min To display RX multicast packet PMs in 24 hour intervals go to interface view for the interface and enter the following command eth type eth x x pm show rx mcast packets interval 24hr To display Layer 1 RX PMs in bytes per second in 15 minute intervals go to interfac...

Page 453: ...Layer 1 TX PMs in bytes per second in 24 hour intervals go to interface view for the interface and enter the following command eth type eth x x pm show tx bytes layer1 interval 24hr To display Layer 2 TX PMs in bytes per second in 15 minute intervals go to interface view for the interface and enter the following command eth type eth x x pm show tx bytes layer2 interval 15min To display Layer 2 TX ...

Page 454: ...er second for the measured time interval Average TX Packets The average rate of TX packets per second for the measured time interval Peak TX Broadcast Packets The peak rate of TX broadcast packets per second for the measured time interval Average TX Broadcast Packets The average rate of TX broadcast packets per second for the measured time interval Peak TX Multicast Packets The peak rate of TX mul...

Page 455: ...eragon Proprietary and Confidential Page 455 of 597 17 5 4 Clearing Ethernet Port PMs CLI To clear all PMs for an Ethernet interface go to interface view for the interface and enter the following command eth type eth x x pm clear all ...

Page 456: ...ss Path Classification on a Service CLI 18 1 1 Classification Overview CLI IP 20 supports a hierarchical classification mechanism The classification mechanism examines incoming frames and determines their CoS and Color The benefit of hierarchical classification is that it provides the ability to zoom in or zoom out enabling classification at higher or lower levels of the hierarchy The nature of ea...

Page 457: ...xample if classification is based on DSCP priority bits If no match is found at the logical interface level the default CoS is applied to incoming frames at this level In this case the Color of the frame is assumed to be Green 18 1 3 Configuring VLAN Classification and Override CLI You can specify a specific CoS and Color for a specific VLAN ID In the case of double tagged frames the match must be...

Page 458: ...le green yellow The Color applied to matching frames Examples The following command configures the classification mechanism on GbE 1 to override the CoS and Color values of frames with S VLAN ID 10 and C VLAN ID 30 with a CoS value of 6 and a Color value of Green eth type eth 1 1 vlan cos override set outer vlan id 10 inner vlan id 30 use cos 6 use color green The following command configures the ...

Page 459: ...ust mode for 802 1p classification go to interface view for the interface and enter the following command eth type eth x x classification show 802 1p state Table 154 802 1p Trust Mode CLI Parameters Parameter Input Type Permitted Values Description 802 1p Variable trust un trust Enter the interface s trust mode for user priority UP bits trust The interface performs QoS and color classification acc...

Page 460: ...onfigurable Color configurable 0 0 0 Green 0 1 0 Yellow 1 0 1 Green 1 1 1 Yellow 2 0 2 Green 2 1 2 Yellow 3 0 3 Green 3 1 3 Yellow 4 0 4 Green 4 1 4 Yellow 5 0 5 Green 5 1 5 Yellow 6 0 6 Green 6 1 6 Yellow 7 0 7 Green 7 1 7 Yellow To modify the C VLAN 802 1 UP and CFI bit classification table enter the following command root ethernet qos 802 1q up bits mapping tbl set 802 1p 802 1p cfi cfi cos cos...

Page 461: ... command maps frames with an 802 1p UP bit value of 1 and a CFI bit value of 0 to CoS 1 and Green color root ethernet qos 802 1q up bits mapping tbl set 802 1p 1 cfi 0 cos 1 color green 18 1 4 3 Modifying the S VLAN 802 1 UP and DEI Bit Classification Table CLI The following table shows the default values for the S VLAN 802 1 UP and DEI bit classification table Table 157 S VLAN 802 1 UP and DEI Bi...

Page 462: ...s with an 802 1ad UP bit value of 7 and a DEI bit value of 0 to CoS 7 and Green color root ethernet qos 802 1ad up bits mapping tbl set 802 1p 7 dei 0 cos 7 color green 18 1 5 Configuring DSCP Classification CLI When DSCP classification is set to Trust mode the interface performs QoS and Color classification according to a user configurable DSCP to CoS and Color classification table 802 1p classif...

Page 463: ...ion Examples The following command enables DSCP trust mode for GbE 1 eth type eth 1 1 classification set ip dscp trust The following command disables DSCP trust mode for GbE 1 eth type eth 1 1 classification set ip dscp un trust 18 1 5 2 Modifying the DSCP Classification Table CLI The following table shows the default values for the DSCP classification table Table 160 DSCP Classification Table Def...

Page 464: ...ng tbl set dscp dscp cos cos color color To display the DSCP classification table enter the following command root ethernet qos dscp mapping tbl show Table 161 Modify DSCP Classification Table CLI Parameters Parameter Input Type Permitted Values Description dscp Number Valid DSCP values Refer to the DSCP column in the table above The DSCP value to be mapped cos Number 0 7 The CoS assigned to frame...

Page 465: ...ication go to interface view for the interface and enter the following command eth type eth x x classification set mpls mpls To display the trust mode for MPLS classification go to interface view for the interface and enter the following command eth type eth x x classification show mpls state Table 162 Trust Mode for MPLS CLI Parameters Parameter Input Type Permitted Values Description mpls Variab...

Page 466: ... qos mpls exp bits mapping tbl set mpls exp mpls exp cos cos color color To display the MPLS EXP bit classification table enter the following command root ethernet qos mpls mapping tbl show Table 164 MPLS EXP Bit Classification Table Modification CLI Parameters Parameter Input Type Permitted Values Description mpls exp Number 0 7 The MPLS EXP bit to be mapped cos Number 0 7 The CoS assigned to fra...

Page 467: ... eth x x classification show default cos Table 165 Default CoS CLI Parameters Parameter Input Type Permitted Values Description default cos Number 0 7 Enter the default CoS value for frames passing through the interface This value can be overwritten on the service point and service level Example The following command sets the default CoS for GbE 1 as 7 eth type eth 1 1 classification set default c...

Page 468: ... IP 20 switching fabric supports hierarchical policing on the logical interface level You can define up to 250 rate meter policer profiles Note Policing on the service point level and the service point and CoS level is planned for future release The IP 20 s policer mechanism is based on a dual leaky bucket mechanism TrTCM The policers can change a frame s color and CoS settings based on CIR EIR CB...

Page 469: ...If the value is 0 all incoming CIR traffic is dropped cbs Number 0 128 The Committed Burst Rate CBR for the rate meter policer in Kbytes eir Number 0 or 64 000 1 000 000 000 The Excess Information Rate EIR for the rate meter policer in bits per second If the value is 0 all incoming EIR traffic is dropped ebs Number 0 128 The Excess Burst Rate EBR for the rate meter policer in Kbytes color mode Var...

