Ceragon FibeAir IP-10G IP-10E User Guide 20120601 Rev a.01
Comments
Description
Copyright © 2012 by Ceragon Networks Ltd. All rights reserved.FibeAir® IP-10G and IP-10E User Guide DOC-00034612 (Rev A.01) Hardware Release: R2 and R3 Software Release: i6.9 BM-0252-0 July 2012 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 2 of 577 Notice This document contains information that is proprietary to Ceragon Networks Ltd. No part of this publication may be reproduced, modified, or distributed without prior written authorization of Ceragon Networks Ltd. This document is provided as is, without warranty of any kind. Registered Trademarks Ceragon Networks® is a registered trademark of Ceragon Networks Ltd. FibeAir® is a registered trademark of Ceragon Networks Ltd. CeraView® is a registered trademark of Ceragon Networks Ltd. Other names mentioned in this publication are owned by their respective holders. Trademarks CeraMap™, ConfigAir™, PolyView™, EncryptAir™, and CeraMon™ are trademarks of Ceragon Networks Ltd. Other names mentioned in this publication are owned by their respective holders. Statement of Conditions The information contained in this document is subject to change without notice. Ceragon Networks Ltd. shall not be liable for errors contained herein or for incidental or consequential damage in connection with the furnishing, performance, or use of this document or equipment supplied with it. Open Source Statement The Product may use open source software, among them O/S software released under the GPL or GPL alike license ("GPL License"). Inasmuch that such software is being used, it is released under the GPL License, accordingly. Some software might have changed. The complete list of the software being used in this product including their respective license and the aforementioned public available changes is accessible on http://www.gnu.org/licenses/. Information to User Any changes or modifications of equipment not expressly approved by the manufacturer could void the user’s authority to operate the equipment and the warranty for such equipment. Revision History Rev Date Author Description Approved by Date A June 16, 2012 Baruch Gitlin Initial release for version I6.9. Eytan Perso June 16, 2012 A.01 July 29, 2012 Baruch Gitlin Revised Replacing a License. Eran Shecter July 29, 2012 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 3 of 577 Table of Contents 1. Introduction .................................................................................................... 16 1.1 About the CeraWeb EMS (Web EMS) ......................................................................... 17 1.1.1 Browser behavior with Web EMS ................................................................................ 17 1.2 Reference Guide to Web EMS Menu Structure ........................................................... 18 2. Getting Started................................................................................................ 23 2.1 Establishing a Connection with the IDU ....................................................................... 24 2.2 Launching the Web EMS ............................................................................................. 25 2.3 Configuring IP Addresses ............................................................................................ 26 3. Configuring Secured Access Protocols ........................................................ 27 3.1 Security Overview ........................................................................................................ 28 3.1.1 Defenses in Management Communication Channels .................................................. 28 3.1.2 Defenses in User and System Authentication Procedures .......................................... 29 3.1.2.1 User Identification ........................................................................................ 29 3.1.2.2 Remote Authentication ................................................................................ 29 3.1.2.3 Authorization ................................................................................................ 29 3.1.2.4 RADIUS Support .......................................................................................... 30 3.1.2.5 Attack Types Addressed .............................................................................. 30 3.1.3 Secure Communication Channels ............................................................................... 30 3.1.3.1 SSH (Secured Shell).................................................................................... 30 3.1.3.2 HTTPS (Hypertext Transfer Protocol Secure) ............................................. 30 3.1.3.3 SFTP (Secure FTP) ..................................................................................... 31 3.1.3.4 Creation of Certificate Signing Request (CSR) File .................................... 31 3.1.3.5 SNMP .......................................................................................................... 32 3.1.3.6 Server authentication (SSL / SLLv3) ........................................................... 32 3.1.3.7 Encryption .................................................................................................... 32 3.1.3.8 SSH.............................................................................................................. 32 3.1.4 Security Log ................................................................................................................. 33 3.2 Configuring SNMP ....................................................................................................... 35 3.2.1 Configuring SNMPv3 Parameters ................................................................................ 35 3.3 Configuring Secure Communication Channels ............................................................ 37 3.3.1 Configuring Inactivity Timeout ...................................................................................... 37 3.3.2 Secure File Transfer and Server Authentication .......................................................... 38 3.3.3 Configuring HTTPS (Hypertext Transfer Protocol Secure) .......................................... 39 3.3.4 Downloading a Certificate ............................................................................................ 40 3.3.5 Configuring the Security File Name, Type and Format ................................................ 40 3.3.6 Enabling the CA Certificate .......................................................................................... 41 3.3.7 Configuring FTP or SFTP (Secure FTP) ...................................................................... 41 3.3.8 Generating a Certificate Signing Request (CSR) File .................................................. 42 3.3.9 Generating a Security Certificate from a CSR File ...................................................... 44 4. Working with Configuration Files .................................................................. 45 4.1 Archiving the Configuration .......................................................................................... 46 4.1.1 Creating a Configuration Archive File .......................................................................... 46 4.1.2 Viewing Configuration Archive Creation Status ........................................................... 46 4.1.3 Uploading a Configuration Archive File ........................................................................ 47 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 4 of 577 4.1.4 Viewing Configuration Archive Upload Status ............................................................. 47 4.1.5 Creating a Unit Information Archive File ...................................................................... 47 4.1.6 Viewing Unit Information Archive Creation Status ....................................................... 47 4.1.7 Uploading a Unit Information Archive File.................................................................... 48 4.1.8 Viewing Unit Information Archive Upload Status ......................................................... 48 4.1.9 Downloading a Configuration Archive File ................................................................... 48 4.1.10 Viewing configuration file download status .................................................................. 48 4.1.11 Uploading a Configuration Archive File ........................................................................ 49 4.1.12 Viewing configuration file installation status................................................................. 49 4.2 Restoring the Default Configuration ............................................................................. 50 4.3 Resetting the Unit ......................................................................................................... 50 5. Configuring Users and Password Security .................................................. 51 5.1 Configuring RADIUS .................................................................................................... 52 5.2 Adding Users ................................................................................................................ 54 5.3 Deleting Users .............................................................................................................. 55 5.4 Changing Your Password ............................................................................................ 56 5.5 Configuring a Timeout for Inactive Users..................................................................... 57 6. Configuring Software ..................................................................................... 58 6.1 Configuring IDU Software ............................................................................................ 59 6.1.1 Viewing IDU Version Information ................................................................................. 60 6.1.2 Downloading IDU Software Files ................................................................................. 61 6.1.3 Upgrading the IDU Software Version ........................................................................... 62 6.1.4 Rolling Back a Software Upgrade ................................................................................ 64 6.2 Configuring RFU Software and Firmware .................................................................... 65 6.2.1 Viewing RFU Version Information ................................................................................ 66 6.2.2 Updating the RFU Software Version ............................................................................ 68 7. Configuring and Viewing Basic System Information ................................... 69 7.1 Configuring and Viewing Unit System Information ...................................................... 70 7.2 Configuring System Date and Time ............................................................................. 71 7.3 Configuring Network Timing Protocol (NTP) Parameters ............................................ 72 7.4 Configuring Unit Serial and Part Numbers ................................................................... 73 7.5 Viewing System Application Files ................................................................................ 74 8. Configuring Feature and Capacity Licenses ................................................ 75 8.1 Viewing Current License Details .................................................................................. 76 8.2 Loading a New License Key ........................................................................................ 77 8.3 Replacing a License ..................................................................................................... 79 8.4 Working with a Demo License ..................................................................................... 81 8.5 Viewing Licensed Usage and Features ....................................................................... 82 9. Configuring Unit Management ....................................................................... 84 9.1 Management Overview ................................................................................................ 85 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 5 of 577 9.2 Configuring the Management Ports ............................................................................. 86 9.3 Configuring Out-of-Band Management ........................................................................ 88 9.4 Configuring In-Band Management ............................................................................... 89 9.4.1 Configuring In-Band Management in a 1+1 Link ......................................................... 90 9.4.2 In-Band Management in Nodal Configurations ............................................................ 92 9.4.3 GbE In-Band Management in a Node .......................................................................... 94 9.4.4 In-Band Management Isolation in Smart Pipe Mode ................................................... 95 10. Configuring Traffic Interfaces ........................................................................ 96 10.1 Configuring the Ethernet Switching Mode.................................................................... 97 10.1.1 Switch Configurations Overview .................................................................................. 98 10.1.2 Configuring Smart Pipe Switch Mode ........................................................................ 100 10.1.3 Configuring Managed and Metro Switch Mode .......................................................... 101 10.2 Configuring Ethernet Ports ......................................................................................... 104 10.2.1 Configuring a Single Pipe Port ................................................................................... 104 10.2.2 Configuring a Managed Switch or Metro Switch Port ................................................ 106 10.3 Assigning VLANs to a Port ......................................................................................... 108 10.4 Configuring Automatic State Propagation .................................................................. 109 10.5 Configuring LAGs ....................................................................................................... 112 10.5.1 LAG Overview ............................................................................................................ 113 10.5.2 Creating a LAG .......................................................................................................... 115 10.5.3 Configuring a LAG ...................................................................................................... 116 10.5.4 Removing Ports from a LAG ...................................................................................... 118 10.5.5 Configuring LAG Load Balancing ............................................................................... 119 10.6 Configuring Peer Port Settings .................................................................................. 120 10.7 Configuring E1/DS1 Interfaces .................................................................................. 121 10.8 Configuring STM-1/OC-3 Interfaces .......................................................................... 123 10.9 Configuring Pseudowire ............................................................................................. 126 10.9.1 Pseudowire Overview ................................................................................................ 127 10.9.2 Configuring an Ethernet Port for Pseudowire ............................................................ 129 10.9.3 Configuring the Pseudowire TDM Ports ..................................................................... 131 10.9.4 Configuring TDM Trails for Pseudowire ..................................................................... 134 10.9.5 Configuring Pseudowire Synchronization .................................................................. 135 10.9.6 Configuring the Pseudowire T-Card ........................................................................... 137 10.9.7 Configuring Pseudowire Profiles ................................................................................ 139 10.9.8 Configuring Pseudowire Encapsulation (Tunnels) ..................................................... 142 10.9.9 Configuring DS0 Bundles ........................................................................................... 144 10.9.10 Configuring Pseudowire Services .............................................................. 146 11. Configuring Auxiliary Channels .................................................................. 148 11.1 Configuring the Wayside Channel ............................................................................. 149 11.2 Configuring the User Channel .................................................................................... 150 11.3 Viewing the EOW Channel Status ............................................................................. 151 12. Configuring the Radio Parameters .............................................................. 152 12.1 Enabling and Disabling the Radio .............................................................................. 153 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 6 of 577 12.2 Configuring the Radio Frequencies ........................................................................... 154 12.3 Specifying the Radio Link ID ...................................................................................... 155 12.4 Configuring the Remote Radio IP Address ................................................................ 156 12.5 Configuring the Radio Thresholds ............................................................................. 157 12.5.1 Radio Threshold Levels ............................................................................................. 158 12.5.2 RSL and TSL Thresholds ........................................................................................... 159 12.5.3 MSE Threshold .......................................................................................................... 159 12.5.4 XPI Threshold ............................................................................................................ 160 12.5.5 Ethernet Throughput Threshold ................................................................................. 160 12.5.6 Ethernet Capacity Threshold ..................................................................................... 161 12.5.7 Ethernet Utilization Threshold .................................................................................... 161 12.6 Enabling RSL Degradation Alarms ............................................................................ 162 12.7 Selecting a Radio Script and Configuring ACM ......................................................... 163 12.7.1 ACM Radio Scripts ..................................................................................................... 164 12.7.2 ACM with 1+1 HSB Protection ................................................................................... 166 12.7.3 ACM Adaptive Power ................................................................................................. 167 12.7.4 Enabling Alarms on MRMC Profile Degradation ........................................................ 169 12.7.5 Activating an Asymmetrical Script .............................................................................. 170 12.8 Configuring Compression........................................................................................... 171 12.8.1 Configuring Enhanced Header Compression ............................................................ 172 12.8.1.1 Enhanced Header Compression Flow Type Bitmask and Supported Configurations ............................................................................................ 173 12.8.1.2 Enhanced Header Compression Compatibility .......................................... 175 12.9 Configuring Radio Traffic Priorities ............................................................................ 176 12.10 Configuring the Power Options and Green Mode ...................................................... 178 12.10.1 Configuring ATPC Override ....................................................................... 179 12.10.2 Configuring Green Mode ........................................................................... 181 13. Configuring QoS and Enhanced QoS ......................................................... 182 13.1 QoS Overview ............................................................................................................ 183 13.1.1 Standard QoS Overview ............................................................................................ 183 13.1.1.1 Standard QoS Classifier ............................................................................ 183 13.1.1.2 Standard QoS Policers .............................................................................. 184 13.1.1.3 Queue Management, Scheduling, and Shaping ........................................ 185 13.1.2 Enhanced QoS Overview ........................................................................................... 186 13.1.2.1 Queue Management .................................................................................. 188 13.1.2.2 Scheduling and Shaping ............................................................................ 189 13.1.2.3 Configurable P-Bit and CFI/DEI Re-Marking ............................................. 190 13.2 Configuring Standard QoS ......................................................................................... 