Page 470: ... root ethernet qos rate meter edit profile id 50 cir 128000 cbs 5 eir 128000 ebs 5 color mode color aware coupling flag enable rate meter profile name 256 kBytes This edited profile includes the following parameters CIR 128 000 bps CBS 5 Kbytes EIR 128 000 bps EBS 5 Kbytes Color Aware mode Coupling Flag enabled 18 2 3 Displaying Rate Meter Profiles CLI You can display all configured rate meter pol...

Page 471: ...olicer for Multicast Traffic CLI Assigning a Rate Meter Policer for Broadcast Traffic CLI Assigning a Rate Meter Policer per Ethertype CLI 18 2 5 1 Assigning a Rate Meter Policer for Unicast Traffic CLI To assign a rate meter policer profile for unicast traffic to the interface go to interface view for the interface and enter the following command eth type eth x x rate meter unicast add capability...

Page 472: ...he interface go to interface view for the interface and enter the following command eth type eth x x rate meter multicast add capability admin state admin state profile id profile id To change the rate meter policer profile for multicast traffic go to interface view for the interface and enter the following command eth type eth x x rate meter multicast edit admin state admin state profile id profi...

Page 473: ... broadcast edit admin state admin state profile id profile id To display the current broadcast rate meter policer settings for an interface go to interface view for the interface and enter the following command eth type eth x x rate meter broadcast show configuration To delete the rate meter policer profile for broadcast traffic go to interface view for the interface and enter the following comman...

Page 474: ... eth x x rate meter ethertype1 show configuration eth type eth x x rate meter ethertype2 show configuration eth type eth x x rate meter ethertype3 show configuration To delete the rate meter policer profile for an Ethertype go to interface view for the interface and enter one or more of the following commands eth type eth x x rate meter ethertype1 delete eth type eth x x rate meter ethertype2 dele...

Page 475: ...A rate meter can measure CIR and EIR at Layer 1 or Layer 2 rates Layer 1 capacity is equal to Layer 2 capacity plus 20 additional bytes for each frame due to the preamble and Inter Frame Gap IFG In most cases the preamble and IFG equals 20 bytes but other values are also possible Line compensation defines the number of bytes to be added to each frame for purposes of CIR and EIR calculation When Li...

Page 476: ...ics clear on read clear on read layer 1 layer 1 eth type eth x x rate meter multicast show statistics clear on read clear on read layer 1 layer 1 eth type eth x x rate meter broadcast show statistics clear on read clear on read layer 1 layer 1 eth type eth x x rate meter ethertype1 show statistics clear on read clear on read layer 1 layer 1 eth type eth x x rate meter ethertype2 show statistics cl...

Page 477: ...ate meter unicast show statistics clear on read yes layer 1 no eth type eth 1 1 rate meter multicast show statistics clear on read yes layer 1 no eth type eth 1 1 rate meter broadcast show statistics clear on read yes layer 1 no eth type eth 1 1 rate meter ethertype1 show statistics clear on read yes layer 1 no eth type eth 1 1 rate meter ethertype2 show statistics clear on read yes layer 1 no eth...

Page 478: ...LAN tagged The marking is performed according to global marking tables that describe the 802 1p UP bits and the CFI bits for C VLAN tags or DEI bits for S VLAN tags The marking mode attribute in the service point egress attributes determines whether the frame is marked as Green or Yellow according to the calculated color Note The calculated color is sent to the queue manager regardless of whether ...

Page 479: ...outer VLAN is set to disable the service point re marks the C VLAN or S VLAN 802 1p UP bits of egress frames according to the calculated CoS and Color and the user configurable 802 1Q and 802 1AD marking tables If mode is set to enable and CoS preservation for the relevant outer VLAN is also set to enable re marking is not performed If mode is set to disable and CoS preservation for the relevant o...

Page 480: ...r Configurable 0 Green 0 0 0 Yellow 0 1 1 Green 1 0 1 Yellow 1 1 2 Green 2 0 2 Yellow 2 1 3 Green 3 0 3 Yellow 3 1 4 Green 4 0 4 Yellow 4 1 5 Green 5 0 5 Yellow 5 1 6 Green 6 0 6 Yellow 6 1 7 Green 7 0 7 Yellow 7 1 To modify the 802 1q CoS and Color to UP and CFI bit mapping table enter the following command in root view root ethernet qos 802 1q up bits marking tbl set cos cos color color 802 1p 8...

Page 481: ...ng command maps CoS 0 Green to 802 1p UP bit 0 and CFI bit 0 root ethernet qos 802 1q up bits marking tbl set cos 0 color green 802 1p 0 cfi 0 18 3 4 Marking Table for S VLAN UP Bits CLI When marking is performed the following table is used by the marker to decide which CoS and Color to use as the egress CoS and Color bits for S VLAN tagged frames Table 176 802 1ad UP Marking Table S VLAN CoS Colo...

Page 482: ...owing command in root view root ethernet qos 802 1ad up bits marking tbl show Table 177 802 1ad UP Marking Table S VLAN CLI Parameters Parameter Input Type Permitted Values Description cos Number 0 7 The CoS value to be mapped color Variable green yellow The Color to be mapped 802 1p Number 0 7 The UP bit value assigned to matching frames dei Number 0 1 The DEI bit value assigned to matching frame...

Page 483: ...c congestion occurs 18 4 2 Configuring WRED Profiles CLI To configure a WRED profile enter the following command in root view root ethernet qos wred profile tbl add profile id profile id green min threshold green min threshold green max threshold green max threshold green max drop green max drop yellow min threshold yellow min threshold yellow max threshold yellow max threshold yellow max drop yel...

Page 484: ... dropped green frames for queues with this profile yellow min threshold Number 0 8192 The minimum throughput of yellow frames for queues with this profile in Kbytes When this value is reached the system begins dropping yellow frames in the queue yellow max threshold Number 0 8192 The maximum throughput of yellow frames for queues with this profile in Kbytes After this value is reached all yellow f...

Page 485: ... profile assigned to a queue go to interface view for the interface and enter the following command eth type eth x x wred show profile id service bundle id service bundle id cos cos Table 179 Assigning WRED Profile to Queue CLI Parameters Parameter Input Type Permitted Values Description service bundle id Number 1 63 Note In the current release only Service Bundle 1 is supported Assigns the WRED p...

Page 486: ... release 18 5 2 Configuring Queue Shapers CLI You can configure up to 32 single leaky bucket queue shaper profiles The CIR value can be set to the following values 16 000 32 000 000 bps granularity of 16 000 bps 32 000 000 131 008 000 bps granularity of 64 000 bps Note You can enter any value within the permitted range Based on the value you enter the software automatically rounds off the setting ...

Page 487: ...To delete a queue shaper profile enter the following command in root view root ethernet qos queue shaper profile tbl delete profile id profile id You cannot delete a queue shaper profile if it is attached to a queue You must first remove the profile from the queue You can then delete the profile Table 180 Queue Shaper Profiles CLI Parameters Parameter Input Type Permitted Values Description profil...

Page 488: ... the queue shaper profile attached to a queue go to interface view for the interface and enter the following command eth type eth x x queue shaper show configuration service bundle id service bundle id cos cos To remove a queue shaper profile from a queue go to interface view for the interface and enter the following command eth type eth x x queue shaper delete service bundle id service bundle id ...

Page 489: ...with granularity of 64 000 bps Note You can enter any value within the permitted range Based on the value you enter the software automatically rounds off the setting according to the granularity If you enter a value below the lowest granular value except 0 the software adjusts the setting to the minimum You can attach one of the configured service bundle shaper profiles to each service bundle If n...

Page 490: ...dle You can then delete the profile Table 182 Service Bundle Shaper Profiles CLI Parameters Parameter Input Type Permitted Values Description profile id Number 1 256 A unique ID that identifies the profile cir Number 1 1000000000 The Committed Information Rate CIR assigned to the profile in bps pir Number 16000 1000000000 The Peak Information Rate PIR assigned to the profile in bps shaper profile ...

Page 491: ... configuration service bundle id service bundle id To remove a service bundle shaper profile from a service bundle go to interface view for the interface and enter the following command eth type eth x x service bundle shaper delete service bundle id service bundle id Table 183 Attaching Shaper Profile to Service Bundle CLI Parameters Parameter Input Type Permitted Values Description service bundle...

Page 492: ...wing command eth type eth x x shaping compensation value set value To display the egress line compensation value go to interface view for the interface and enter the following command eth type eth x x shaping compensation value get Table 184 Egress Line Compensation for Shaping CLI Parameters Parameter Input Type Permitted Values Description value Number 0 26 even numbers only Shapers attached to ...

Page 493: ...ity is served before lower priority queues Weighted Fair Queuing WFQ If two or more queues have the same priority and are ready to transmit the scheduler transmits frames from the queues based on a WFQ algorithm that determines the ratio of frames per queue based on a predefined weight assigned to each queue 18 6 2 Configuring Queue Priority CLI A priority profile defines the exact order for servi...

Page 494: ...e Yellow Priority column Note CoS 7 is always marked with the highest priority and cannot be changed or edited no matter what the service bundle state is since it is assumed that only high priority traffic will be tunneled via CoS 7 The system supports up to nine interface priority profiles Profiles 1 to 8 are defined by the user while profile 9 is the pre defined read only default interface prior...

Page 495: ...id profile id You can only delete an interface priority profile if the profile is not attached to any interface Table 186 Interface Priority Profile CLI Parameters Parameter Input Type Permitted Values Description profile id Number 1 8 A unique ID to identify the profile cos0 priority Number 1 4 The Green priority for the CoS 0 queue from 4 highest to 1 lowest This priority is applied to Green fra...

Page 496: ...h the profile is assigned cos7 priority Number 1 4 The Green priority for the CoS 7 queue from 4 highest to 1 lowest This priority is applied to Green frames with CoS 7 egressing the service bundle to which the profile is assigned Example The following command configures a priority profile with Profile ID 1 root ethernet qos port priority profile tbl add profile id 1 cos0 priority 1 description c0...

Page 497: ...command eth type eth x x priority set profile id profile id To display which priority profile is attached to an interface go to interface view for the interface and enter the following command eth type eth x x port priority show profile id Table 188 Attaching Priority Profile to Interface CLI Parameters Parameter Input Type Permitted Values Description profile id Number 1 9 Enter the ID of one of ...

Page 498: ...ransmission ratio in bytes between the queues All the service bundles under the interface inherit the WFQ profile attached to the interface The system supports up to six WFQ interface profiles Profile ID 1 is a pre defined read only profile and is used as the default profile Profiles 2 to 6 are user defined profiles The following table provides an example of a WFQ profile Table 189 WFQ Profile Exa...

Page 499: ...ers of a WFQ profile enter the following command in root view root ethernet qos wfq weight profile tbl show profile id profile id To delete a WFQ profile enter the following command in root view root ethernet qos wfq weight profile tbl delete profile id profile id You can only delete a WFQ profile if the profile is not attached to any interface Table 190 WFQ Profile CLI Parameters Parameter Input ...

Page 500: ...20 20 4 20 20 5 20 20 6 20 20 7 20 20 The following command edits the profile you created in the previous command so that CoS 6 queues have a weight of 20 instead of 15 root ethernet qos wfq weight profile tbl edit profile id 2 cos0 weight 15 cos1 weight 15 cos2 weight 15 cos3 weight 15 cos4 weight 15 cos5 weight 15 cos6 weight 20 cos7 weight 20 18 6 5 3 Attaching a WFQ Profile to an Interface CLI...

Page 501: ...llowing command assigns WFQ Profile 3 to GbE 1 eth type eth 1 1 port wfq set profile id 3 The following is a sample display for the port wfq show profile id command eth type eth 1 1 port wfq show profile id Profile ID 1 CoS Queue Weight Green 0 20 1 20 2 20 3 20 4 20 5 20 6 20 7 20 eth type eth 1 1 ...

Page 502: ...interface view for the interface and enter the following command eth type eth x x tm queue show statistics service bundle id service bundle id cos cos clear on read clear on read layer 1 layer 1 To clear queue level PMs for a specific service bundle enter interface view for the interface and enter the following command eth type eth x x tm queue clear statistics service bundle id service bundle id ...

Page 503: ...ansmitted Yellow Packets 64 bits counter Transmitted Yellow Bytes 64 bits counter Transmitted Yellow Bits per Second 32 bits counter Dropped Yellow Packets 64 bits counter Dropped Yellow Bytes 64 bits counter To display service bundle level PMs enter interface view for the interface and enter the following command eth type eth x x tm service bundle show statistics service bundle id service bundle ...

Page 504: ...Statistics are represented as Layer 1 statistics including preamble and IFG no Statistics are represented as Layer 2 statistics Example The following command displays service bundle PMs for Service Bundle 1 on GbE 1 The PMs are cleared after they are displayed eth type eth 1 1 tm service bundle show statistics service bundle id 1 clear on read yes layer 1 yes ...

Page 505: ...of Ethernet interfaces called the Control Interface When bandwidth degrades from the nominal value in the monitored interface messages relaying the actual bandwidth values are periodically sent over the Control Interface A termination message is sent once the bandwidth returns to its nominal level 19 1 2 Configuring an ABN Entity CLI You must first create an ABN entity consisting of the Monitored ...

Page 506: ...r the following command in root view root ethernet abn abn entity create abn name abn name monitored group monitored group control group control group vlan vlan To set the Admin status of an ABN entity enter the following command in root view root ethernet abn abn admin set abn name abn name admin admin state To delete an ABN entity enter the following command in root view root ethernet abn abn en...