191 13.2.1 Opening the QoS & Rate Limiting Page .................................................................... 192 13.2.2 Configuring the Classification Settings ...................................................................... 193 13.2.3 Configuring the Egress Scheduler ............................................................................. 194 13.2.4 Configuring Ingress Rate Limiting .............................................................................. 195 13.2.5 Remapping P-Bits ...................................................................................................... 196 13.2.6 Configuring VLAN-ID to Queue .................................................................................. 197 13.2.7 Assigning IP P-Bits to Queue ..................................................................................... 198 13.2.8 Assigning Queues According to P-Bits ...................................................................... 199 13.2.9 Assigning Queue Weights .......................................................................................... 199 13.2.10 Configuring Policers................................................................................... 200 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 7 of 577 13.2.11 Defining the Static MAC Table .................................................................. 201 13.2.12 Copying QoS Settings from One Port to Another ...................................... 202 13.3 Configuring Enhanced QoS ....................................................................................... 203 13.3.1 Preparing the System for Enhanced QoS .................................................................. 203 13.3.1.1 Classifying In-Band Management Traffic................................................... 203 13.3.1.2 Disabling the QoS Egress Shaper ............................................................. 204 13.3.2 Enabling Enhanced QoS ............................................................................................ 205 13.3.3 Enabling PTP Optimized Transport ........................................................................... 206 13.3.4 Configuring Queue Size ............................................................................................. 208 13.3.5 Configuring Enhanced QoS Classification ................................................................. 209 13.3.5.1 Configuring Services.................................................................................. 209 13.3.5.2 Configuring the egress CoS and Color Modifier (Marker) ......................... 210 13.3.5.3 Enabling Classification Rules .................................................................... 211 13.3.5.4 Setting the Default Classification Settings ................................................. 212 13.3.5.5 Configuring First Hierarchy Classification Rules ....................................... 214 13.3.5.6 Configuring Second Hierarchy Classification Rules .................................. 218 13.3.5.7 Configuring Third Hierarchy Classification Rules ...................................... 220 13.3.6 Configuring Egress Policers ....................................................................................... 226 13.3.6.1 Policer per Cos Option............................................................................... 229 13.3.7 Configuring WRED ..................................................................................................... 230 13.3.8 Configuring the Egress Shaper and Scheduler ......................................................... 232 14. Setting Up Protected Configurations .......................................................... 234 14.1 Protection Overview ................................................................................................... 235 14.2 Configuring 1+1 HSB ................................................................................................. 236 14.2.1 1+1 HSB Overview ..................................................................................................... 237 14.2.2 Configuring 1+1 HSB Protection in a New Standalone System ................................ 238 14.2.3 Replacing the Standby Unit in a 1+1 HSB Standalone System ................................. 240 14.2.4 Configuring 1+1 HSB Protection in a New Nodal System ......................................... 241 14.2.5 Replacing the Standby Unit in a 1+1 HSB Nodal System ......................................... 243 14.3 Configuring a 2+0 System .......................................................................................... 245 14.3.1 2+0 Overview ............................................................................................................. 246 14.3.2 Configuring 2+0 Protection ........................................................................................ 247 14.4 Configuring 2+2 HSB ................................................................................................. 248 14.4.1 2+2 Overview ............................................................................................................. 249 14.4.2 Deploying a 2+2 Configuration ................................................................................... 250 14.4.3 Configuring 2+2 HSB Protection ................................................................................ 251 14.4.4 XPIC and 2+2 Protection ........................................................................................... 252 14.4.5 Replacing Units in a 2+2 Configuration ..................................................................... 253 14.5 Specifying Active and Standby Mode ........................................................................ 254 14.6 Configuring Switchover Criteria ................................................................................. 255 14.7 Viewing Mate Parameters .......................................................................................... 256 14.8 Configuring Multi-Unit LAG ........................................................................................ 257 15. Configuring Diversity ................................................................................... 259 15.1 Diversity Overview ..................................................................................................... 260 15.2 Configuring 1+1 Space Diversity (BBS) ..................................................................... 261 15.3 Configuring 1+1 Frequency Diversity (BBS) .............................................................. 262 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 8 of 577 15.4 Configuring IF Combining Diversity ........................................................................... 263 16. Configuring Multi-Radio ............................................................................... 265 16.1 Configuring 2+0 Multi-Radio ...................................................................................... 266 16.1.1 Multi Radio Traffic Blocking ....................................................................................... 267 16.1.2 Setting Multi-Radio Thresholds .................................................................................. 268 16.2 Configuring 2+0 Multi-Radio with Line Protection ...................................................... 269 17. Configuring XPIC .......................................................................................... 270 17.1 Conditions for XPIC .................................................................................................... 271 17.2 Configuring the Antenna and RFU for XPIC .............................................................. 271 17.2.1 IDU-RFU Cable Installation ........................................................................................ 271 17.2.2 Antenna Alignment ..................................................................................................... 271 17.2.3 Polarization Alignment ............................................................................................... 272 17.3 Displaying XPI Values ................................................................................................ 272 18. Configuring TDM Trails ................................................................................ 274 18.1 TDM Trails Overview .................................................................................................. 275 18.2 Viewing the Trails List ................................................................................................ 276 18.3 Adding New Trails ...................................................................................................... 277 18.4 Activating and Reserving Trails ................................................................................. 280 18.5 Deleting Trails ............................................................................................................ 281 18.6 Configuring SNCP and ABR Trail Protection ............................................................. 282 18.7 Configuring AIS Detection and Signaling ................................................................... 283 19. Configuring Synchronization ....................................................................... 284 19.1 Synchronization Overview.......................................................................................... 285 19.2 Configuring the Synchronization Source.................................................................... 286 19.2.1 Viewing Current Synchronization Sources................................................................. 288 19.3 Configuring the Outgoing Signal Clock ...................................................................... 290 19.3.1 Configuring Clock Sources ........................................................................................ 290 19.3.2 Viewing Clock Sources .............................................................................................. 291 19.4 Configuring PRC Regenerator Mode and Direction ................................................... 292 19.4.1 Basic Operation .......................................................................................................... 292 19.4.2 User Configuration ..................................................................................................... 293 20. Configuring RSTP ......................................................................................... 295 20.1 Network Resiliency Overview .................................................................................... 296 20.1.1 Standard RSTP .......................................................................................................... 296 20.1.2 Carrier Ethernet Wireless Ring-Optimized RSTP ...................................................... 297 20.2 Setting the xSTP Protocol .......................................................................................... 298 20.3 Configuring Ring-Optimized RSTP ............................................................................ 299 20.3.1 Ring RSTP Limitations ............................................................................................... 300 20.3.2 Ring RSTP Supported Topologies ............................................................................. 300 20.3.3 Ring RSTP Performance............................................................................................ 301 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 9 of 577 20.3.4 Ring RSTP Management ........................................................................................... 302 20.3.4.1 In-Band Management ................................................................................ 302 20.3.4.2 Out-of-Band Management ......................................................................... 303 20.3.5 Ring RSTP Configuration ........................................................................................... 304 20.3.5.1 Node Type A Configuration ....................................................................... 304 20.3.5.2 Node Type B Configuration ....................................................................... 305 20.3.6 Ring RSTP Installation ............................................................................................... 305 20.3.6.1 Installation Scenario1: Node with no STP ................................................. 305 20.3.6.2 Scenario2: Replacing an IDU in an RSTP Ring ........................................ 306 20.4 Configuring Ethernet Ports to Support RSTP ............................................................ 307 20.5 Configuring RSTP Priority .......................................................................................... 308 21. Working with Service OAM .......................................................................... 309 21.1 Working with MAIDs ................................................................................................... 310 21.1.1 Viewing MAID List Status and Details ........................................................................ 311 21.1.2 Adding MAIDs ............................................................................................................ 312 21.1.3 Deleting MAIDs .......................................................................................................... 312 21.2 Managing Local MEPs ............................................................................................... 313 21.2.1 Viewing Local MEPs .................................................................................................. 314 21.2.2 Adding Local MEPs .................................................................................................... 315 21.2.3 Deleting local MEPs ................................................................................................... 315 21.3 Managing Remote MEPs ........................................................................................... 316 21.3.1 Viewing Remote MEPs .............................................................................................. 317 21.3.2 Adding Remote MEPs ................................................................................................ 317 21.3.3 Deleting Remote MEPs .............................................................................................. 318 21.3.4 Pinging Remote MEPs ............................................................................................... 318 21.3.5 Remote MEP Linktrace .............................................................................................. 319 21.3.6 Enabling Automatic Linktrace for a MAID .................................................................. 321 21.4 Working with MEPs .................................................................................................... 322 21.4.1 Configuring CCM ........................................................................................................ 323 21.4.2 Viewing MAID Ethernet Ports .................................................................................... 323 21.4.3 Viewing Port MEPs .................................................................................................... 324 21.4.4 Adding MEPs to a Port ............................................................................................... 324 21.4.5 Deleting MEPs from a Port ........................................................................................ 325 21.5 Working with MIPs ..................................................................................................... 326 21.5.1 Viewing Port MIPs ...................................................................................................... 327 21.5.2 Adding MIPs to a Port ................................................................................................ 327 21.5.3 Deleting MIPs from a Port .......................................................................................... 327 21.6 Performing Manual Ping and Linktrace Operations ................................................... 328 21.6.1 Pinging Remote MEPs and MIPs ............................................................................... 329 21.6.2 Performing a Manual Linktrace .................................................................................. 330 22. Viewing System Activity and Performance ................................................. 331 22.1 Displaying and Clearing PMs ..................................................................................... 332 22.2 Displaying and Resetting RMON Counters................................................................ 333 22.3 Displaying Ethernet Statistics .................................................................................... 337 22.3.1 Displaying Frame Error Rate Statistics ...................................................................... 338 22.3.2 Displaying Throughput Statistics ................................................................................ 339 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 10 of 577 22.3.3 Displaying Capacity Statistics .................................................................................... 340 22.3.4 Displaying Utilization Statistics .................................................................................. 341 22.4 Displaying TDM PMs .................................................................................................. 342 22.4.1 Displaying E1/DS1 Line PMs ..................................................................................... 343 22.4.2 Displaying TDM Channel PMs ................................................................................... 344 22.4.3 Displaying TDM Trail PMs.......................................................................................... 345 22.4.4 Displaying STM-1/OC-3 Line PMs ............................................................................. 346 22.4.5 Displaying Pseudowire PMs ...................................................................................... 347 22.5 Displaying Radio PMs ................................................................................................ 353 22.5.1 Displaying Signal Level PMs ...................................................................................... 354 22.5.2 Displaying Aggregate Radio PMs .............................................................................. 355 22.5.3 Displaying Radio MRMC PMs .................................................................................... 356 22.5.4 Displaying Radio MSE PMs ....................................................................................... 357 22.5.5 Displaying Radio XPI PMs ......................................................................................... 358 22.6 Viewing Radio Status ................................................................................................. 359 22.6.1 Viewing RFU Status ................................................................................................... 360 22.6.2 Viewing MRMC Status ............................................................................................... 361 22.6.3 Viewing Current Tx Status ......................................................................................... 362 22.6.4 Viewing Current Rx Status ......................................................................................... 363 22.6.5 Viewing Remote Radio Parameters ........................................................................... 364 22.6.6 Viewing XPIC Status .................................................................................................. 364 22.7 Viewing Ethernet Interface Status .............................................................................. 365 22.8 Viewing RSTP Status ................................................................................................. 366 22.9 Viewing Enhanced Traffic Management Statistics ..................................................... 367 23. Fault Management ........................................................................................ 370 23.1 Overview of Fault Management ................................................................................. 371 23.2 LED Indicators ............................................................................................................ 373 23.3 Configuring External Alarms ...................................................................................... 374 23.4 Configuring Traps ....................................................................................................... 376 23.5 Configuring Power Supply Alarms ............................................................................. 377 23.6 Viewing Current Alarms ............................................................................................. 378 23.7 Viewing the Event Log ............................................................................................... 379 23.8 Monitoring the IDU-RFU Interface ............................................................................. 380 23.9 Loopback .................................................................................................................... 381 23.9.1 Radio Loopback ......................................................................................................... 382 23.9.2 E1/DS1 Line Loopback .............................................................................................. 383 23.9.3 STM-1/OC-3 Line Loopback ...................................................................................... 