Page 507: ...e abn name Text String The name of the ABN entity monitored interface Variable radio This parameter is always set to radio monitored slot Number 2 monitored port Number Radio Carrier 1 1 Radio Carrier 2 IP 20C only 2 monitored group Variable rp1 rp2 rp3 rp4 lag1 lag2 lag3 lag4 mc abc1 mc abc2 mc abc3 mc abc4 When the monitored group is an HSB protection group rp1 rp 4 a LAG lag1 lag4 or a Multi Ca...

Page 508: ...itoring on the interface or isDown to disable ABN monitoring on the interface monitoring interval Number 1 20 The interval in seconds for which a weighted average of the bandwidth readings is calculated message frequency Variable 4 one second sets message frequency to 1 second 5 ten seconds sets message frequency to 10 seconds 6 one minute sets message frequency to 1 minute How often messages are ...

Page 509: ...trol port 2 vlan 200 The following command creates an ABN entity in an IP 20C unit with HSB protection group rp1 as the monitored interface and LAG group lag1 as the control interface It also specifies to transmit bandwidth messages on VLAN 300 root ethernet abn abn entity create abn name ABN 5 monitored group rp1 control group lag1 vlan 300 The following command deletes ABN 1 root ethernet abn ab...

Page 510: ...eral LLDP Parameters CLI Displaying the General LLDP Parameters CLI Configuring LLDP Port Parameters CLI Displaying LLDP Port Parameters CLI Displaying LLDP Local System Parameters CLI Displaying the LLDP Remote System Parameters CLI Displaying LLDP Statistics CLI 19 2 1 Configuring the General LLDP Parameters CLI This section explains how to define the general LLDP parameters for the unit For ins...

Page 511: ...mmand in root view root ethernet lldp configuration scalers show The following information is displayed Message Tx Interval The interval in seconds at which LLDP frames are transmitted as defined by the ethernet lldp tx interval set tx interval command The default value is 30 Message Tx Hold Multiplier The TTL Multiplier as defined by the ethernet lldp tx hold multiplier set hold multiplier comman...

Page 512: ...ernet lldp agent notif enable interface eth slot slot port port agent notif enable agent notif enable Table 197 LLDP Port CLI Parameters Parameter Input Type Permitted Values Description slot Number 1 The slot in which the card resides port Number 1 3 The port for which you want to configure LLDP agent admin Variable txOnly rxOnly txAndRx disabled Defines how the LLDP protocol operates for this po...

Page 513: ...2 5 Displaying LLDP Local System Parameters CLI This section includes Displaying Local Unit Parameters CLI Displaying Local Port Parameters CLI Displaying Local Unit Management Information CLI Displaying Local Unit Management Information per Port CLI Displaying Unit s Destination MAC Addresses CLI 19 2 5 1 Displaying Local Unit Parameters CLI To display the local unit s unit parameters as transmit...

Page 514: ...s defined by the following parameters 0 other 1 repeater 2 bridge 3 wlanAccessPoint 4 router 5 telephone 6 docsisCableDevice 7 stationOnly 8 cVLANComponent 9 sVLANComponent 10 twoPortMACRelay local System Cap Enabled A bitmap value used to identify which system capabilities are enabled on the local system as included in TLVs transmitted by the LLDP agent The bitmap is defined by the following para...

Page 515: ... displayed Mng Addr SubType The format of the local unit s IP Address In this release only IPV4 is supported Management Address The local unit s IP address Mng Addr Length Reserved for future use Mng Addr IF SubType Reserved for future use Mng Addr IF Reserved for future use Mng Addr OID Reserved for future use 19 2 5 4 Displaying Local Unit Management Information per Port CLI To display the local...

Page 516: ...ay the peer s LLDP unit parameter information starting from a specific time enter the following command in root view If no time is specified all data is displayed root ethernet lldp agent remote table show agent start time agent start time interface eth slot slot port port Table 198 LLDP Remote Unit CLI Parameters Parameter Input Type Permitted Values Description slot Number 1 The slot in which th...

Page 517: ...m System Name and Rem System Description fields are not used in the current version Rem System Cap Supported The bitmap value used to identify which system capabilities are supported on the peer The bitmap is defined by the following parameters 0 other 1 repeater 2 bridge 3 wlanAccessPoint 4 router 5 telephone 6 docsisCableDevice 7 stationOnly 8 cVLANComponent 9 sVLANComponent 10 twoPortMACRelay R...

Page 518: ... Number 1 3 The port for which you want to configure LLDP agent start time Date Use the format dd mm yyyy hh mm ss The sys up time of the entry creation The following information is displayed Time Mark The time the entry was created Interface Type Slot Port The port for which you are displaying data about the peer Rem Dest Mac Address The peer LLDP agent s destination MAC Address Remote Index An a...

Page 519: ...es Inserts The number of times the information from the remote system has changed stats Rem Tables Deletes The number of times the information from the remote system has been deleted stats Rem Tables Drops Reserved for future use stats Rem Tables Ageouts The number of times the information from the remote system has been deleted from the local unit s database because the information s TTL has expi...

Page 520: ...hen discarded for any reason This counter can provide an indication that LLDP header formatting problems may exist with the local LLDP agent in the sending system or that LLDPDU validation problems may exist with the local LLDP agent in the receiving system RX Invalid Frames The number of invalid LLDP frames received by the LLDP agent on this port while the agent is enabled RX Valid Frames The num...

Page 521: ...enter the following command in root view root platform sync pipe add pipe id pipe id interface 1 type interface 1 type slot slot port port interface 2 type interface 2 type slot slot port port To change the first interface in a SyncE pipe enter the following command in root view root platform sync pipe edit interface 1 pipe id pipe id interface 1 type interface 1 type slot slot port port To change...

Page 522: ...f the first interface type is ethernet the second must by radio and vice versa Examples The following command configures a SyncE pipe between Ethernet port 1 and radio interface 1 root platform sync pipe add pipe id 1 interface 1 type ethernet slot 1 port 1 interface 2 type radio slot 2 port 1 The following command changes the first interface in the pipe from ethernet port 1 to Ethernet port 2 roo...

Page 523: ...orized login to the system the following parameters should be set Inactivity Timeout Blocking access due to login failures Blocking unused accounts This section includes Configuring the Inactivity Timeout Period CLI Configuring Blocking Upon Login Failure CLI Configuring Blocking of Unused Accounts CLI 21 1 1 Configuring the Inactivity Timeout Period CLI A system management session automatically t...

Page 524: ...trol block failure login attempt set attempt To define the period in minutes for which a user is blocked after the configured number of failed login attempts enter the following command in root view root platform security access control block failure login period set period To display the current failed login attempt blocking parameters enter the following command in root view root platform securi...

Page 525: ...command to unblock the user root platform security access control user account block user name user name block no To manually block a specific user enter the following command in root view root platform security access control user account block user name user name block yes To display the currently configured blocking of unused account period enter the following command in root view root platform...

Page 526: ...from the first time the user logs into the system for the number of days 20 90 set by this command If you set this parameter to 0 password aging is disabled and passwords remain valid indefinitely To configure password aging enter the following command in root view root platform security access control password aging set password aging Table 205 Password Aging CLI Parameters Parameter Input Type P...

Page 527: ...wing command enables password strength enforcement root platform security access control password enforce strength set yes 21 2 3 Forcing Password Change Upon First Login CLI To determine whether the system requires users to change their password the first time they log into the system enter the following command in root view root platform security access control password first login set first log...

Page 528: ...tains a set of privilege levels per functionality group and defines the management protocols access channels that can be used to access the system by users to whom the user profile is assigned The system parameters are divided into the following functional groups Security Management Radio TDM Ethernet Synchronization A user profile defines the permitted access level per functionality group For eac...

Page 529: ...I Parameters Parameter Input Type Permitted Values Description profile name Text String Up to 49 characters The name of the user profile group Variable security management radio ethernet sync The functionality group for which you are defining access levels write lvl Variable none normal advanced The read level for the functionality group read lvl Variable none normal advanced The read level for th...

Page 530: ...iable Serial Web NMS Telnet SSH The access channel type allowed or disallowed by the command for users with this user profile allowed Boolean yes no yes Users with this user profile can access the access channel type defined in the preceding parameter no Users with this user profile cannot access the access channel type defined in the preceding parameter Example The following command prevents user...

Page 531: ...xpired date expired date To change a user account s profile enter the following command root platform security access control user account edit profile name user name user name profile name profile name To delete a user account enter the following command root platform security access control user account delete user name user name To display all user accounts configured on the unit and their sett...

Page 532: ...ee Configuring a RADIUS Server 21 4 1 RADIUS Overview CLI The RADIUS protocol provides centralized user management services IP 20 supports RADIUS server and provides a RADIUS client for authentication and authorization When RADIUS is enabled a user attempting to log into the system from any access channels CLI WEB NMS is not authenticated locally Instead the user s credentials are sent to a centra...

Page 533: ...e number of times the device will try to communicate with the RADIUS server before declaring the server to be unreachable timeout Number 1 10 The timeout in seconds that the agent will wait in each communication with the selected RADIUS server before retrying if no response is received shared secret String Between 22 128 characters The shared secret of the RADIUS server Example The following comma...

Page 534: ...cess level in the Management functional group None Regular or Advanced Management Func Group Write level The Write access level in the Management functional group None Regular or Advanced Radio Func Group Read level The Read access level in the Radio functional group None Regular or Advanced Radio Func Group Write level The Write access level in the Radio functional group None Regular or Advanced ...

Page 535: ... Request CSR File CLI To set the CSR parameters enter the following command in root view root platform security csr set parameters common name common name country country state state locality locality organization organization org unit org unit email email file format file format To display the currently configured CSR parameters enter the following command in root view root platform security csr ...

Page 536: ...ng The exact legal name of your organization Do not abbreviate org unit String The division of the organization that handles the certificate email String An e mail address that can be used to contact your organization file format Variable PEM DER The file format of the CSR In this version only PEM is supported server ipv4 Dotted decimal format Any valid IPv4 IP address The IPv4 address of the PC o...

Page 537: ...nter the following command in root view root platform security certificate download To display the status of a pending certificate download enter the following command in root view root platform security certificate download show status To install a certificate enter the following command in root view root platform security certificate install Table 214 Certificate Download and Install CLI Paramet...

Page 538: ...otocol set url protocol https Note Make sure you have installed a valid certificate in the IP 20 before changing the web interface protocol to HTTPS Failure to do this may prevent users from accessing the Web EMS To change the protocol back to HTTP enter the following command in root view root platform security url protocol set url protocol http To display which protocol is currently enabled enter...

Page 539: ... server For details see Installing and Configuring an FTP or SFTP Server Before uploading the security log you must install and configure the FTP server on the laptop or PC from which you are performing the download See Installing and Configuring an FTP or SFTP Server To set the FTP parameters for security log upload enter the following command in root view root platform security file transfer set...

Page 540: ...ate the upload root platform security file transfer set server path current file name security_log_Oct8 zip ip address 192 168 1 80 protocol ftp username anonymous password 12345 root platform security file transfer operation set upload security log 21 8 Uploading the Configuration Log CLI The configuration log lists actions performed by users to configure the system This file is mostly used for s...

Page 541: ...placed Instead the filename will be updated by time stamp For example UnitInfo zip 11 05 14 03 31 04 ip address Dotted decimal format Any valid IP address The IP address of the PC or laptop you are using as the FTP or SFTP server protocol Variable ftp sftp The file transfer protocol username Text String The user name for the FTP or SFTP session password Text String The password for the FTP or SFTP...

Page 542: ... Viewing the Event Log CLI The Event Log displays a list of current and historical events and information about each event To display the event log enter the following command in root view root platform status event log show module unit To clear the event log enter the following command in root view root platform status event log clear module unit 22 3 Editing Alarm Text and Severity CLI You can v...

Page 543: ...everity of the alarm as displayed to users additional text Text String 255 characters An additional text description of the alarm type Example The following command changes the severity level of alarm type 401 Loss of Carrier to minor root platform status alarm management set alarm id 401 severity level minor 22 3 3 Setting Alarms to their Default Values CLI To restore an alarm type s severity lev...

Page 544: ... IPv4 address If the selected IP protocol is IPv6 enter the destination IPv6 address root platform unit info channel server set ip address server ipv4 directory directory filename filename username username password password root platform unit info channel server ipv6 set ip address server ipv6 directory directory filename filename username username password password To set the protocol for unit i...

Page 545: ...add the suffix zip to the file name Otherwise the file import may fail You can export the file using any name then add the suffix zip manually username Text String The user name for the FTP or SFTP session password Text String The password for the FTP or SFTP session To configure the FTP or SFTP settings without a password simply omit this parameter protocol Variable ftp sftp The file transfer pro...

Page 546: ...nit info file export 22 5 Performing Diagnostics CLI This section includes Performing Radio Loopback CLI Performing Ethernet Loopback CLI 22 5 1 Performing Radio Loopback CLI You can perform loopback on a radio To set the timeout for a radio loopback enter the following command in radio view radio x x radio loopbacks timeout set duration duration To display the radio loopback timeout enter the fol...

Page 547: ...ion time go to interface view for the interface and enter the following command eth type eth x x loopback set duration loopback duration You can select whether to swap DA and SA MAC addresses during the loopback Swapping addresses prevents Ethernet loops from occurring It is recommended to enable MAC address swapping if LLDP is enabled To configure MAC address swapping go to interface view for the...

Page 548: ...ou are in CW mode you can choose to transmit in a single tone or two tones To transmit in a single tone enter the following command in radio view radio x x modem tx source set mode one tone freq shift freq shift To transmit two tones enter the following command in radio view radio x x modem tx source set mode two tone freq shift freq shift freq shift2 freq shift To exit CW mode enter the following...