384 23.9.4 Pseudowire Line Loopback ........................................................................................ 385 23.10 Troubleshooting Protection ........................................................................................ 386 23.10.1 Switchover Triggers ................................................................................... 387 23.10.2 Copy-to-Mate ............................................................................................. 387 23.10.3 Mismatch Mechanism ................................................................................ 388 23.11 XPIC Recovery Mechanism ....................................................................................... 389 23.11.1 XPIC Events .............................................................................................. 389 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 11 of 577 23.12 Activating the All-ODU Enclosure .............................................................................. 391 24. Appendix A – CLI Reference ........................................................................ 392 24.1 Using the CLI ............................................................................................................. 393 24.1.1 Access rights .............................................................................................................. 393 24.1.2 Getting started ............................................................................................................ 393 24.1.3 Getting help ................................................................................................................ 394 24.1.4 Basic commands ........................................................................................................ 394 24.1.5 Finding commands ..................................................................................................... 395 24.1.6 Command example .................................................................................................... 395 24.1.7 Viewing the command tree ........................................................................................ 396 24.2 CLI Commands and Parameters ............................................................................... 399 24.2.1 management .............................................................................................................. 399 24.2.1.1 mng-services ............................................................................................. 399 24.2.1.2 cfg-service ................................................................................................. 399 24.2.1.3 event-service ............................................................................................. 399 24.2.1.4 alarm-service ............................................................................................. 400 24.2.1.5 pm-service ................................................................................................. 401 24.2.1.6 time-service ............................................................................................... 401 24.2.1.7 mng-software ............................................................................................. 403 24.2.1.8 users .......................................................................................................... 406 24.2.1.9 log-srv ........................................................................................................ 407 24.2.1.10 networking ................................................................................................. 407 24.2.1.11 ip-address .................................................................................................. 408 24.2.1.12 floating-ip-address ..................................................................................... 409 24.2.1.13 mng-protocols ............................................................................................ 409 24.2.1.14 snmp .......................................................................................................... 410 24.2.1.15 platform ...................................................................................................... 412 24.2.1.16 Inventory .................................................................................................... 413 24.2.1.17 daughter-board .......................................................................................... 416 24.2.1.18 license ........................................................................................................ 417 24.2.1.19 idc-board .................................................................................................... 419 24.2.1.20 fpga ............................................................................................................ 423 24.2.1.21 mate-idu ..................................................................................................... 424 24.2.1.22 all-odu ........................................................................................................ 425 24.2.1.23 shelf-manager ............................................................................................ 425 24.2.1.24 remote-idu .................................................................................................. 427 24.2.1.25 remote-cl .................................................................................................... 428 24.2.1.26 remote-co ................................................................................................... 428 24.2.1.27 radio-diversity ............................................................................................ 428 24.2.1.28 multi-radio .................................................................................................. 429 24.2.1.29 radio ........................................................................................................... 430 24.2.1.30 xpic............................................................................................................. 431 24.2.1.31 framer ........................................................................................................ 432 24.2.1.32 mrmc .......................................................................................................... 433 24.2.1.33 tdm-radio-pm ............................................................................................. 436 24.2.1.34 modem ....................................................................................................... 436 24.2.1.35 rfu ............................................................................................................... 437 24.2.1.36 rfu-sw-upload ............................................................................................. 442 24.2.1.37 rfu-fw-upload .............................................................................................. 442 24.2.1.38 rfu-co .......................................................................................................... 443 24.2.1.39 rfu-cl ........................................................................................................... 443 24.2.1.40 rfic .............................................................................................................. 443 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 12 of 577 24.2.1.41 enhanced-hc .............................................................................................. 443 24.2.1.42 interfaces ................................................................................................... 445 24.2.1.43 user-channel .............................................................................................. 446 24.2.1.44 eow ............................................................................................................ 446 24.2.1.45 wayside ...................................................................................................... 446 24.2.1.46 sync............................................................................................................ 447 24.2.1.47 ethernet ...................................................................................................... 449 24.2.1.48 bridge ......................................................................................................... 449 24.2.1.49 port-group .................................................................................................. 452 24.2.1.50 eth-port ...................................................................................................... 452 24.2.1.51 enhanced-tm .............................................................................................. 464 24.2.1.52 service-oam ............................................................................................... 469 24.2.2 pdh ............................................................................................................................. 471 24.2.2.1 e1t1-port .................................................................................................... 471 24.2.2.2 lag-port ....................................................................................................... 472 24.2.2.3 trails ........................................................................................................... 478 24.2.3 sdh .............................................................................................................................. 480 24.2.3.1 stm1 ........................................................................................................... 480 24.2.4 pw ............................................................................................................................... 483 24.2.4.1 pw-tdm ....................................................................................................... 483 24.2.4.2 pwc............................................................................................................. 483 24.2.4.3 tdm-ports .................................................................................................... 484 24.2.4.4 ds0-bundles ............................................................................................... 485 24.2.4.5 tunnels ....................................................................................................... 487 24.2.4.6 pw-profiles ................................................................................................. 488 24.2.4.7 pws............................................................................................................. 489 24.2.4.8 eth-port-pwc ............................................................................................... 491 24.2.5 diagnostics ................................................................................................................. 499 24.2.5.1 rmon ........................................................................................................... 499 24.2.5.2 loopback .................................................................................................... 499 24.2.6 xml-interface ............................................................................................................... 500 24.3 Basic System Configuration Using CLI ...................................................................... 501 24.3.1 Setting IP Addresses .................................................................................................. 502 24.3.2 Adding users .............................................................................................................. 502 24.3.3 Navigating between stacked units ............................................................................. 502 24.3.3.1 Going from the main unit to a different unit ............................................... 502 24.3.3.2 Returning to main unit................................................................................ 502 24.3.4 Performing Resets ..................................................................................................... 503 24.3.4.1 In Stacked Configuration ........................................................................... 503 24.3.4.2 In any IDU (Standalone or Nodal) ............................................................. 503 24.3.5 Configuration backup ................................................................................................. 504 24.3.5.1 Creating configuration backup files ........................................................... 504 24.3.5.2 Saving configuration files in external site: ................................................. 504 24.3.5.3 Downloading saved configuration files: ..................................................... 505 24.3.6 Software version management .................................................................................. 506 24.3.7 Using CLI scripts ........................................................................................................ 508 24.3.7.1 Setting external FTP client site parameters .............................................. 508 24.3.7.2 Managing and Executing scripts ................................................................ 508 24.3.8 CLI Script Limitations ................................................................................................. 509 24.3.9 Radio Parameter Configurations ................................................................................ 510 24.3.10 NTP ............................................................................................................ 512 24.3.11 SNMP ........................................................................................................ 513 24.3.11.1 SNMP parameters for SNMP Version 3 .................................................... 513 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 13 of 577 24.3.11.2 Configuring HTTPS Web Protocol ............................................................. 514 24.3.12 CFM ........................................................................................................... 516 24.3.12.1 Domain ...................................................................................................... 516 24.3.12.2 Domain & association ................................................................................ 516 24.3.12.3 Association ................................................................................................ 516 24.3.12.4 CCM ........................................................................................................... 517 24.3.12.5 CCM Interval .............................................................................................. 517 24.3.12.6 Local MEP ................................................................................................. 517 24.3.12.7 Remote MEP ............................................................................................. 518 24.3.12.8 MIP............................................................................................................. 518 24.3.12.9 Loopback (Ping) ......................................................................................... 518 24.3.12.10 Link Trace ............................................................................................. 520 24.3.12.11 Auto link trace ....................................................................................... 521 24.3.12.12 Auto Link Trace Interval........................................................................ 522 24.3.12.13 Remote MEP learning time .................................................................. 523 24.3.13 Pseudowire Configuration ......................................................................... 524 24.3.13.1 PW T-Card Basic Configuration ................................................................ 524 24.3.13.2 Ethernet Traffic Port Configuration ............................................................ 524 24.3.13.3 Configuring a SAToP UDP/IP Unprotected Service .................................. 525 24.3.13.4 Configuring a CESoPSN UDP/IP Protected Service ................................. 526 24.3.14 TDM trail management .............................................................................. 528 24.3.14.1 Defining a TDM Trail .................................................................................. 528 24.3.14.2 Viewing Trails Defined in the System ........................................................ 528 24.3.14.3 Deleting trails ............................................................................................. 529 24.3.14.4 Activating and reserving trails .................................................................... 530 24.3.15 TDM Protected Trails (SNCP) ................................................................... 530 24.3.15.1 Defining a Protected TDM Trail ................................................................. 530 24.3.15.2 Forcing trails to active/standby .................................................................. 531 24.3.16 Showing TDM Trail PMs and Status .......................................................... 532 24.3.16.1 Showing TDM Trail PM Measurements ..................................................... 532 24.3.16.2 Showing TDM Trail Status ......................................................................... 532 24.3.17 Configuring the Ethernet Switch Application ............................................. 533 24.3.18 Configuring the LAG Ports ......................................................................... 534 24.3.18.1 Setting load balancing of the LAG ............................................................. 534 24.3.18.2 Assigning ports to a LAG ........................................................................... 534 24.3.18.3 Defining LAG Options ................................................................................ 534 24.3.18.4 Deleting a LAG .......................................................................................... 536 24.3.19 Management Ports .................................................................................... 537 24.3.19.1 Port configuration ....................................................................................... 537 24.3.20 VLAN Configuration ................................................................................... 539 24.3.21 QoS Configuration ..................................................................................... 540 24.3.21.1 Ingress Classifier ....................................................................................... 540 24.3.21.2 Egress scheduler ....................................................................................... 540 24.3.21.3 Egress shaper ............................................................................................ 540 24.3.21.4 Policer ........................................................................................................ 541 24.3.21.5 QoS tables ................................................................................................. 541 24.3.22 Auxiliary Channels ..................................................................................... 543 24.3.22.1 Wayside Channel ....................................................................................... 543 24.3.22.2 User channel .............................................................................................. 543 24.3.23 Automatic State Propagation, 1+0 Configuration Only .............................. 544 24.3.23.1 Ethernet Shutdown (Rx) Profile Threshold (ACM Enabled) ...................... 544 24.3.23.2 Metro Switch and Port Type Configuration ................................................ 544 24.3.24 Radio script configuration .......................................................................... 546 24.3.25 Ring RSTP ................................................................................................. 547 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 14 of 577 25. Appendix B – List of Alarms ........................................................................ 