Page 549: ...one transmit frequency of 6010 KHz on the radio interface of an IP 20E unit then exit CW mode and return the interface to normal operation root radio slot 16 port 1 radio 2 1 modem tx source set admin enable radio 2 1 radio x x modem tx source set mode one tone freq shift 6010 radio 2 1 modem tx source set admin disable ...

Page 550: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 550 of 597 Section IV Maintenance ...

Page 551: ...Pin outs IP 20S LEDs IP 20E Connector Pin outs IP 20E LEDs PoE Injector Pin outs 23 1 IP 20C Connector Pin outs Figure 260 IP 20C Interfaces 23 1 1 Eth1 PoE GbE Electrical PoE Optical Table 223 IP 20C Eth1 PoE Interface RJ 45 SFP Pinouts Pin no Description 1 BI_DA Bi directional pair A 2 BI_DA Bi directional pair A 3 BI_DB Bi directional pair B 4 BI_DC Bi directional pair C ...

Page 552: ... Bi directional pair A 3 BI_DB Bi directional pair B 4 BI_DC Bi directional pair C 5 BI_DC Bi directional pair C 6 BI_DB Bi directional pair B 7 BI_DD Bi directional pair D 8 BI_DD Bi directional pair D 23 1 3 Eth3 EXP GbE Electrical Optical Expansion Table 225 IP 20C Eth3 EXP Interface RJ 45 SFP Pinouts Pin no Description 1 BI_DA Bi directional pair A 2 BI_DA Bi directional pair A 3 BI_DB Bi dire...

Page 553: ...Pin no Description Management Standard 100Base T 4 Wire 1 TX 2 TX 3 RX 6 RX Protection Non Standard 100Base T 4 Wire 4 TX 5 TX 7 RX 8 RX 23 1 5 DC The DC port is UL 60950 compliant with a 2 pin connector Figure 261 IP 20C DC Port Connector 23 1 6 RSL Interface IP 20C uses a weather proof BNC connector 23 1 7 Source Sharing IP 20C uses a TNC connector for source sharing This connector is marked EXT...

Page 554: ...Enabled The Orange LED indicates the interface s Admin and cable connection status and whether there is traffic on the interface Off Admin is Disabled or no cable is connected to the interface Orange Admin is Enabled and a cable is connected to the interface Blinking Orange Admin is Enabled and a cable is connected to the interface and there is traffic on the interface 23 2 2 Optical GbE Interface...

Page 555: ...o link Off The radio is off Green The power is on and all carriers are operational up Yellow A signal degrade condition exists in at least one carrier Red A loss of frame LOF or excessive BER condition exists in at least one carrier 23 2 5 Status LED The Status LED is a three color LED that indicates the status of the radio link Off The power is off Green The power is on and no alarms are raised o...

Page 556: ...o Description 1 BI_DA Bi directional pair A 2 BI_DA Bi directional pair A 3 BI_DB Bi directional pair B 4 BI_DC Bi directional pair C 5 BI_DC Bi directional pair C 6 BI_DB Bi directional pair B 7 BI_DD Bi directional pair D 8 BI_DD Bi directional pair D 23 3 2 Eth2 GbE Electrical Optical Table 228 IP 20S Eth2 Interface RJ 45 SFP Pinouts Pin no Description 1 BI_DA Bi directional pair A 2 BI_DA Bi d...

Page 557: ...5 SFP Pinouts Pin no Description 1 BI_DA Bi directional pair A 2 BI_DA Bi directional pair A 3 BI_DB Bi directional pair B 4 BI_DC Bi directional pair C 5 BI_DC Bi directional pair C 6 BI_DB Bi directional pair B 7 BI_DD Bi directional pair D 8 BI_DD Bi directional pair D 23 3 4 MGT PROT Management FE Standard and Protection FE Non Standard Table 230 IP 20S MGT PROT Interface RJ 45 Pinouts Pin no ...

Page 558: ...io LED Status LED Protection LED 23 4 1 Electrical GbE Interface RJ 45 LEDs There are two LEDs next to each electrical RJ 45 interface a Green LED to the left of the interface and an Orange LED to the right of the interface The Green LED indicates the port s Admin state Off Admin is Disabled Green Admin is Enabled The Orange LED indicates the interface s Admin and cable connection status and wheth...

Page 559: ...T interface is being used for protection the Orange LED indicates the status of the mate unit Off Admin is Disabled or no cable is connected to the interface Orange Admin is Enabled and a cable is connected to the interface Blinking Orange Admin is Enabled and a cable is connected to the interface and there is traffic on the interface 23 4 4 Radio LED The Link LED is a three color LED that indicat...

Page 560: ... and the unit is in active mode Off Protection is not enabled 23 5 IP 20E Connector Pin outs Figure 264 IP 20E Interfaces Eth1 PoE GbE Interface RJ 45 Table 231 IP 20E Eth1 PoE Interface RJ 45 Pin no Description 1 BI_DA Bi directional pair A 2 BI_DA Bi directional pair A 3 BI_DB Bi directional pair B 4 BI_DC Bi directional pair C 5 BI_DC Bi directional pair C 6 BI_DB Bi directional pair B 7 BI_DD ...

Page 561: ...l pair C 5 BI_DC Bi directional pair C 6 BI_DB Bi directional pair B 7 BI_DD Bi directional pair D 8 BI_DD Bi directional pair D 23 5 3 EXT Port This port is reserved for future use 23 5 4 Power Adaptor For configurations in which power is not provided via PoE a special adaptor IP 20_Mini_Power_Adaptor is available that enables users to connect a two wire power connector to the PoE port This adapt...

Page 562: ...er Guide Ceragon Proprietary and Confidential Page 562 of 597 Figure 265 Two Wire to PoE Port Power Adaptor 23 5 5 RSL Interface IP 20E uses a two pin connection to measure the RSL level using standard voltmeter test leads ...

Page 563: ...g Orange Admin is Enabled and a cable is connected to the interface and there is traffic on the interface 23 6 2 Eth2 Eth3 GbE Optical Interface SFP CSFP LEDs Eth2 Eth3 is an SFP cage that supports regular and CSFP standards When Eth2 Eth3 is used with a regular SFP it provides Ethernet port 2 When Eth2 Eth3 is used with CSFP it provides two Ethernet ports Ethernet port 2 and Ethernet port 3 Note ...

Page 564: ...s traffic on the interface The Green LED is not functional in this release 23 6 4 Radio LED The Link LED is a three color LED that indicates the status of the radio link Off The radio is off Green The power is on and all carriers are operational up Yellow A signal degrade condition exists in at least one carrier Red A loss of frame LOF or excessive BER condition exists in at least one carrier 23 6...

Page 565: ...I_DB Bi directional pair B 4 BI_DC Bi directional pair C 5 BI_DC Bi directional pair C 6 BI_DB Bi directional pair B 7 BI_DD Bi directional pair D 8 BI_DD Bi directional pair D 23 7 2 Data Port Table 234 PoE Injector RJ 45 Data Port Supporting 10 100 1000Base T Pin no Description 1 BI_DA Bi directional pair A 2 BI_DA Bi directional pair A 3 BI_DB Bi directional pair B 4 BI_DC Bi directional pair C...

Page 566: ...23 8 PoE Injector LEDs PWR1 Bi color LED Green Power available on PWR1 DC input Off No power is available on PWR1 DC input PWR2 Bi color LED Green Power available on PWR2 DC input Off No power is available on PWR2 DC input PoE Tri color LED Orange No load is detected Green Providing in line power Blinking Red Invalid over load Off no power to the injector unit 23 8 1 Radio LED The Link LED is a th...

Page 567: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 567 of 597 Section V Appendices ...

Page 568: ... main board warm reset Event Unit warm reset Indeterminate 29 main board cold reset Event Unit reset Warning 30 main board poe low voltage alarm Alarm POE input voltage is too low Warning 31 Event Change Remote request was sent Major 1 32 Event Protection switchover due to remote request Major 1 33 protection mimo misconfiguration alarm Alarm Major Unit Redundancy and MIMO 4x4 cannot operate simul...

Page 569: ...omatic state propagation 200 protection communication down alarm Alarm Protection communication is down Major 1 Mate unit is absent failure 2 Protection cable is disconnected 3 Unit failure 1 Check existence of mate unit 2 Check protection cable connection between units 3 Reset mate unit 4 Replace mate unit 201 protection lockout alarm Alarm Protection in Lockout State Major 202 protection switch ...

Page 570: ...r both sides of link 603 radio lof Alarm Radio loss of frame Critical 1 Fade in the link 2 Defective IF cable 3 Fault in RFU 4 Fault in RMC Radio Modem Card 5 Different radio scripts at both ends of the link 1 Check link performance 2 Check IF cable and replace if required 3 Replace RFU 4 Replace RMC Radio Modem Card 5 Make sure same script is loaded at both ends of the link 604 radio signal degra...

Page 571: ... by user Event Demo mode is stopped Warning 905 license load fail Event Activation key loading failure Major 906 license load successful Event Activation key loaded successfully Warning 907 license violation alarm Alarm Activation key violation Critical The current configuration does not match the activation key enabled feature set 48 hours after a activation key violation alarm is raised sanction...

Page 572: ...05 software new version installed Event New version installed Warning A software version has been installed but system has not been reset 1111 software user confirmation for version Event User approved download of software version file Warning 1112 software download status Event Software download status Warning 1113 software download missing components Event Missing components Warning 1114 softwar...

Page 573: ...d because of user command or execution of another configuration management operation Try again 1156 file transfer issued Event User issued command for transfer of configuration file Warning User command 1157 file transfer succeeded Event Configuration file transfer successful Warning Configuration file transfer successful 1158 file transfer failure Event Configuration file transfer failure Warning...

Page 574: ...started because of user command 1201 file missed Alarm Modem firmware file not found Critical Modem file is missing 1 Download software package 2 Reset the system 1202 load failed Alarm Modem firmware was not loaded successfully Critical 1 Modem firmware file is corrupted 2 System failure 1 Download software package 2 Reset the system 1203 modem wd reset Event Modem watch dog reset event Warning 1...

Page 575: ...RMC Radio Modem Card module 3 Replace the RMC Radio Modem Card 1701 cable open Alarm Cable open Major Cable is not connected to RMC Radio Modem Card or RFU 1 Check IF cable and connectors 2 Verify that the N Type connector inner pin is not spliced 3 Replace RMC Radio Modem Card 4 Replace RFU 1702 cable short Alarm Cable short Major Physical short at the IF cable 1 Check IF cable and connectors 2 V...

Page 576: ... 1 Alarm RFU delay calibration failure 1 Warning Defective RFU 1 Reset the RMC Radio Modem Card RFU 2 Replace RFU 1705 delay calibration failure 2 Alarm RFU delay calibration failure 2 Warning Calibration cannot be completed due to notch detection Enter delay calibration value manually 1706 extreme temp cond Alarm RFU extreme temperature Warning 1 Installation conditions 2 Defective RFU 1 Check in...

Page 577: ...connector inner pin is not spliced 3 Replace RMC Radio Modem Card 4 Replace RFU 1713 pa extreme temp cond Alarm RFU PA extreme temperature Warning 1 Installation conditions 2 Defective RFU 1 Check installation conditions 2 Replace RFU 1721 reset occurred Event RFU reset Major 1722 rfu loopback active Alarm RFU loopback is active Major User has activated RFU loopback Disable RFU loopback 1723 rfu m...

Page 578: ... 3 Defective RFU 1 Check that the fault is not due to rain multi path fading or lack of LOS 2 Check link settings TX power TX frequency 3 Check antenna alignment 4 Check antenna connections 5 Replace local remote RFU 1729 rx level path2 out of range Alarm RFU RX level path2 out of range Warning 1 Improper installation 2 Fading event 3 Defective RFU 1 Check that the fault is not due to rain multi p...

Page 579: ...ot support this type of RFU Major IDC SW does not support the RFU Upgrade IDC SW 1769 unit cold reset event Event Unit Perform Power up Warning 1770 cable lof rfu Event Unit performing power up Major 1771 cable error rfu Alarm RFU cable error Major Errors in signal from IDU to XCVR 1 Check the IF cable and connectors 2 Verify that the N Type TNC connector inner pin is not spliced 3 Replace RMC 4 R...

Page 580: ... possible Critical Wrong type of XCVR the XCVR hardware is METRO Replace the XCVR 1776 pll rmc Alarm RMC hardware failure Major RMC hardware failure of the clock distributor Replace the RMC 1780 mrmc running script deleted Event MRMC running script is deleted Warning New installed software package does not include the running MRMC radio script 1 Make sure the required software package include the ...

Page 581: ...ot properly connected 2 External equipment is faulty 1 Reconnect line 2 Check line cables 3 Check external equipment 2103 STM 1 OC 3 IN MSRDI Alarm Remote Defect Indication on Line Interface MS RDI RDI L received Minor External equipment is faulty Check external equipment 2104 STM 1 OC 3 RX LOS Alarm Loss of STM 1 OC 3 Frame on Radio Interface Major 1 All channels in Multi Carrier ABC group are do...

Page 582: ...ace the card 2111 STM 1 OC 3 SFP TX FAILURE Alarm SFP Transmit Failure on STM 1 OC 3 port Critical 1 SFP is faulty 1 Replace SFP or insert SFP if it is not inserted correctly 2 Replace the card 2112 STM 1 OC 3 SFP TX MUTED Alarm SFP is muted on STM 1 OC 3 port Warning SFP is muted by configuration Remove muting 2113 STM 1 OC 3 CHANNEL 2 REMOVED Alarm STM 1 OC 3 Channel Removed alarm due to reduced...