548 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 15 of 577 About This Guide This document explains how to configure and operate an IP-10G or IP-10E IDU. This document applies to hardware versions R2 and R3 and software version I6.9. What You Should Know The instructions in this manual assume that you are using Ceragon’s Web- Based Element Management System (EMS) to perform software configuration. A reference guide to using the Command Line Interface is also included. Target Audience This manual is intended for use individuals responsible for configuration and administration of an IP-10G or IP-10E system or network. Related Documents FibeAir IP-10G Product Description FibeAir IP-10E Product Description FibeAir IP-10G Installation Guide - DOC-00023199 FibeAir IP-10E Installation Guide - DOC-00029444 FibeAir IP-10 G/E MIB Reference - DOC-00015446 FibeAir IP-10 License Management System - DOC-00019183 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 16 of 577 1. Introduction This chapter includes: About the CeraWeb EMS (Web EMS) Reference Guide to Web EMS Menu Structure FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 17 of 577 1.1 About the CeraWeb EMS (Web EMS) The CeraWeb Element Management System (Web EMS) is an HTTP web-based element manager that enables the operator to perform configuration operations and obtain statistical and performance information related to the system, including: Configuration Management – Enables you to view and define configuration data for the IP-10 system. Fault Monitoring – Enables you to view active alarms. Performance Monitoring – Enables you to view and clear performance monitoring values and counters. Maintenance Association Identifiers – Enables you to define Maintenance Association Identifiers (MAID) for CFR protection. Diagnostics and Maintenance – Enables you to define and perform loopback tests, software updates, and IDU-RFU interface monitoring. Security Configuration – Enables you to configure IP-10G/E security features. User Management – Enables you to define users and user groups. A Web-Based EMS connection to the IP-10G/E can be opened using an HTTP Browser (Explorer or Mozilla Firefox). The Web-Based EMS uses a graphical interface. All system configurations and statuses are available via the Web- Based EMS, including all L2-Switch configurations such as port type, VLANs, QoS. The Web-Based EMS shows the actual node configuration and provides easy access to any IDU in the node. 1.1.1 Browser behavior with Web EMS The Web EMS does not disable any innate browser functionality. However, some browser functions will not function as expected. The browser’s Back button will load the page that was open before you logged into the Web EMS. Therefore, you should use the navigation pane in the Web EMS to select pages, rather than the browser’s Back button. Selecting Refresh from the browser’s menu or pressing F5 will not update the information on the page. Rather, it will start a new Web EMS session. Therefore, you should use the Refresh buttons within the Web EMS GUI to update data. Note: For multi-radio configurations, protection, and extension units, available options will vary according to the available interfaces and configured features for selected slot. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 18 of 577 1.2 Reference Guide to Web EMS Menu Structure The following table shows the Web EMS menu hierarchy, with links to the sections in this document that provide instructions for the relevant menu item. Note: Some menu items are only available if the relevant license or feature is enabled. IP-10G/E Web EMS Menu Hierarchy Root Menu Item Sub-Menus Applicability For Further Information Faults Current Alarms IP-10G/E Viewing Current Alarms Event Log IP-10G/E Viewing the Event Log PM & Counters PM Commands IP-10G/E Displaying and Clearing PMs RMON IP-10G/E Displaying and Resetting RMON Counters TDM Trails IP.10G only Displaying TDM Trail PMs Pseudowire Port RMON IP.10G only Displaying Pseudowire PMs E1/DS1 Port # IP.10G only Displaying E1/DS1 Line PMs STM-1/OC-3 Port # IP.10G only Displaying STM-1/OC-3 Line PMs Radio Signal Level IP-10G/E RSL and TSL Thresholds Displaying Signal Level PMs Aggregate IP-10G/E Displaying Aggregate Radio PMs MRMC IP-10G/E Displaying Radio MRMC PMs MSE IP-10G/E MSE Threshold Displaying Radio MSE PMs XPI IP-10G/E XPI Threshold Displaying Radio XPI PMs TDM Channel IP.10G only Displaying TDM Channel PMs Ethernet > Capacity IP-10G/E Displaying Capacity Statistics Ethernet Capacity Threshold Radio Ethernet > Utilization IP-10G/E Displaying Utilization Statistics Ethernet Utilization Threshold Ethernet > Frame Error Rate IP-10G/E Displaying Frame Error Rate Statistics Ethernet > Throughput IP-10G/E Ethernet Throughput Threshold Displaying Throughput Statistics FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 19 of 577 Root Menu Item Sub-Menus Applicability For Further Information Configuration General Unit Parameters IP-10G/E Configuring and Viewing Unit System Information Configuring System Date and Time Configuring Unit Serial and Part Numbers Loading a New License Key Configuring 1+1 HSB Protection in a New Standalone System External Alarms IP-10G/E Configuring External Alarms Management IP-10G/E Configuring IP Addresses Configuring the Management Ports Preparing the System for Enhanced QoS Configuring 1+1 HSB Protection in a New Standalone System Configuring 1+1 HSB Protection in a New Nodal System Traps Configuration IP-10G/E Configuring Traps Licensing IP-10G/E Viewing Current License Details Loading a New License Key Replacing a License Working with a Demo License Viewing Licensed Usage and Features Configuring 1+1 HSB Protection in a New Standalone System Configuring 1+1 HSB Protection in a New Nodal System NTP IP-10G/E Configuring Network Timing Protocol (NTP) Parameters IP Table IP-10G/E Configuring Peer Port Settings SNMP IP-10G/E Configuring SNMP All ODU IP-10G/E Activating the All-ODU Enclosure Dual Power Supply IP-10G/E Configuring Power Supply Alarms Versions > IDU IP-10G/E Viewing IDU Version Information Versions > RFU IP-10G/E Viewing RFU Version Information FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 20 of 577 Root Menu Item Sub-Menus Applicability For Further Information Configuration Ethernet Switch Switch Configuration IP-10G/E Configuring Smart Pipe Switch Mode Configuring Managed and Metro Switch Mode Assigning VLANs to a Port QoS & Rate Limiting IP-10G/E Preparing the System for Enhanced QoS Configuring Enhanced QoS Enhanced Traffic Manager IP-10G/E Configuring Enhanced QoS STP Protocol IP-10G/E Setting the xSTP Protocol RSTP/Ring RSTP IP-10G/E Configuring Ring-Optimized RSTP Configuring Ethernet Ports to Support RSTP Configuring RSTP Priority Viewing RSTP Status Radio Radio Parameters IP-10G/E Enabling and Disabling the Radio Configuring the Radio Frequencies Specifying the Radio Link ID Enabling RSL Degradation Alarms Configuring Green Mode Configuring IF Combining Diversity Configuring Multi-Radio Displaying XPI Values Viewing RFU Status Viewing XPIC Status Remote Radio IP-10G/E Configuring the Radio Frequencies Viewing Remote Radio Parameters Radio Thresholds IP-10G/E Radio Threshold Levels MRMC IP-10G/E Selecting a Radio Script and Configuring ACM Viewing MRMC Status Viewing Current Tx Status Viewing Current Rx Status Compression IP-10G/E Configuring Compression Traffic Priority IP-10G/E Configuring Radio Traffic Priorities ATPC IP-10G/E Configuring ATPC Override FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 21 of 577 Root Menu Item Sub-Menus Applicability For Further Information Configuration Interfaces Ethernet Ports IP-10G/E Configuring a Single Pipe Port Configuring a Managed Switch or Metro Switch Port Configuring Automatic State Propagation Configuring LAGs Configuring an Ethernet Port for Pseudowire Viewing Ethernet Interface Status E1 Ports/DS1 Ports IP.10G only Configuring E1/DS1 Interfaces STM Ports/OC-3 Ports IP.10G only Configuring STM-1/OC-3 Interfaces Wayside Channel IP-10G/E Configuring the Wayside Channel Preparing the System for Enhanced QoS User Channel IP-10G/E Configuring the User Channel EOW IP-10G/E Viewing the EOW Channel Status AIS IP-10G/E Configuring AIS Detection and Signaling Synchronization > Sync Source IP-10G/E Configuring the Synchronization Source Configuring PRC Regenerator Mode and Direction Synchronization > Clock Source IP-10G/E Configuring the Outgoing Signal Clock Protection Protection Parameters IP-10G/E Configuring 2+0 Protection Configuring 2+2 HSB Protection Specifying Active and Standby Mode Configuring Switchover Criteria Viewing Mate Parameters Multi-Unit LAG IP-10G/E Configuring Multi-Unit LAG Radio Diversity IP-10G/E Configuring Diversity Trails TDM Trails IP-10G only Configuring TDM Trails Configuration Pseudowire Card Configuration IP-10G only Configuring Pseudowire Synchronization Configuring the Pseudowire T-Card TDM Ports IP-10G only Configuring the Pseudowire TDM Ports PSN Profiles IP-10G only Configuring Pseudowire Profiles PSN Tunnels IP-10G only Configuring Pseudowire Encapsulation (Tunnels) DS0 Bundles IP-10G only Configuring DS0 Bundles Pseudowire Service IP-10G only Configuring Pseudowire Services FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 22 of 577 Root Menu Item Sub-Menus Applicability For Further Information Service OAM MAID List IP-10G/E Working with MAIDs Managing Local MEPs Managing Remote MEPs Working with MEPs MEP and MIP List IP-10G/E Working with MEPs Working with MIPs Advanced Manual Ping IP-10G/E Pinging Remote MEPs and MIPs Manual Linktrace IP-10G/E Performing a Manual Linktrace Diagnostics & Maintenance Loopback Radio IP-10G/E Radio Loopback PDH Line IP-10G only E1/DS1 Line Loopback SDH/SONET Line IP-10G only STM-1/OC-3 Line Loopback Pseudowire TDM Ports IP-10G only Pseudowire Line Loopback Configuration Management IP-10G/E Configuring FTP or SFTP (Secure FTP) Archiving the Configuration Restoring the Default Configuration Software Management IP-10G/E Configuring IDU Software RFU Download IP-10G/E Updating the RFU Software Version IDU-RFU Interface Monitoring IP-10G/E Monitoring the IDU-RFU Interface Resets IP-10G/E Resetting the Unit File List IP-10G/E Viewing System Application Files Security Security Configuration IP-10G/E Configuring Secure Communication Channels Configuring a Timeout for Inactive Users Users & Groups IP-10G/E Adding Users Deleting Users CSR File IP-10G/E Generating a Security Certificate from a CSR File Change Password IP-10G/E Changing Your Password RADIUS IP-10G/E Configuring RADIUS FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 23 of 577 2. Getting Started This chapter includes: Establishing a Connection with the IDU Launching the Web EMS Configuring IP Addresses FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 24 of 577 2.1 Establishing a Connection with the IDU The default factory configuration of a new IP-10 IDU is: IP Address: 192.168.1.1, IP Mask 255.255.255.0. Active management ports: ports 6, and 7 (far right RJ45 ports), out-of band management. License: Basic – capacity 10Mbps, no ACM, Smart Pipe (only GbE ports, ports #1 or #3) SW package: Basic – 6.xx.xx. Protection: Disabled. 1+0 configuration To establish a connection with the IDU: 1 Verify that no Ethernet traffic (cables or fibers) is connected. 2 Power up the IDU. 3 Connect your PC or laptop to one of the IDU management ports (ports 6 or 7, far right RJ45 ports). 4 Set your PC or laptop to the following configuration: IP Address: 192.168.1.240 IP Mask 255.255.255.0 No default gateway. 5 Verify connectivity to the IDU by pinging 192.168.1.1. If there is no connectivity, verify IDU IP management configuration using the Command Line Interface (CLI). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 25 of 577 2.2 Launching the Web EMS You can use the Web EMS to perform initial IDU configuration. To launch the Web EMS: 1 Start your web browser. 2 In the URL address field at the top, type http://yourIP, where yourIP is the IP address of the IDU. The default IDU IP address is 192.168.1.1. 3 Press Enter. The IP-10 Login page is displayed. 4 Enter the user name and password: Default user name: admin Default password: admin. 5 Click Apply. The Main View page opens, displaying all the unit’s populated slots. Note: For multi-radio configurations, protection, and extension units, available options will vary according to the available interfaces and configured features for selected slot. Main View - Multi Radio Configuration Main View - Single Unit Configuration Configuration and other operations are performed by clicking the menus on the left side of the page. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 26 of 577 2.3 Configuring IP Addresses You can configure the local IDU’s IP address in the Local IP Configuration section of the Management page. You can configure the remote IDU’s IP address in the Remote IP Configuration section of the Management page. In protected configurations, the floating IP address feature provides a single IP address that will always provide direct access to the currently active main unit. This is used primarily for web-based management and telnet access. The user can configure a floating IP address in the active unit, and this IP address will be automatically copied to the standby unit. To configure local IP settings: 1 Select Configuration > General > Management. The Management page opens. 2 In the Local IP Configuration section of the Management page, enter the IP address of the local unit, its subnet mask, and the default gateway. 3 Optionally, enter a floating IP address. The following limitations apply to a floating IP address: The floating IP address must be different from the system IP address. The floating IP address must be in the same subnet as the system IP address. To configure remote IP settings: 1 Select Configuration > General > Management. The Management page opens. 2 In the Remote IP Configuration section of the Management page, enter the IP address of the remote unit and its subnet mask. 3 Click Open Remote to open the remote unit's management page. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 27 of 577 3. Configuring Secured Access Protocols This chapter includes: Security Overview Configuring SNMP Configuring Secure Communication Channels FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 28 of 577 3.1 Security Overview To guarantee proper performance and availability of a network as well as the data integrity of the traffic, it is imperative to protect it from all potential threats, both internal (misuse by operators and administrators) and external (attacks originating outside the network). System security is based on making attacks difficult (in the sense that the effort required to carry them out is not worth the possible gain) by putting technical and operational barriers in every layer along the way, from the access outside the network, through the authentication process, up to every data link in the network. 3.1.1 Defenses in Management Communication Channels Since network equipment can be managed from any location, it is necessary to protect the communication channels’ contents end to end. These defenses are based on existing and proven cryptographic techniques and libraries, thus providing standard secure means to manage the network, with minimal impact on usability. They provide defense at any point (including public networks and radio aggregation networks) of communications. While these features are implemented in Ceragon equipment, it is the responsibility of the operator to have the proper capabilities in any external devices used to manage the network. In addition, inside Ceragon networking equipment it is possible to control physical channels used for management. This can greatly help deal with all sorts of DoS attacks. Operators can use secure channels instead or in addition to the existing management channels: SNMPv3 for all SNMP-based protocols for both NEs and NMS HTTPS for access to the NE’s web server SSH-2 for all CLI access SFTP for all software and configuration download between NMS and NEs All protocols run with secure settings using strong encryption techniques. Unencrypted modes are not allowed, and algorithms used must meet modern and client standards. Users are allowed to disable all insecure channels. In the network elements, the bandwidth of physical channels transporting management communications is limited to the appropriate magnitude, in particular, channels carrying management frames to the CPU. Attack types addressed Tempering with management flows Management traffic analysis Unauthorized software installation Attacks on protocols (by providing secrecy and integrity to messages) FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 29 of 577 Traffic interfaces eavesdropping (by making it harder to change configuration) DoS through flooding 3.1.2 Defenses in User and System Authentication Procedures 3.1.2.1 User Identification IP-10G/E supports the following user identification features: Configurable inactivity time-out for closing management channels Password strength is enforced; passwords must comply with the following rules: Be at least 8 characters long Include both numbers and letters (or spaces, symbols, etc.) Include both uppercase and lowercase letters When calculating the number of character classes, upper-case letters used as the first character and digits used as the last character of a password are not counted A password cannot be repeated within the past 5 password changes Password aging: users can be prompted do change passwords after a configurable amount of time Users may be suspended after a configurable number of unsuccessful login attempts Users can be configured to expire at a certain date Mandatory change of password at first time login can be enabled and disabled upon user configuration. It is enabled by default. 3.1.2.2 Remote Authentication Certificate-based strong standard encryption techniques are used for remote authentication. Users may choose to use this feature or not for all secure communication channels. Since different operators may have different certificate-based authentication policies (for example, issuing its own certificates vs. using an external CA or allowing the NMS system to be a CA), NEs and NMS software provide the tools required for operators to enforce their policy and create certificates according to their established processes. Server authentication capabilities are provided. 3.1.2.3 Authorization Users are assigned to user groups. Each group has separate and well-defined authorization to access resources. Security configuration can only be performed by the group with the highest permission level. In the NMS, it is possible to customize groups and group permissions. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 30 of 577 3.1.2.4 RADIUS Support IP-10G/E supports RADIUS user authentication. RADIUS can be enabled or disabled by the user. Vendor-specific permission levels can be configured on the RADIUS server. The following RADIUS servers are supported: FreeRADIUS RADIUS on Windows Server (IAS) Windows Server 2008 Windows Server 2003 Cisco ACS 3.1.2.5 Attack Types Addressed Impersonation Unauthorized software installation Traffic interfaces eavesdropping 3.1.3 Secure Communication Channels IP-10G/E supports a variety of standard encryption protocols and algorithms, as described in the following sections. 3.1.3.1 SSH (Secured Shell) SHHv1 and SSHv2 are supported. SSH protocol can be used as a secured alternative to Telnet. SSH protocol will always be operational. Admin users can choose whether to disable Telnet protocol, which is enabled by default. Server authentication is based on IP-10G/E’s public key. Key exchange algorithm is RSA. Supported Encryptions: aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, arcfour128, arcfour256, arcfour, aes192-cbc, aes256-cbc, aes128-ctr, aes192-ctr, aes256-ctr. MAC (Message Authentication Code): SHA-1-96 (MAC length = 96 bits, key length = 160 bit). Supported MAC: hmac-md5, hmac-sha1, hmac- ripemd160, hmac-sha1-96, hmac-md5-96' The server authenticates the user based on user name and password. The number of failed authentication attempts is not limited. The server timeout for authentication is 10 minutes. This value cannot be changed. 3.1.3.2 HTTPS (Hypertext Transfer Protocol Secure) Administrators can configure secure access via HTTPS protocol. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 31 of 577 3.1.3.3 SFTP (Secure FTP) SFTP can be used for the following operations: Configuration upload and download, Uploading unit information Uploading a public key Downloading certificate files Downloading software Users with admin privileges can enforce secure FTP by disabling standard FTP. 3.1.3.4 Creation of Certificate Signing Request (CSR) File In order to create a digital certificate for the NE, a Certificate Signing Request (CSR) file should be created by the NE. The CSR contains information that will be included in the NE's certificate such as the organization name, common name (domain name), locality, and country. It also contains the public key that will be included in the certificate. Certificate authority (CA) will use the CSR to create the desired certificate for the NE. While creating the CSR file, the user will be asked to input the following parameters that should be known to the operator who applies the command: Common name – The identify name of the element in the network (e.g., the IP address). The common name can be a network IP or the FQDN of the element. Organization – The legal name of the organization. Organizational Unit - The division of the organization handling the certificate. City/Locality - The city where the organization is located. State/County/Region - The state/region where the organization is located. Country - The two-letter ISO code for the country where the organization is location. Email address - An email address used to contact the organization. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 32 of 577 3.1.3.5 SNMP IP-10G/E supports SNMP v1, V2c or v3. The default community string in NMS and the SNMP agent in the embedded SW are disabled. Users are allowed to set community strings for access to IDUs. SNMPv3 connections are authenticated with a single user ID and password. Admin users can configure this user ID and password. IP-10G/E supports the following MIBs: RFC-1213 (MIB II) RMON MIB Ceragon (proprietary) MIB. Access to all IDUs in a node is provided by making use of the community and context fields in SNMPv1 and SNMPv2c/SNMPv3, respectively. For additional information: FibeAir IP-10G/E I6.9 MIB Reference, DOC- 00015446 3.1.3.6 Server authentication (SSL / SLLv3) All protocols making use of SSL (such as HTTPS) use SLLv3 and support X.509 certificates-based server authentication. Users with type of “administrator” or above can perform the following server (IDU) authentication operations for certificates handling: Generate server key pairs (private + public) Export public key (as a file to a user-specified address) Install third-party certificates The Admin user is responsible for obtaining a valid certificate. Load a server RSA key pair that was generated externally for use by protocols making use of SSL. Non-SSL protocols using asymmetric encryption, such as SSH and SFTP, can make use of public-key based authentication. Users can load trusted public keys for this purpose. 3.1.3.7 Encryption Encryption algorithms for secure management protocols include: Symmetric key algorithms: 128-bit AES Asymmetric key algorithms: 1024-bit RSA 3.1.3.8 SSH The CLI interface supports SSH-2 Users of type of “administrator” or above can enable or disable SSH. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 33 of 577 3.1.4 Security Log The security log is an internal system file which records all changes performed to any security feature, as well as all security related events. Note: The Security log can only be accessed via the CLI. The security log file has the following attributes: The file is of a “cyclic” nature (fixed size, newest events overwrite oldest). The log can only be read by users with "admin" or above privilege. The log can be viewed using the following command: /management/mng-services/log-srv/security log/view-security log The contents of the log file are cryptographically protected and digitally signed. In the event of an attempt to modify the file, an alarm will be raised. Users may not overwrite, delete, or modify the log file. The security log records: Changes in security configuration Carrying out “security configuration copy to mate” Management channels time-out Password aging time Number of unsuccessful login attempts for user suspension Warning banner change Adding/deleting of users Password changed SNMP enable/disable SNMP version used (v1/v3) change SNMPv3 parameters change Security mode Authentication algorithm User Password SNMPv1 parameters change Read community Write community Trap community for any manager HTTP/HTTPS change FTP/SFTP change Telnet and web interface enable/disable FTP enable/disable Loading certificates RADIUS server Radius enable/disable Remote logging enable/disable (for security and configuration logs) FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 34 of 577 Syslog server address change (for security and configuration logs) System clock change NTP enable/disable Security events Successful and unsuccessful login attempts N consecutive unsuccessful login attempts (blocking) Configuration change failure due to insufficient permissions SNMPv3/PV authentication failures User logout User account expired For each recorded event the following information is available: User ID Communication channel (WEB, terminal, telnet/SSH, SNMP, NMS, etc.) IP address, if applicable Date and time FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 35 of 577 3.2 Configuring SNMP To configure SNMP: 1 Select Configuration > General>SNMP. The SNMP page opens. 2 Go to the In the SNMP Parameters section. 3 In the SNMP version field, select V1, V2c, or V3 to specify the SNMP version. 4 In the SNMP read community field, enter the password for the SNMP read community. 5 In the SNMP write community field, enter the password for the SNMP write community. 6 Click Apply. 3.2.1 Configuring SNMPv3 Parameters If you are using SNMPv3, you must configure the security mode, authentication, user name, and password. To configure SNMPv3 parameters: 1 Select Configuration > General>SNMP. The SNMP page opens. 2 Go to the In the SNMP V3 User Settings section. 3 In the Security mode field, select the SNMPv3security mode: Options are: No security Authentication (default) Authentication privacy FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 36 of 577 4 In the Authentication algorithm field, select either MDS or SHA. Note: This field is only configurable if the Security mode is not set to No security. 5 In the User name field, enter the SNMPv3 user name. 6 In the Password field, enter the SNMPv3 password. This field is only configurable if the Security mode is not set to No security. SNMPv3 passwords must be at least eight characters. 7 Click Change User Settings to apply the SNMP V3 changes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 37 of 577 3.3 Configuring Secure Communication Channels IP-10G and IP-10E work with several standard encryption protocols and algorithms for increased system security. The following sections provide instructions for configuring these protocols and algorithms and other communication security features: Configuring Inactivity Timeout Secure File Transfer and Server Authentication Configuring HTTPS (Hypertext Transfer Protocol Secure) Downloading a Certificate Configuring the Security File Name, Type and Format Enabling the CA Certificate Configuring FTP or SFTP (Secure FTP) Generating a Certificate Signing Request (CSR) File Generating a Security Certificate from a CSR File 3.3.1 Configuring Inactivity Timeout The system automatically times out after a specified number of minutes with no activity. To configure this timeout period: 1 Select Security > Security Configuration. The Security Configuration page is displayed. 2 In the Communication inactivity timeout field, enter the timeout period in minutes. The timeout can be from 1 to 60 minutes.. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 38 of 577 3.3.2 Secure File Transfer and Server Authentication IP-10G and IP-10E support Secured Shell protocol (SSH) and Telnet for secure file transfer. SSHv1 and SSHv2 are supported. SSH is always operational. In contrast, Telnet, which is enabled by default, can be disabled. To disable Telnet: 1 Select Security > Security Configuration. The Security Configuration page is displayed. 2 In the Telnet protocol field, select Disable. 3 Click Apply. Server authentication is based on IP-10G/E’s public key. The key exchange algorithm is RSA. Supported encryptions are: aes128-cbc, 3des-cbc, blowfish- cbc, cast128-cbc, arcfour128, arcfour256, arcfour, aes192-cbc, aes256-cbc, aes128-ctr, aes192-ctr, aes256-ctr. The server timeout for authentication is 10 minutes. This value cannot be changed. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 39 of 577 3.3.3 Configuring HTTPS (Hypertext Transfer Protocol Secure) The web interface protocol can be configured to be HTTP (default) or HTTPS, but it cannot be set to both at the same time. To configure HTTPS web protocol: 1 Create a CSR file, upload it and provide it to the Certificate Authority or certificate generator. Refer to Generating a Certificate Signing Request (CSR) File on page 42. 2 Configure the certificate file name, type, and format for each certificate that you wish to download. Refer to Configuring the Security File Name, Type and Format on page 40 3 Download the certificate to the NE. Refer to Downloading a Certificate on page 40. 4 Download the CA certificate to the NE (optional). Refer to Downloading a Certificate on page 40. 5 Enable the CA certificate (optional). 6 Set the web-protocol parameter to HTTPS: i Select Security > Security Configuration. The Security Configuration page opens. ii In the Security Parameters section, select HTTPS. iii Click Apply to save your changes. While switching to HTTPS mode, the following conditions must exist: A WEB server certificate file must exist. The certificate’s public key must be compatible with the IDU’s private key. Notes: For security reasons, this parameter is NOT copied by a copy to mate operation. An unsecured unit should not be able to override the security parameters of a secured unit just by performing a copy to mate operation. To configure HTTPS without certificates: 1 Upload the unit’s public key: i Select Security > Security Configuration. The Security Configuration page opens. ii In the Upload Public Key Status & Command section, click Upload Public Key. You can monitor the upload status in the Upload public key status field of the Security Configuration page. Note: Uploads are performed using FTP/SFTP. The public key file will be in PEM format. 2 Set the web-protocol parameter to HTTPS by performing Step 6 on page 39. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 40 of 577 3.3.4 Downloading a Certificate To download an IDU server or CA certificate, you must perform the following steps for each file type: Note: You must have admin privileges to perform this procedure. 1 Select Security > Security Configuration. The Security Configuration page opens. 2 In the Security file name field, enter the certificate file name. 3 In the Security file type field, enter the digital certificate type. Options are "Target certificate" for WEB server digital certificate, or "Target ca certificate" for WEB CA digital certificate. 4 In the Security file format field, select the certificate file format: PEM (for PEM formatted file) or DER (for DER formatted file). 5 In the WEB CA Certificate field, select Enable if the downloaded file is a “WEB CA digital certificate” or Disable if the file is a "WEB server digital certificate.” 6 Click Download Certificate. You can monitor the status of the download operation in the Download security status field in the Security Configuration page. 7 It is recommended to refresh the Security Configuration page once the certificate download operation is complete. 8 To apply the new certificate, the web server should be restarted. The web server is automatically restarted when it is configured to HTTPS. 3.3.5 Configuring the Security File Name, Type and Format To configure the security certificate file name, type, and format: 1 Select Security > Security Configuration. The Security Configuration page opens. 2 In the Download Certificate Parameters section, define the security certificate: In the Security file name field, enter a name for the certificate. In the Security type field, select the file type. Valid file type values are either: Target Certificate for WEB server digital certificate, or Target CA certificate for WEB CA digital certificate. In the Security type format field, select the file format. Valid file formats are PEM and DER. 3. Click Apply to save your changes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 41 of 577 3.3.6 Enabling the CA Certificate Determine whether to include the CA certificate into the web configuration definitions. This is an optional configuration and is recommended for adapting the web interface to all the web browsers applications. To enable the CA certificate: 1. Select Security > Security Configuration. The Security Configuration page opens. 2. Enable or disable the CA certificate in the Download Certificate Parameters section: Select Enable if the downloaded file is a WEB CA digital certificate. Select Disable if the file is "WEB server digital certificate". 3. Restart the web server to apply the new certificate. 3.3.7 Configuring FTP or SFTP (Secure FTP) Before uploading or downloading configuration archives, you must define FTP settings. IP-10G and IP-10E support the use of SFTP for the following operations: Configuration upload and download Uploading IDU unit information Uploading a public key Downloading certificate files Downloading software To configure local FTP or SFTP: 1. Select Diagnostics & Maintenance> Configuration Management and click the FTP parameters link at the bottom of the Configuration management page. 2. Specify the FTP server host. In the Server IP address field, enter the IP of the host where the archive is to be stored. In the Server files location path field, enter the path in the host (FTP directory) where the archive is to be stored. For the default FTP path use set // for Windows, or set / for Linux. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 42 of 577 3. In the File transfer protocol field, select Ftp or Sftp to specify the FTP mode. 4. Specify FTP login information. In the User name field, enter the user name for the FTP session. In the User password field, enter the password for the FTP session. If you use the default user name (anonymous), use the host login for the password. 5 Click Apply. To configure remote FTP: 1 Select Diagnostics & Maintenance> Software Management and click the FTP parameters link at the bottom of the Software management page. 2. Specify the FTP server host. In the Server IP address and path field, enter software update server URL, where the software updates reside. 3. Specify FTP login information. In the User name field, enter the user name for the FTP session. In the User password field, enter the password for the FTP session. If you use the default user name (anonymous), use the host login for the password. 4 Click Apply. 3.3.8 Generating a Certificate Signing Request (CSR) File In order to create a digital certificate for an IP-10G/E unit, or any other network element (NE), a Certificate Signing Request (CSR) file should be generated by the NE. The CSR contains information that will be included in the NE's certificate such as the organization name, common name (domain name), locality, and country. It also contains the public key that will be included in the certificate. Certificate authority (CA) will use the CSR to create the desired certificate for the NE. When creating the CSR file, you will be prompted to input the following parameters: Common name – The identify name of the element in the network (e.g., the IP address). The common name can be a network IP or the FQDN of the element. Organization – The legal name of the organization. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 43 of 577 Organizational Unit - The division of the organization handling the certificate. City/Locality - The city where the organization is located. State/County/Region - The state/region where the organization is located. Country - The two-letter ISO code for the country where the organization is location. Email address - An email address used to contact the organization. To generate a CSR file: 1 Select Security > CSR file. The CSR File page opens. 2 In the Country name field, enter the two-letter ISO code for the country where the organization is location. 3 In the State or Province Name field, enter the state or region where the organization is located. 4 In the Locality Name field, enter the city where the organization is located. 5 In the Organization name field, enter the legal name of the organization. 6 In the Organizational unit name field, enter the division of the organization handling the certificate. 7 In the Common Name field, enter the identify name of the element in the network (e.g., IP address). 8 In the Email address field, enter an email address used to contact your organization. The common name could be network IP or the FQDN of the element. 9 Click Create CSR file. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 44 of 577 3.3.9 Generating a Security Certificate from a CSR File To generate a security certificate from the CSR text only: 1 Select Security > CSR file. The CSR File page opens. 2 Click the View CSR file link at the bottom of the page. The CSR file opens. 3 Copy the CSR file to paste into a CSR generator and give it to a certificate generator or the Certificate Authority. To generate a certificate from a CSR file via upload: 1 Select Security > CSR file. The CSR File page opens. 2 Enter the name of the CSR file in the Security file name field. 3 Click Apply. 4 When the Upload CSR file status field indicates Ready, click Upload File. 5 Give the CSR file to a certificate generator or the Certificate Authority. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 45 of 577 4. Working with Configuration Files This chapter includes: Archiving the Configuration Restoring the Default Configuration Resetting the Unit FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 46 of 577 4.1 Archiving the Configuration In the Configuration Management page, you can manage unit information and configuration archives. 4.1.1 Creating a Configuration Archive File To create a unit information archive file: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Configuration section under Upload Status & Commands, click Create Archive. 4.1.2 Viewing Configuration Archive Creation Status To view configuration archive creation status: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Upload Status & Commands section of the Configuration Management page, view the configuration archive creation status in the Config creation status field. Possible status values are: Ready In Progress Succeeded Failed FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 47 of 577 4.1.3 Uploading a Configuration Archive File To upload a unit information archive file: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Configuration section under Upload Status & Commands, click Upload Archive. 4.1.4 Viewing Configuration Archive Upload Status To view archive upload status: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Upload Status & Commands section of the Configuration Management page, view the archive upload status in the Config upload status field. Possible status values are: Ready In Progress Succeeded Failed 4.1.5 Creating a Unit Information Archive File To create a unit information archive file: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Unit Information section under Upload Status & Commands, click Create Archive. 4.1.6 Viewing Unit Information Archive Creation Status To view unit information archive creation status: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Upload Status & Commands section of the Configuration Management page, view the unit information archive creation status in the Unit info creation status field. Possible status values are: Ready In Progress Succeeded Failed FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 48 of 577 4.1.7 Uploading a Unit Information Archive File To upload a unit information archive file: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Unit Information section under Upload Status & Commands, click Upload Archive. 4.1.8 Viewing Unit Information Archive Upload Status To view the unit information archive upload status: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Upload Status & Commands section of the Configuration Management page, view the archive upload status in the Unit info upload status field. Possible status values are: Ready In Progress Succeeded Failed 4.1.9 Downloading a Configuration Archive File To download a configuration archive file: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Upload/Download Status & Commands section, click Download Archive(s). 4.1.10 Viewing configuration file download status To view configuration file download status: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 View the download status in the Config download status field, located in the Upload/Download Status & Commands section. Possible values are: Ready In Progress Succeeded Failed FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 49 of 577 4.1.11 Uploading a Configuration Archive File To download an archive file: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Upload/Download Status & Commands section, click Upload Archive(s). 4.1.12 Viewing configuration file installation status To view configuration file download status: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 View the upload status in the Config upload status field, located in the Upload/Download Status & Commands section. Possible values are: Ready In Progress Succeeded Failed FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 50 of 577 4.2 Restoring the Default Configuration You can reset the IDU to the default factory configuration: 1 Select Diagnostics & Maintenance> Configuration Management. The Configuration Management page opens. 2 In the Set to factory default configuration section, click Activate. 3 Click OK to confirm the reset, or Cancel to return to the Configuration Management window. 4.3 Resetting the Unit To perform a system reset: 1 Select Diagnostics & Maintenance> Resets. The Resets page opens. 2 In the Click to perform reset section, click Reset. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 51 of 577 5. Configuring Users and Password Security This chapter includes: Configuring RADIUS Adding Users Deleting Users Changing Your Password Configuring a Timeout for Inactive Users FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 52 of 577 5.1 Configuring RADIUS IP-10G/E supports RADIUS user authentication. RADIUS can be enabled or disabled by the user. Vendor-specific permission levels can be configured on the RADIUS server. The following RADIUS servers are supported: FreeRADIUS RADIUS on Windows Server (IAS) First priority - Windows Server 2008 Second priority - Windows Server 2003 Cisco ACS To configure RADIUS on the IP-10G/E: 1 Select Security > RADIUS. The RADIUS page opens. 2 In the Radius admin field, select Enable to enable RADIUS server. 3 In the Server ip address field, enter the IP address of the RADIUS server. 4 In the Server shared secret field, enter a secret word (up to 128 characters). This word must also be configured in the RADIUS server. 5 In the Server port field, enter a port number for the server (1 to 65536). The RADIUS server must be configured with the same port number. 6 In the Server request attempts field, enter the number of retries (1 to 10). 7 In the Server timeout field, enter the timeout between retries (in seconds) when attempting to connect to the RADIUS server (3-30). 8 Click Apply. The RADIUS should be configured with the same parameters as the RADIUS client. In order to support IP-10G/E- specific privilege levels, the vendor-specific field must be used. Ceragon’s IANA number for this field is 2281. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 53 of 577 The RADIUS server should be configured with the privilege levels supported by IP-10G as follows: Type of privilege (TLV) in Vendor-Specific Field Values Interpretation 1 1-4 IP-10 privileges: 1 – Viewer 2 – Operator 3 – Technician 4 – Admin 2 1 Root privilege FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 54 of 577 5.2 Adding Users When you add a new user, you must assign the user to a User Privilege group. You must also assign a password to the user. Passwords must comply with the following rules: Must include at least 8 characters Must include both numbers and letters (or spaces, symbols, etc.) Must include both uppercase and lowercase letters When calculating the number of character classes, upper-case letters used as the first character and digits used as the last character of a password are not counted A password cannot be repeated within five password changes Users can be required to change passwords at the interval set in the Password Aging field. Passwords can also be set to expire at a fixed date. To add a new user: 1 Select Security > Users and Groups. The Users and Groups page opens. 