Page 583: ...Reduced capacity 2 Fading 1 Check link performance 2 Check radio alarms for channel 2119 STM 1 OC 3 CHANNEL 8 REMOVED Alarm STM 1 OC 3 Channel Removed alarm due to reduced radio capacity Warning 1 Reduced capacity 2 Fading 1 Check link performance 2 Check radio alarms for channel 2200 MC ABC Local LOF Alarm Multi Carrier ABC LOF Critical All channels in Multi Carrier ABC group are down 1 Check lin...

Page 584: ...rror Slot 6 Major Hardware failure between RMC and TCC cards 1 Replace RMC 2 Replace TCC 3 Replace chassis 2208 MC ABC Lvds Error Sl7 Alarm LVDS RX Error Slot 7 Major Hardware failure between RMC and TCC cards 1 Replace RMC 2 Replace TCC 3 Replace chassis 2209 MC ABC Lvds Error Sl8 Alarm LVDS RX Error Slot 8 Major Hardware failure between RMC and TCC cards 1 Replace RMC 2 Replace TCC 3 Replace cha...

Page 585: ...nnel Id Mismatch Ch4 Warning Configuration failure Compare Channel ID configuration with remote side 2223 MC ABC Ch Id Mismatch Ch5 Alarm Multi Carrier ABC Channel Id Mismatch Ch5 Warning Configuration failure Compare Channel ID configuration with remote side 2224 MC ABC Ch Id Mismatch Ch6 Alarm Multi Carrier ABC Channel Id Mismatch Ch6 Warning Configuration failure Compare Channel ID configuratio...

Page 586: ... for channel 2242 MC ABC Ch Id Disabled Ch8 Alarm Multi Carrier ABC Channel Id Manual Disabled Ch8 Warning Admin state for channel is down Enable admin state for channel 2300 protection configuration mismatc Alarm Protection configuration mismatch Major The configuration between the protected devices is not aligned Apply copy to mate command to copy the configuration from the required device to th...

Page 587: ...determinate Security log upload succeeded 5010 force mode alarm Alarm System is in sync force mode state Warning User command 5011 sync quality change event Event The sync source quality level was changed Major 5012 system clock in holdover mode Alarm System Synchronization Reference in Holdover Mode Critical 5013 sync T0 quality change event Event The system s reference quality changed Major 5014...

Page 588: ...s been loaded Set the Master Key 1 5102 general encryption failure Alarm Payload Encryption failure Critical 1 Radio LOF on Tx Rx direction 2 The session key does not match across the link 1 The AES admin setting does not match across the link 1 Validate the MSE on both sides of the link 2 Validate the session key on both sides of the link 1 Validate the AES admin setting on both sides of the link...

Page 589: ...nected MIMO 4x4 only 2 Replace faulty units and check that cables are plugged 2 31003 Unsuitable hardware for MIMO alarm Alarm Unsuitable hardware for MIMO Critical 1 Unsuitable hardware for MIMO operation requirements 2 Dual carrier RFUs MIMO 2x2 and 4x4 3 RFUs with MIMO bus interface MIMO 4x4 4 Clock source sharing capability MIMO 4x4 Make sure both RFUs are compatible for MIMO operation 2 31004...

Page 590: ...er Key 1 5102 general encryption failure Alarm Payload REncryption failure Critical 3 Radio LOF on Tx Rx direction 4 The session key does not match across the link 4 The AES admin setting does not match across the link 3 Validate the MSE on both sides of the link 4 Validate the session key on both sides of the link 4 Validate the AES admin setting on both sides of the link 1 5103 kep finished Even...

Page 591: ...FibeAir IP 20C S E User Guide Ceragon Proprietary and Confidential Page 591 of 597 1 Supported by IP 20C and IP 20S only 2 Supported by IP 20C only ...

Page 592: ...Encryption Standard AGC Automatic Gain Control AIS Alarm Indicating Signal ALC Automatic Level Control ANSI American National Standards Institute ASIC Application Specified Integrated Circuit ATPC Automatic Transmit Power Control AUX Auxiliary Unit B BB Baseband BBS Baseband Switching BER Bit Error Rate BLSR Bidirectional Line Switch Ring BPDU Bridge Protocol Data Units BWA Broadband Wireless Acce...

Page 593: ...ss Burst Size EIR Excess Information Rate EMC Electromagnetic Compatibility EOW Engineering Order Wire EPROM Erasable Programmable Read Only Memory ESD Electrostatic Discharge ETSI European Telecommunications Standards Institute F FCC Federal Communications Commission FCS Frame Check Sequence FTP File Transfer Protocol G GbE Gigabit Ethernet GFP Generic Framing Procedure Procedure for mapping of E...

Page 594: ...ITU T International Telecom Union former CCITT IVM Inventory Module L LACP Link Aggregation Control Protocol LAG Link Aggregation Group LAN Local Area Network LBER Low Bit Error Rate LCAS Link Capacity Adjustment Scheme LED Light Emitting Diode LIU Line Interface Unit LLDP Link Layer Discovery Protocol LLF Link Loss Forwarding LMS License Management System LO Local Oscillator LOC Loss of Carrier L...

Page 595: ...rame OPEX Operational Expenditure P PBB TE Provider Backbone Bridge Traffic Engineering PBS Peak Burst Rate PC Personal Computer PCB Printed Circuit Board PDV Packed Delay Variation PIR Peak Information Rate PLL Phase Locked Loop PM Performance Monitoring PN Provider Network PROM Programmable Read Only Memory PSN Packet Switched Network PTP Precision Timing Protocol PWR Power Q QoE Quality of Expe...

Page 596: ...Timing Source SFTP Secure FTP SLA Service Level Agreements SNCP Simple Network Connection Protection SNMP Simple Network Management Protocol SNP Service Network Point SNR Signal to Noise Ratio SNTP Simple Network Time Protocol SOH Section OverHead ETSI SONET Synchronous Optical NETwork SP Service Point SSH Secured Shell Protocol SSM Synchronization Status Message STP Spanning Tree Protocol SyncE S...

Page 597: ...ale of Integration W WAN Wide Area Network Web EMS Web Based Element Management System WFQ Weighted Fair Queue WG Waveguide WRED Weighted Random Early Detection WRR Weighted Round Robin X XCVR Transceiver Transmitter Receiver XMTR Transmitter XO Crystal Oscillator XPD Cross Polar Differentiation XPIC Cross Polarization Interference Cancellation ...

Search results

Summary of Contents for FibeAir IP-20C

Reviews:

Related manuals for FibeAir IP-20C

Brands by name

Popular brands

Ceragon FibeAir IP-20C, User Manual

Search results

Summary of Contents for FibeAir IP-20C

Reviews:

Related manuals for FibeAir IP-20C

Brands by name

Popular brands