2 Click Add User underneath the Users list to define a new user. The Add a user window opens. 3 In the User Privilege field, select a user group. Each user group includes a set of user privileges, which are assigned to users in that group. Options are: Viewer - The user can only view, not configure, parameters. Operator - The user can configure all parameters in the system, except for security-related parameters (such as adding privilege groups). Admin - The user has all Operator privileges, as well as the ability to add new users. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 55 of 577 Tech (technician) – The user has all Admin privileges, as well as access to the Linux OS shell. 4 Define the user login parameters: In the User Name field, enter a user name for the user. In the Password field, enter a password that will authenticate the user. 5 Specify the user password settings: In the Expiration date field, click the calendar icon and select the expiration date for the user’s password. To configure no expiration date for the password, select Never. In the Password Aging field, select the number of days for which a password is valid for this user. Whenever this interval is reached, the system will require the user to change his or her password. If you select No aging, the user will never be required to change his or her password. 6 Click Apply to add the new user. 5.3 Deleting Users To delete a user: 1 Select Security > Users and Groups. The Users and Groups page opens. 2 In the Users table: i Select the checkbox next to each user that you want to delete. ii Click the Delete selected button underneath the Users list. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 56 of 577 5.4 Changing Your Password To change your password: 1 Select Security > Change Password. The Change Password page opens. 2 Enter your old password in the Old password field. 3 Enter your new password in the New password field. 4 Re-enter your new password in the Reenter password field. 5 Click Change Password. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 57 of 577 5.5 Configuring a Timeout for Inactive Users To suspend inactive users: 1 Select Security > Security Configuration. The Security Configuration page opens. 2 Configure the auto logout timeout by specifying the number of minutes before automatically suspending an inactive user in the Communication inactivity timeout field, located in the Security Parameters section. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 58 of 577 6. Configuring Software This chapter explains how to manage IDU and RFU software, including how to view version information, download software files, and upgrade the software. RFU software is managed via the IDU. This chapter includes: Configuring IDU Software Configuring RFU Software FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 59 of 577 6.1 Configuring IDU Software New IDUs contain the basic software version (6.xx.xx.), and require a software upgrade in order to support all system features. You must download the new software by FTP. When downloading software, the IDU functions as an FTP client. You must install FTP server software on the PC or laptop you are using to perform the software upgrade. You may use Windows FTP Server or any other FTP server application to perform the upgrade. Note: It is recommended to use FileZilla_Server-0_9_26 software that can be downloaded from the web (freeware). IP-10G/E includes a timed software installation feature that enables you to configure a software upgrade to take place at a later time. This enables you to perform software upgrades during periods of off-peak user traffic. IP-10G/E software versions are released as zipped Linux RPM (Red Hat Package Manager) files (22 files or more). Note: IDU software versions do not include RFU software, which much be configured separately. Refer to Configuring RFU Software and Firmware on page 65. This section includes the following topics: Viewing IDU Version Information Downloading IDU Software Files Upgrading the IDU Software Version Rolling Back a Software Upgrade FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 60 of 577 6.1.1 Viewing IDU Version Information To view IDU version information: 1 Select Configuration > General > Versions > IDU. The IDU Versions window opens. The IDU Versions table includes the following columns: Package Name – Indicates the name of the software package. Target Device – Indicates the specific component that is contains the version. Running Version– Indicates the version that is currently running on the IDU. Installed Version– Displays IDU software files that were successfully installed. Upgrade Package– Displays IDU software files that were successfully downloaded to the IDU, and are ready to be installed when IDU upgrade is executed. Downgrade Package– Displays IDU software files that were successfully downloaded to the IDU, and are ready to be installed when IDU downgrade is executed. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 61 of 577 6.1.2 Downloading IDU Software Files To download IDU software files: 1 Verify that your Windows firewall is disabled. 2 Select Diagnostics & Maintenance> Software Management. The Software Management page opens. 3 Verify that the FTP server and remote server are properly configured. Refer to Configuring FTP or SFTP (Secure FTP) on page 41. 4 In the New Version section, click Download to download a software upgrade package. This may take a few minutes. Note: If you want to install an older version of the software, click Download in the Old Version section rather than the New Version section of the Software Management page. 5 Download or take the zipped software package (e.g., aidu-6.9.X.X.X.X.zip) from FTP and save it under C:\updates. 6 Extract the files to C;\updates. 7 Remove the ZIP file and store it in another location (e.g., C:\IP-10). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 62 of 577 The Download Status field displays the status of the software download. Options are: Ready In-Progress Success Failure To view the software download log, click the icon next to the Download Status field. 6.1.3 Upgrading the IDU Software Version If you are upgrading the software in a 1+1 nodal configuration, make sure to perform the following steps: 1 Before initiating the upgrade, connect to the active IDU in the local site. 2 Select Configuration > Protection > Protection Parameters. The Protection Parameters page opens. 3 Set Protection Lockout to: On. 4 Click Apply. If you are upgrading the software in a 1+1 standalone configuration, upgrade the standby IDU first, then upgrade the active IDU. If you are upgrading the software in a 2+2 configuration, upgrade the I To upgrade an IDU’s software: 1 Select Diagnostics & Maintenance> Software Management. The Software Management page opens. 2 In the Installation Type section, specify the type of installation: Regular – The upgrade will be initiated immediately when you click Upgrade. Timed – The upgrade will be initiated after a defined time interval. 3 For a timed installation, specify the number of minutes in the Timed Install section of the Software Management page. When you click Upgrade, the upgrade will be initiated after the defined number of minutes. 4 In the New Version section, click one of the following: In a 1+1 nodal configuration, select the standby IDU and click Upgrade Selected to upgrade the software in the standby IDU. This may take a few minutes. Once the upgrade is complete, the standby IDU will automatically reboot. Then, select the active IDU and click Upgrade Selected. Once the upgrade is complete, verify in the Configuration > General > Versions > IDU page that the new version is installed and running. In a 2+0 system, click Upgrade All to upgrade the software in both IDUs. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 63 of 577 In a 2+2 configuration, click Upgrade All to upgrade the software in both IDUs in the standby enclosure. Once the upgrade is complete in both IDUs, the IDUs will automatically reboot. Then, go to the active enclosure and click Upgrade All to upgrade both IDUs in the active enclosure. Note: If you are downgrading to an older software version, click Downgrade Selected or Download All in the Old Version section instead of Upgrade Selected or Upgrade All in the New Version section. Software downgrade requires a special package for downgrade. For example: downgrade-aidu-6.9.X.X.X.X.zip. 5 For a 1+1 configuration, select Configuration > Protection > Protection Parameters, set Protection Lockout to Off, and click Apply. The Install Status section indicates the current download status. Options are: Ready In-Progress Success Failure For a timed installation, the Install Status section indicates the number of remaining minutes until the installation begins. Note: Cancelling a timed installation operation will not abort an installation that is already in progress. To view the software installation log, click the icon next to the slot you want to view in the Install Status section. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 64 of 577 6.1.4 Rolling Back a Software Upgrade Rolling back an installation restores the select unit or units to the previous software version. Note: Rolling back is not the same as a downgrade. For example, you could rollback a downgrade operation, which in effect upgrades the unit to the software version it was running before the downgrade. To rollback a software installation: 1 Select Diagnostics & Maintenance> Software Management. The Software Management page opens. 2 In the Installation Type section, specify the type of software rollback: Regular – The rollback will be initiated immediately when you click Upgrade. Timed – The rollback will be initiated after a defined time interval. 3 For a timed rollback, specify the number of minutes in the Timed Install section of the Software Management page. When you click Rollback, the rollback will be initiated after the defined number of minutes. 4 Optionally, in a 1+1 or 2+0 system, select Slot #1 or Slot #2 in the Install Status section to rollback the software in only one IDU in the pair. 5 Underneath the Timed Install section, click one of the following: To rollback the software in only one unit, click Rollback Selected to upgrade the software in the unit selected in the Install Status section. To rollback both units in a 1+1 or 2+0 pair, click Rollback All. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 65 of 577 6.2 Configuring RFU Software and Firmware RFU software and firmware is configured via the IDU. You can initiate RFU software downloads and upgrades, and view the status of these operations, in the RFU Download page. This section includes: Viewing RFU Version Information Updating the RFU Software Version FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 66 of 577 6.2.1 Viewing RFU Version Information To view RFU software versions currently installed in the IDU as part of the overall software package. 1 Select Configuration > General > Versions > RFU. The RFU page opens. The RFU Installed Versions section of the RFU page displays the RFU software versions currently installed in the IDU as part of the overall software package. Type indicates the RFU type. SW Version indicates the version of the installed RFU software. FW Version indicates the version of the installed RFU firmware. To view the RFU type and the software version currently running on the RFU: 1 Select Configuration > General > Versions > RFU. The RFU page opens. 2 In the RFU Running Versions section: RFU type indicates the RFU type. Software version indicates the software version currently running on the RFU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 67 of 577 To view the RFU software packages that have been successfully downloaded to the IDU, and are ready to be installed: 1 Select Configuration > General > Versions > RFU. The RFU page opens. 2 In the RFU Upgrade & Download Versions section: Common version rfu upgrade indicates the version of the RFU software upgrade package. Common version rfu downgrade indicates the version of the RFU software downgrade package. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 68 of 577 6.2.2 Updating the RFU Software Version To initiate an RFU download: 1 Select Diagnostics & Maintenance> RFU Download. The RFU Download page opens. 2 Click Software Download. The following fields display the RFU software download status: RFU software download status - Displays the current state of RFU software download. RFU software download progress - Displays the download progress. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 69 of 577 7. Configuring and Viewing Basic System Information This chapter includes: Configuring and Viewing Unit System Information Configuring System Date and Time Configuring Network Timing Protocol (NTP) Parameters Configuring Unit Serial and Part Numbers Viewing System Application Files FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 70 of 577 7.1 Configuring and Viewing Unit System Information You can view and configure system information on the Unit Parameters page: 1 Select Configuration > General > Unit Parameters. The Unit Parameters page opens. 2 The following fields in the Unit Parameters section of the Unit Parameters page can be modified: System name – A name for the node (optional). By convention, this is the node’s fully qualified domain name. Slot label – A name for the link. By convention, this is the name and slot label of the unit across the radio link. Contact person - The name of the person to be contacted when a problem with the system occurs (optional). System location - The actual physical location of the node or agent (optional). Measurement system – The type of measurement you want the system to use: Metric or Imperial. 3 The following fields in the Unit Parameters section of the Unit Parameters page are read-only. The values in these fields are either automatically generated or configured elsewhere. IP address – Displays the IP address that is configured in the Management page System description – Provides a general description of the system. System up time – The length of time for which the system has been continuously operating. Voltage input – The current input voltage. IDU temperature – The current temperature of the IDU. RFU temperature – The current temperature of the RFU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 71 of 577 7.2 Configuring System Date and Time By default, the system date and time are derived from the operating system clock. You can set new date and time values in the Unit Parameters page. 1 Select Configuration > General > Unit Parameters. The Unit Parameters page opens. 2 You can set the following parameters in the Date & Time Configuration section: Click the calendar to set the date. Click the time area to set the time. Specify the offset from Greenwich Mean Time (GMT) in the Offset from GMT section. To configure Daylight Saving Time: 1 Select Configuration > General > Unit Parameters. The Unit Parameters page opens. 2 In the Daylight Saving Time section: In the Start date field, click the calendar to set the date when daylight saving time will automatically be activated. In the End date field, click the calendar to set the date when daylight saving time will automatically be terminated. In the Offset field, specify the offset (in hours) from Greenwich Mean Time (GMT). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 72 of 577 7.3 Configuring Network Timing Protocol (NTP) Parameters You can view and set Network Timing Protocol (NTP) parameters in the NTP Server Parameters window. 1 Select Configuration > General > NTP. The NTP Server Parameters page opens. 2 In the Admin field, select Enable or Disable to enable or disable the NTP server. 3 In the Server IP field, enter the IP address of the NTP server. The following fields are read-only: Status – Indicates whether the NTP server is Up or Down. Sync server – Displays details about the NTP server with which the system is currently synchronized. The following values may appear: IP address of the remote NTP server Local, if locked to the local element’s real-time clock NA, when Admin is set to Disable and not synchronized with any clock. Poll interval – The interval used by the NTP client to maintain synchronization with the current NTP server. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 73 of 577 7.4 Configuring Unit Serial and Part Numbers When you perform license upgrades and certain other operations, you will need to supply the unit’s serial number. To view IDU serial and part numbers: 1 Select Configuration > General > Unit Parameters. The Unit Parameters page opens. 2 In the IDU Serial/Part Numbers section: Serial number - The IDU’s serial number. Part number - The IDU’s part number. To view RFU serial and part numbers: 1 Select Configuration > General > Unit Parameters. The Unit Parameters page opens. 2 In the RFU Serial/Part Numbers section: Serial number - The RFU’s serial number. Part number - The RFU’s part number. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 74 of 577 7.5 Viewing System Application Files The File List page displays all application-related files on the disk. 1 Select Diagnostics & Maintenance> File List. The File List page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 75 of 577 8. Configuring Feature and Capacity Licenses New IDUs are delivered with a basic license: License: Basic - capacity 10Mbps, no ACM, Smart Pipe (only GbE ports, ports #1 or #2) Feature and capacity upgrades are implemented through manual entry of a license key based on the IDU's serial number. Contact Ceragon in order to obtain your license key. This chapter includes: Viewing Current License Details Loading a New License Key Replacing a License Working with a Demo License Viewing Licensed Usage and Features FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 76 of 577 8.1 Viewing Current License Details The Licensing page displays details about the current IDU’s license status. To view the IDU’s current license: 1 Select Configuration > General > Licensing. The Licensing page opens. The License type field in the Current License section displays the current license type. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 77 of 577 8.2 Loading a New License Key A new license key must be obtained from your Ceragon representative. Once you receive a new license key, you must load the new license key into the IDU: 1 Select Configuration > General > Unit Parameters. The Unit Parameters page opens. 2 Verify that the three left characters of the license key match the three right characters of the IDU Serial Number, displayed near the bottom of the Unit Parameters page. Note: You may have to scroll down the Unit Parameters page to display the IDU Serial Number. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 78 of 577 3 Select Configuration > General > Licensing. The Licensing page opens. 4 Enter the license key in the License code field. 5 Click Apply. 6 Perform a cold reset of the IDU. The new license will take be activated only after a cold reset. 7 Select Configuration > General > Licensing. The Licensing page opens. 8 Verify that the license parameters were updated. Note: If the license key itself is not legal (e.g., a typing mistake or an invalid serial number), a License Violation alarm is raised specific to the problem with the license. In the event of a License Violation alarm, radio port capacity is automatically limited to ~3Mbps, allowing only management channels to the remote end. In order to clear the alarm, you must configure the system to comply with the loaded license, then issue a cold-reset. When the system returns online, it checks the legality of the configuration against the license limits. If no violation is detected, no alarm is raised, and the radio is fully operational. For additional information: Resetting the Unit FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 79 of 577 8.3 Replacing a License This feature requires: Software version I6.9 or higher If an operator needs to change its level of feature support or capacity, a new license key can be issued to support the new level of feature support and capacity. Once the license is entered into the IP-10G, a validation key is issued confirming the license change in the event that the operator is entitled to a refund. Once the new license key is entered, any previously used license keys become invalid and can no longer be used. The IP-10G/E licensing mechanism provides license keys per IDU serial number. You cannot use the same license key on a different IDU. However, in some cases, it may be necessary to downgrade the IDU’s capabilities and obtain a refund for the difference between the supported features and capabilities on the old and the new license. To replace the IDU license and obtain a refund: 1 In the LMS server, select the IDU and the license set for which you want to obtain credits. The LMS generates a new license for the specified IDU. The new generated license key is of a new type (30 characters long, as opposed to 17 characters long). 2 Load the new license key to the IDU and reset the IDU, as described in Loading a New License Key on page 77. 3 After loading the new license, the IDU generates a Validation Number. 4 Provide the Validation Number to your Ceragon representative, or load the Validation Number into the LMS server. Your available credits will be updated. You can use refunded credits to generate licenses for other IDUs. Note: For instructions on using the LMS server, refer to FibeAir IP- 10 License Management System, DOC-00019183. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 80 of 577 The license replacement feature is subject to the following limitations: The new license key is a new type of license key that consists of 30 characters. The old license key is only 17 characters long. The new license key can only be loaded on an IDU running software version I6.9 or later. Earlier software releases will not accept the 30 characters license key, and license replacement will therefore not be possible. If the IDU is running earlier software release, you must upgrade the IDU software to I6.9 or higher before performing the license replacement procedure. License replacement does not have any impact on the IDU’s functionality unless the license is violated. An IDU will not accept old type (17 characters) license keys after a new (30 characters) license key has been loaded. The license replacement and refunding procedure may be performed several times on the same IDU. Each time, a new 30 character license key is generated by the LMS. An IDU will not accept a 30 character license key that was generated before the license key currently installed on the IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 81 of 577 8.4 Working with a Demo License You can use a Demo license for 60 days for full capacity and a full feature-set. To enable or disable the demo license: 1 Select Configuration > General > Licensing. The Licensing page opens. 2 In the Demo admin field, in the Demo License section, select Enable to enable the Demo license, or Disable to disable the Demo license. Demo timer is a read-only field that displays the time remaining for use of the Demo license. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 82 of 577 8.5 Viewing Licensed Usage and Features The License Features section of the Licensing page indicates which features are licensed for use according to the currently-installed license key. 1 Select Configuration > General > Licensing. The Licensing page opens. The following fields appear in the License Features section of the Licensing page: ACM license – Indicates whether Adaptive Coding Modulation (ACM) is installed. Switch application license – Displays the type of Ethernet Switching application licensed for the IDU (Single Pipe or Switch). Capacity – Displays the maximum licensed radio capacity. Network resiliency license –Indicates whether the resiliency (RSTP/SNCP) feature is available. TDM-only capacity license –Indicates whether the TDM capacity license is installed. This license limits the amount of TDM trails that can be mapped to a radio. If this license is installed, any radio script can be loaded but the number of TDM trails is limited. Note: This license is not relevant for the IP-10E. TDM-only capacity value – Indicates the amount of TDM trail capacity corresponding to the TDM capacity license. Note: This field is not relevant for the IP-10E. Synchronization Unit License – Indicates whether or not the Synchronization Unit License (Synchronous Ethernet output) is installed. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 83 of 577 Enhanced Traffic Manager License – Indicates whether the Enhanced Traffic Manager license is installed. This license enables you to use the Enhanced Quality of Service (QoS) feature. Asymmetrical scripts license – Indicates whether the IDU is licensed to use asymmetric scripts. Enhanced compression license – Indicates whether the IDU is licensed to use enhanced multi-layer Ethernet header compression. Per usage license – Indicates whether the per usage license is installed. A per usage license allows unlimited usage of all features in the system. Feature and capacity usage is tracked by the system, and a report can be generated for billing purposes. Note: The usage report must be generated using PolyView, Ceragon’s Network Management System (NMS). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 84 of 577 9. Configuring Unit Management This chapter includes: Management Overview Configuring the Management Ports Configuring Out-of-Band Management Configuring In-Band Management FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 85 of 577 9.1 Management Overview An IP-10G/E system can be configured to use between 0 and 3 Ethernet management ports. The default number of ports is 2. Ethernet ports 5, 6, and 7 are the only ports that can be assigned to be management ports: Configured Number of Management Ports Management Interfaces 1 Ethernet 7 2 (default) Ethernet 7, Ethernet 6 3 Ethernet 7, Ethernet 6, Ethernet 5 0 None Management ports are connected to the switch (bridge) and are configured to Learning mode. Note: Management ports can be configured to have one of the following capacities: 64kbps, 128kbps, 256kbps, 512kbps, 1024kbps, 2048kbps (default). Capacity is limited by the port ingress rate limit. In a nodal configuration, all management is carried out through the main unit, which communicates with the extension units via the nodal backplane. Therefore, management traffic must reach the main unit in order for management to be available. A local craft terminal can be used to configure each IDU individually using CLI. However, with the exception of the main unit, functionality is limited to local configurations. Access to all other units is provided via the main unit’s CLI. For remote channels (e.g., CeraWeb, PolyView, and Telnet) this requires IP traffic to be directed to the main unit. The IP address of the node is the address of the main unit in the node. In a 1+1 configuration, the node will have two IP addresses (the addresses of each of the main units) and should be managed via the Active unit. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 86 of 577 9.2 Configuring the Management Ports 1 Select Configuration > General > Management. The Management page opens. Management ports are configured in the Management Ports section, towards the bottom of the Management page. 2 In the bottom of the Management page, click Refresh. The current parameters are displayed. 3 In the Number of ports field, specify the number of ports that are used for management data. The IDU has three ports for local management: Port 7, Port 6 and Port 5. You may enable none or up to 3 ports. 4 When you are using In-band management, in the In-band Management VLAN ID field, specify the VLAN ID that is used to identify management traffic. 5 In the Type drop-down menu, select the management mode of operation: In band or Out of band. In-band management refers to a method in which the network management software sends management packets through the same network it is managing. Out-of-band management uses an overlay network to communicate with the managed elements. Out-of-band management uses the Wayside Channel (WSC) for management access to the IDUs in the network. An external switch using some form of STP should be used to obtain resilient management access and resolve management loops. 6 In the Capacity drop-down menu, select the bandwidth that is allocated to the management port(s). 7 In the Auto negotiation drop-down menu, select one of the following options: On - Enables this feature. Off - Disables this feature. 8 In the Rate drop-down menu, select the bit rate you want for the management port(s). 9 In the Duplex drop-down menu, select Half or Full. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 87 of 577 10 Specify whether to block management frames towards the line interface by selecting Enable or Disable from the Block management frames drop down list. Note: This option applies only if the Ethernet application type is configured as Smart Pipe. 11 Click Apply. The parameters for the management port(s) are configured. For additional information: Configuring Out-of-Band Management Configuring In-Band Management Configuring the Ethernet Switching Mode Configuring the Wayside Channel FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 88 of 577 9.3 Configuring Out-of-Band Management With Out-of-Band management, the remote system is managed using the wayside channel. On both local and remote units, the wayside channel must be connected to a management port using an Ethernet cross-cable. The Wayside channel can be configured to Narrow capacity (~64kbps) or Wide capacity (~2Mbps). It is recommended to use Wide capacity in order to achieve better management performance. For additional information: Configuring the Wayside Channel FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 89 of 577 9.4 Configuring In-Band Management With In-Band management, the remote IDU is managed by specific frames that are sent as part of the traffic. These frames are identified as management frames by a special VLAN ID configured by the user. This VLAN ID must be used ONLY for management. It is NOT possible to configure more than a single VLAN ID for management. Important: It is highly recommended to classify the management VLAN ID to the highest queue, in order to ensure the ability to manage remote units even under congestion scenarios. The local unit is the gateway for In-Band management. The remote unit is managed via its traffic ports (the radio port, for example), so that no management ports are needed. This section includes: Configuring In-Band Management in a 1+1 Link In-Band Management in Nodal Configurations GbE In-Band Management in a Node In-Band Management Isolation in Smart Pipe Mode For additional information: Configuring the Management Ports FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 90 of 577 9.4.1 Configuring In-Band Management in a 1+1 Link It is important to follow these instructions carefully in order to avoid management loss to the remote unit. It is mandatory to configure the same management VLAN ID in all units that are part of the same management domain. In order to configure a protected link to In-Band management, or to change the management VLAN ID, the following steps must be performed, in order: 1 Configure the following units’ management VLAN ID in their order of appearance (even if the unit is still configured to Out-of-Band management): Remote Standby Remote Active Local Standby Local Active Note: For instructions on how to configure the VLAN ID, refer to Configuring the Management Ports on page 86. 2 If Metro Switch is used, the Ethertype of the bridge should first be configured on the remote side of the link, then on the local side. 3 Configure all the units listed above to In-Band management. Again, this configuration should be made to the units in the order they are listed above. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 91 of 577 1+1 In-Band Management (Cable Splitter) 1+1 In-Band Management (Patch Panel) Note: It is possible to use fewer than three patch-panels (as depicted above), according to the number of FE interfaces required to be split (traffic, management, WSC), assuming the IDUs are co-located. When a patch panel is used, straight and short (<0.5m) Ethernet cables should be connected between the IDUs and the panel (these cables are provided by Ceragon). Straight Ethernet cables should be connected from the IDU to the patch-panel. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 92 of 577 9.4.2 In-Band Management in Nodal Configurations In a nodal configuration, it is necessary to transport management traffic to the main unit by using external Ethernet cables. The following figures show a few examples of relevant topologies and how to connect the cables in each topology. 3:1 (Aggregation 3 to 1) In-Band management in non-protected node 3:1 (Aggregation 3 to 1) with Protection FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 93 of 577 In-Band management in node with protected main units FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 94 of 577 9.4.3 GbE In-Band Management in a Node In nodal configurations, the Ethernet bandwidth available between extension units and main units is limited by the Fast Ethernet interfaces to 100Mbps. In order to achieve resiliency and have a configuration ready for higher bandwidth traffic, it is possible to set up the node in a ring configuration, using optical SFP connections between the IDUs as shown in the following figure. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 95 of 577 9.4.4 In-Band Management Isolation in Smart Pipe Mode This feature is required by “carrier of carriers” customers that provide Ethernet leased lines to third party users. The third party user connects its equipment to the Ethernet interface of the IP-10, while all the other network interfaces, particularly the radios, are managed by the “carrier of carriers” user. In that case, management frames that are sent throughout the network to manage the “carrier of carrier” equipment must not egress the line interfaces that are used by the third party customer, since these frames will, in effect, spam the third party user network. The following figure describes the management blocking scenario. IP-10 IP-10 Provider Network Management Center Mng Frames Carrier of carriers network (Provider Network) Mng Frames Block provider’s management Frames Block provider’s management Frames 3 rd Party User Network 3 rd Party User Network In switch modes, it is very easy to achieve the required functionality by a simple VLAN exclude configuration on the relevant ports. However, in Smart Pipe mode, VLANs cannot be used to block traffic, since the line and radio interfaces are transparent by definition to all VLANs. Thus, this management blocking capacity is a special feature for Smart Pipe applications that blocks management frames from egressing the line interface. This feature is relevant only to Smart Pipe applications. It is also relevant only to standalone units or the main unit in a nodal configuration. There is no purpose in blocking the In-Band management VLAN in extension units, since the management VLAN can be blocked in the Ethernet switch port. Management isolation and blocking behavior is controlled by the block- management-towards-line CLI parameter. The default is disable. To enable this feature, enter: block-management-towards-line enable You can also set this parameter in the Management page of the Web EMS. For instructions, refer to Configuring the Management Ports on page 86. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 96 of 577 10. Configuring Traffic Interfaces This chapter includes: Configuring the Ethernet Switching Mode Configuring Ethernet Ports Assigning VLANs to a Port Configuring Automatic State Propagation Configuring LAGs Configuring Peer Port Settings Configuring E1/DS1 Interfaces Configuring STM-1/OC-3 Interfaces Configuring Pseudowire FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 97 of 577 10.1 Configuring the Ethernet Switching Mode FibeAir IP-10G/E supports Smart Pipe, Managed Switch, and Metro Switch configurations. Smart Pipe is the default configuration, and does not require a separate license. Configuring the system to Managed or Metro Switch requires a separate license. This section includes: Switch Configurations Overview Configuring Smart Pipe Switch Mode Configuring Managed and Metro Switch FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 98 of 577 10.1.1 Switch Configurations Overview Single (Smart) Pipe allows only a single GbE interface for traffic (optical GbE- SFP or Electrical GBE, 10/100/1000 mbps). Traffic originating from any GbE interface is sent directly to the radio and vice versa. The Smart Pipe method enables you to use QoS configurations. The Fast Ethernet interfaces (10/100 mbps) interfaces are "functional" interfaces (WSC, Protection, Management). Managed Switch is a 802.1Q VLAN-aware bridge, allowing L2 switching based on VLANs. Each traffic port can be configured as an "access" port or a "trunk" port. A port can also be configured as a “hybrid” port that allows both tagged and untagged frames. Managed Switch Mode Type VLANs Allowed Ingress Frames Allowed Egress Frames Access A default VLAN should be attached to access port. Only Untagged frames (or Tagged with VID=0 – "Priority Tagged"). Untagged frames. Trunk A range of VLANs, or "all" VLANs should be attached to trunk port Only Tagged frames. Tagged frames. Hybrid A range of VLANs, or all VLANs should be attached to trunk port. A default VLAN should be attached to access port. Tagged and untagged frames. Tagged and untagged frames. The Managed Switch method allows QoS configuration, and all Ethernet ports are allowed for traffic. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 99 of 577 The following table lists VLANs that are reserved for internal use in Managed Switch mode. VLANs Reserved for Internal Use in Managed Switch Mode VLAN Description Remark 0 Frames with VLAN=0 are considered untagged. This VLAN is used in order to prioritize untagged traffic - 1 Default VLAN. This VLAN is always defined in the database, and all trunk ports are members of this VLAN. VLAN 1 cannot be deleted from the database and not from Trunk port membership. - 4091 Cannot be used for in-band management. Traffic frames carrying this VLAN are not allowed in Smart Pipe mode. - 4092 Internal VLANs. Smart Pipe: Frames carrying these VLANs are not allowed. Managed Switch: "Access" traffic ports cannot be associated with any of these default VLANs. Used for protection internal communication. 4093 Used for Wayside. 4094 Used for internal management. 4095 - Not defined. Metro Switch is an 802.1ad Provider Bridge, allowing Q-in-Q switching capabilities. Each traffic port can be assigned as a "Customer Network" port or a "Provider Network" port. The port attributes are listed in the following table: Type VLANs Allowed Ingress Frames Allowed Egress Frames Customer Network Specific S-VLAN should be associated with the customer network port Untagged frames or tagged (C- tag) frames Untagged frames of tagged (C-tag) frames Provider Network A range of S-VLANs or all S-VLANs should be associated with the provider network port Only S-tagged frames, (in accordance with the configured "provider ether-type", which is 0x88a8 by default) S-tagged frames, carrying the configured provider ether-type, (0x88a8 by default) Note: S-Tag Ether type can be configured to one of the following values: 0x88a8 (default), 0x8100, 0x9100, or 0x9200. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 100 of 577 10.1.2 Configuring Smart Pipe Switch Mode This section explains how to configure the Ethernet switch to Smart Pipe mode. When you are using the Smart Pipe mode, Ethernet switching is disabled, and only a single Ethernet interface is used for traffic. The IDU operates as a point-to-point microwave Ethernet radio. To configure the Ethernet switch to Smart Pipe: 1 Select Configuration > Ethernet Switch > Switch Configuration. The Switch Configuration page opens. 2 Click Refresh. The current Ethernet switch configuration opens. 3 In the Ethernet Application Type section, select Single pipe. 4 Click Apply. The IDU is configured to Smart Pipe mode. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 101 of 577 10.1.3 Configuring Managed and Metro Switch Mode This feature requires: L2 Switch license To configure the Ethernet switch to Managed Switch or Metro Switch: 1 select Configuration > Ethernet Switch > Switch Configuration. The Switch Configuration window opens. 2 Click Refresh. The current Ethernet switch configuration opens. 3 In the Ethernet Application Type section, select one of the following options: Managed switch - Ethernet switching is enabled and all the ports are used for traffic. Metro switch - Ethernet switching is enabled and all the ports are used for traffic. You must select this option to use Ethernet Q-in-Q provider switch. 4 Click Apply. The Managed or Metro switch is enabled. Note: Depending on the current configuration, the Apply button may be located in LAG load balancing section. 5 From the bottom of the Switch Configuration window, click Refresh. The current Switch Configuration parameters are displayed. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 102 of 577 6 Configure the LAG load balancing setting. i In the LAG load balancing section, select one of the following load balancing options: Simple XOR - Performs XOR on the last three bits of the Packet Source MAC address (SA) and the Destination MAC address (DA). Depending on the XOR result, the system selects the link to be used in the LAG. The HASH mechanism distributes flows across multiple egress ports in a LAG. It uses a proprietary scrambling function, and uses the last three bits (LSBs) of the DA, SA. This means that two flows with the same three LSB bits, but different MSB bits, still egress on the same port. ii In the LAG load balancing section, click Apply. The LAG load balancing options are configured. 7 In the bottom of the Switch Configuration window, click Refresh. The current VLAN ID parameters are displayed beneath the Unit Allowed VIDs section. 8 The following list explains the columns are in the Units allowed VIDs section: VLAN ID - Specific ID for this VLAN. Name - Configured name for the VLAN. Status - Indicates whether this VLAN is Active or Passive. Member Ports - Lists which IDU ports allow this VLAN. 9 Configure the VLAN IDs for the switch. i From the Operation drop-down menu, select the VLAN operation you want to perform for the switch: Set - Add VLANs to the database. Remove - Remove VLANs from the database. Change name - Change the name of a configured VLAN. Disable - Suspend usage of a configured VLAN. Enable - Activate a configured VLAN. ii In the Start VID and End VID fields, enter the VLAN start and end IDs. iii In the Name field, specify a unique name for the VLAN. 10 Click Apply. The VLANs for the switch are defined. 11 Repeat steps 9 and 10 as necessary and click Refresh. The parameters of the defined VLANs are displayed beneath the Unit Allowed VIDs section. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 103 of 577 For additional information: Configuring Feature and Capacity Licenses FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 104 of 577 10.2 Configuring Ethernet Ports Related topics: Configuring the Ethernet Switching Mode IP-10G/E supports two dual GbE interfaces. For each of these interfaces, you can configure the desired interface: Electrical GbE (10/100/1000) interface or Optical GbE (SFP) interface. You cannot use SFP with electrical stack. SFP supports only optical stack. In Smart Pipe mode, only a single Ethernet interface can be used. The options are: Eth1: Electrical GbE or Optical GbE. Eth3: Electrical FE In Managed Switch and Metro Switch modes, there are no interface limitations. This means that any GbE and/or FE ports can be used. It is possible to use an electrical interface at one end of the link, and an optical interface at the other end. In order to change interfaces, it is essential to disable the active interface first, and then to enable the other interface. Port configuration differs somewhat depending on which switching mode your system is using. The following sections explain how to configure a Smart Pipe port and a Metro Switch or Managed Switch port, respectively. 10.2.1 Configuring a Single Pipe Port 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 Click Refresh. The current Ethernet Ports parameters are displayed. Ethernet Ports Page FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 105 of 577 3 Click next to the port you want to configure. The Ethernet port settings are displayed. 4 From the Port admin drop-down menu, select Enable to activate the port. 5 From the Connector type drop-down menu, select RJ 45 or Optical connector type. Note: This field is only relevant for the two GbE ports, Eth1 and Eth2. All the other Ethernet ports are RJ-45 ports only. 6 From the Auto negotiation drop-down menu, select one of the following options: Enable - The system controls the flow of data. Disable - Deactivates the Auto negotiation feature. 7 From the Port learning drop-down menu, select one of the following options: Enable Disable 8 From the Flow control drop-down menu, select one of the following options: On Off 9 From the Port service type drop-down menu, select one of the following options: Service network point Access port Note: The Port service type is configured for the PolyView NMS Ethernet services. 10 Click Apply. The Smart Pipe Ethernet port settings are configured. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 106 of 577 10.2.2 Configuring a Managed Switch or Metro Switch Port To configure the settings for an Ethernet port in Managed Switch or Metro Switch mode: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 Click Refresh. The current Ethernet Ports parameters are displayed. 3 Expand the Ethernet port. The port settings are displayed. 4 From the Port admin drop-down menu, select Enable to activate the port. 5 From the Connector type drop-down menu, select RJ 45 or Optical connector type. Note: This field is only relevant for the two GbE ports, Eth1 and Eth2. All the other Ethernet ports are RJ-45 ports only. 6 From the Type drop-down menu select the option that is appropriate to your configuration. i Managed Switch ports can be can be one of the following types: Access Trunk Hybrid ii Metro Switch ports can be one of the following types: Customer Network Provider Network 7 In the Default VLAN ID field, enter the default VLAN ID for tagged frames on this port. 8 From the Auto negotiation drop-down menu, select one of the following options: Enable - The system controls the flow of data. Disable - Deactivates the Auto negotiation feature. 9 From the Port learning drop-down menu, select one of the following options: Enable Disable FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 107 of 577 10 From the Flow control drop-down menu, select one of the following options: On Off From the Port service type drop-down menu, select one of the following options: Service network point Access port Note: The Port service type is configured for the PolyView NMS Ethernet services. 11 Click Apply. The port settings are configured. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 108 of 577 10.3 Assigning VLANs to a Port To assign VLAN IDs to a port: 1 Select Configuration > Ethernet Switch > Switch Configuration. The Switch Configuration page opens. 2 In the Unit allowed VIDs section of the Switch Configuration page, select a VLAN. 3 Select one of the following options in the Operation field: Set - Adds the VLANs to the database. Remove - Removes the VLANs from the database. Change name - Changes the VLAN name. Disable - Suspends usage of the selected VLAN. Enable - Activates the selected VLAN. 4 In the Start VID and End VID fields, enter the VLAN start and end IDs. 5 In the Name field, enter a unique name for the VLAN. 6 Click Apply to save your VLAN definitions. The defined VLANs are summarized at the bottom of the window. VLAN ID – Displays the specific ID for this VLAN. Name – Displays the configured name for the VLAN. Status – Indicates whether the VLAN is Active or Passive. Member Ports - Lists which IDU ports allow this VLAN. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 109 of 577 10.4 Configuring Automatic State Propagation Automatic state propagation enables propagation of radio failures back to the line, to improve recovery performance. The feature enables the user to configure which criteria will force the GbE port (or ports in case of “remote fault”) to be muted/shut down, to allow the network find alternative paths. In Smart Pipe mode, upon radio failure, Eth1 is muted when configured as optical or shutdown when configured as electrical. In Managed Switch or Metro Switch mode, the switch’s Radio port (Eth8) is forced to be disabled. Eth8 cannot be muted, but only disabled in both directions. In 2+0 Multi-Radio mode, Automatic State Propagation can be triggered upon a failure in a single IDU or upon a failure in both IDUs. It is recommended to configure both ends of the link to the same Automatic State Propagation configuration. If the link uses in-band management, when the port is muted or shut down, management distributed through the link might be lost. If this occurs, the unit will not be manageable. The unit will only become manageable again when the port is un-muted or enabled. To configure automatic state propagation for an Ethernet port: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 In the Automatic State Propagation field underneath the ports table, select Enable or Disable to enable or disable Automatic State Propagation. 3 In the Fault criteria section of the Ethernet Ports page: i In the Ethernet shutdown Rx profile threshold field, select a profile. Ethernet shuts down when radio performance degrades below the specified profile. Note: This option is only enabled if ACM adaptive mode is active. ii In the Local Excessive BER field, select Enable or Disable to determine whether local excessive BER is propagated as a fault. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 110 of 577 iii In the Local LOC field, select Enable or Disable to determine whether a Loss of Carrier alarms is propagated as a fault. Note: This is only relevant for optical GbE interfaces in Smart Pipe mode. 4 In the Remote Fault field, select Enable or Disable to enable these settings for the remote interface. 5 Click Apply. When Automatic State Propagation is enabled: Local LOF will always be set to Enable, which means that Radio Loss of Frame (LOF) faults are always propagated. Link ID Mismatch will always be set to Enable, which means that Radio Link ID Mismatch faults are always propagated. The following table describes interface behavior based on the Automatic State Propagation configuration User Configuration Optical (SFP) GbE port Functionality - Smart Pipe Mode Electrical GbE port (10/100/1000) Functionality - Smart Pipe Mode Radio Port functionality – Managed/Metro Switch Mode ”Automatic State Propagation” disabled. No mute is issued. No shutdown. Local LOF, Link-ID mismatch (always enabled) Mute the LOCAL port when one or more of the following events occurs: 1. Radio-LOF on the LOCAL unit. 2. Link ID mismatch on the LOCAL unit. Shut down the LOCAL port when one or more of the following events occurs: 1. Radio-LOF on the LOCAL unit. 2. Link ID mismatch on the LOCAL unit. Ethernet shutdown threshold profile. Mute the LOCAL port when ACM Rx profile degrades below a pre- configured profile on the LOCAL unit Shut down the LOCAL port when ACM Rx profile degrades below a pre-configured profile on the LOCAL unit. This capability is applicable only when ACM is enabled. Local Excessive BER Mute the LOCAL port when an Excessive BER alarm is raised on the LOCAL unit Shut down the LOCAL port when an Excessive BER alarm is raised on the LOCAL unit Local LOC Mute the LOCAL port when a GbE- LOC alarm is raised on the LOCAL unit. No shutdown. Note1: Electrical-GbE cannot be muted. Electrical-GbE LOC will not trigger Shutdown, because it will not be possible to enable the port when the LOC alarm is cleared N/A FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 111 of 577 User Configuration Optical (SFP) GbE port Functionality - Smart Pipe Mode Electrical GbE port (10/100/1000) Functionality - Smart Pipe Mode Radio Port functionality – Managed/Metro Switch Mode Remote Fault Mute the LOCAL port when one or more of the following events is raised on the REMOTE unit: 1. Radio-LOF (on remote). 2. Link-ID mismatch (on remote). 3. GbE-LOC alarm is raised (on remote). 4. ACM Rx profile crossing threshold (on remote), only if enabled on the LOCAL. 5. „Excessive BER‟ (on remote), only if enabled on the LOCAL. Shut down the LOCAL port, when one or more of the following events is raised on the REMOTE unit: 1. Radio-LOF (on remote). 2. Link-ID mismatch (on remote). 3. ACM Rx profile crossing threshold (on remote), only if enabled on the LOCAL. 4. „Excessive BER‟ (on remote), only if enabled on the LOCAL. Note1: Electrical-GbE cannot be muted. Electrical-GbE LOC will not trigger "Shut-down", because it will not be possible to enable the port when LOC alarm is cleared Shut down the LOCAL port, when one or more of the following events is raised on the REMOTE unit: 1. Radio-LOF (on remote). 2. Link-ID mismatch (on remote). 3. ACM Rx profile crossing threshold (on remote), only if enabled on the LOCAL. 4. „Excessive BER‟ (on remote), only if enabled on the LOCAL. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 112 of 577 10.5 Configuring LAGs This section includes: LAG Overview Creating a LAG Configuring a LAG Removing Ports from a LAG Configuring LAG Load Balancing Related topics: Configuring Multi-Unit LAG FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 113 of 577 10.5.1 LAG Overview Link aggregation enables you to group several ports into a single logical channel bound to a single MAC address. Traffic sent to the ports in such a group is distributed through a load balancing function. The group is called a LAG. LAGs are virtual ports that do not permanently exist in the system. A LAG is a logical port with its own MAC address that differs from that of the component ports. A LAG is created as soon as the first physical port is added to the LAG. LAGs may include ports with the following constraints: Only traffic ports (including the radio port), not functional ports (e.g., management and WSC), can belong to a LAG. LAG can only be used in IDUs which are configured for Managed Switch or Metro Switch. All ports in a LAG must be in the same IDU (same switch) There can be up to three LAGs per IDU. A LAG can contain from 1 to 5 physical ports GbE ports (1 and 2) and FE ports (3-7) cannot be in the same LAG, even if the GbE ports are configured as 100Mbps. For GbE LAGs, both interfaces must be of the same type (electrical or optical). The Radio port (Eth8) can only be in a LAG with GbE ports. The GbE ports can be either electrical or optical. The ports in a LAG must have the same configuration. All ports in a LAG group must have the same data rate (10, 100, or 1000 Mbps). When a LAG is created by adding a first port to it, the LAG automatically inherits all the port’s characteristics, except for the following: xSTP role (edge, non-edge) Path cost All Ethernet port parameters can be configured in a LAG. These parameters are inherited by the LAG’s physical component ports, and are unavailable for physical ports belonging to the LAG, with the following exceptions: Admin Flow control Ingress rate limiting policer name Shaper (egress rate limiting) Peer port parameters MAC address IP address Slot ID Port number Description FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 114 of 577 The following settings must be identical between a LAG and the ports being added to it. If they are not identical, the port’s inclusion in the LAG will be blocked: QoS configuration Port MAC DA QoS classification Port VID QoS classification Port initial QOS classification Port default QoS classification Port VLAN PBITs priority remap Egress scheduling scheme Data rate Type (access/trunk or cn/pn) Interface (electrical/optical) Duplex Auto-negotiation VLANs VLAN list must be identical “allow all” is considered a different value (must be equal in all ports) Learning state In addition, ports with CFM MEP/MIPs cannot be added to a LAG (which may have its own MEP/MIPs). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 115 of 577 10.5.2 Creating a LAG To define a LAG: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 Click the Create LAG port button underneath the ports table. The Create new LAG port window opens. 3 In the representation of the IDU in the Create new LAG port window, select the ports to include in the LAG. Selected ports are highlighted. Note: Ports that do not meet the criteria described in LAG Overview cannot be selected. 4 In the LAG port to create field, select a name for the LAG. Options are “LAG #1, #2, #3”, since there can be up to three LAGs in the system. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 116 of 577 10.5.3 Configuring a LAG To define the LAG configuration: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 Click + in the left column next to the LAG to display the LAG’s configuration options. 3 In the Port admin field, select Enable or Disable to enable or disable the LAG. 4 In the Type field, select the port type. Options depend on the Ethernet switching mode: Managed Switch – Options are Access, Trunk, or Hybrid. Metro Switch – Options are Customer Network or Provider Network. 5 In the Auto Negotiation field, select On if you want the system to control the flow of data. 6 In the Ethernet rate field, select the Ethernet rate for the LAG. 7 In the Port learning field, select Enable or Disable to enable or disable port learning. 8 In the Port service type field, select Service network point or Service access point. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 117 of 577 9 Click the Allowed VIDs link below the port configuration options to assign VIDs to the LAG. The Ethernet Allowed VIDs window opens. i Select one of the following options in the Operation field: Set - Adds the VLANs to the database. Remove - Removes the VLANs from the database. Change name - Changes the VLAN name. Disable - Suspends usage of the selected VLAN. Enable - Activates the selected VLAN. ii In the Start VID and End VID fields, enter the VLAN start and end IDs. iii Click Apply to save your VLAN definitions. The Ethernet-allowed VIDs table displays the allowed VLANs for each LAG. 10 Click Apply to save the LAG settings. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 118 of 577 10.5.4 Removing Ports from a LAG Ports removed from a LAG will keep the existing port parameters, but will be initially disabled in order to prevent loops. In addition, when the last port is removed from a LAG, the LAG will be deleted. Therefore it is necessary to remove all MEP/MIPs from a LAG before removing the last port. To remove ports from a LAG: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 Click + in the left column next to the LAG to display the LAG’s configuration options. 3 Click the Add or Remove ports from LAG port link below the port configuration options. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 119 of 577 10.5.5 Configuring LAG Load Balancing To configure the LAG load balancing method: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 In the LAG load balancing section of the Ethernet Ports page, select Simple XOR for demos or lab test or HASH for real traffic: Simple XOR performs XOR on the last three bits of the packet source MAC address (SA) and the destination MAC address (DA), and according to the result, selects the link to be used in the LAG. The HASH mechanism distributes flows across multiple egress ports in a LAG. It uses a proprietary scrambling function, and uses the last three bits (LSBs) of the DA, SA. This means that two flows with the same three LSB bits, but different MSB bits, will still go to the same port. Thus, the HASH will simply distribute more evenly. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 120 of 577 10.6 Configuring Peer Port Settings The IP table page enables you to configure the characteristics of the peer port, to which the local port of the element is connected. Each IDU port has its own IP table, which enables the configuration of the characteristics of the peer port to which it is connected. To configure peer port settings: 1 Select Configuration > General > IP Table. The IP Table page opens. 2 Click + to the left of the port to open the port’s IP table 3 In the Peer MAC address field, enter the MAC address of the peer port. 4 In the Peer IP address field, enter the IP address of the peer port. 5 In the Peer slot ID field, enter the slot ID of the IDU in which the peer port is located. The slot can be from 0 to 6, where 0 is used when the other side is a standalone unit, and 1-6 are used for the other side’s nodal enclosure slot IDs. 6 In the Peer port number field, enter the peer port number. 7 Optionally, in the Peer description field, add a general description of the peer port. 8 From the LLDP admin drop down list, select the LLDP protocol for the port. Options are: Enable transmit only – LLDP agent will transmit LLDP frames on this port and it will not update information about the remote systems. Enable receive only – LLDP agent will receive, but it will not transmit LLDP frames on this port. Enable receive and transmit – LLDP agent will transmit and receive LLDP frames on this port. Disable (default) –LLDP agent will not transmit or receive LLDP frames on this port. 9 Click Apply to save your configuration settings. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 121 of 577 10.7 Configuring E1/DS1 Interfaces Note: This section is not relevant for the IP-10E. IP-10G contains an MDR69 connector in which 16 E1/DS1 ports are available (ports 1 through 16). Above the MDR69 connector is an add-on slot which can contain a field- upgradable T-Card with either 16 additional E1/DS1 ports, an STM-1/OC-3 port, or 16 E1/DS1 pseudowire processing. The T-Cards are field-upgradable. The T-Card is not a standalone entity within the IP-10G. When inserted in the system, the new interfaces become integral interfaces of the IP-10G and E1/DS1 ports 17-32 will be added to the existing 1-16. To configure E1/DS1 ports: 1 Select Configuration > Interfaces > E1 ports or Configuration > Interfaces > DS1 ports. The E1 Ports or DS1 Ports page opens. 2 In the Excessive BER threshold field, select the level above which an excessive BER alarm is issued for errors detected over the radio link 3 In the Signal degrade threshold field, select the level above which a Signal Degrade alarm is issued for errors detected over the link. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 122 of 577 The following information opens about the E1/DS1 ports in the E1 Ports and DS1 Ports pages: The Line Coding 1-8 and Line Coding 9-16 fields display the T1 line coding, which can be B8ZS or AMI. In the E1 or DS1 Ports table: Enabled – Indicates whether the port is enabled. Interface – Indicates the port number. Priority – Indicates the port priority. Current BER – Indicates the current BER level. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 123 of 577 10.8 Configuring STM-1/OC-3 Interfaces Note: This section is not relevant for the IP-10E. Above the MDR69 connector is an add-on slot which can contain a field- upgradable T-Card with either 16 additional E1/DS1 ports, an STM-1/OC-3 port, or 16 E1/DS1 pseudowire processing. The T-Cards are field-upgradable. The STM-1/OC-3 T-Card provides an interface for up to 63 E1s inside a standard channelized STM-1 signal, or 84 DS1s for OC-3 channels. Each E1/DS1 is transported by a VC-12 container (or DS1 in VC-11), which behaves like a regular line interface. TDM trails can be configured ending in VC-11/12 in the same manner as they are configured for E1/DS1 interfaces. The STM-1/OC-3 T-Card includes a LED that indicates the status of the interface: Critical or major severity alarm raised: RED Minor or warning severity alarm raised: YELLOW No SFP detected or STM-1/OC-3 interface disabled: OFF Otherwise the LED is GREEN To configure the STM-1/OC-3 T-Card interface: 1 For an STM-1 configuration, select Configuration > Interfaces > STM1 Ports. For an OC-3 configuration, select Configuration > Interfaces > OC- 3 Ports. The STM-1 Ports or OC-3 Ports page opens. 2 From the Port Admin field drop down list, select Enable or Disable to enable or disable the port. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 124 of 577 3 From the Mute Tx drop down list, select Mute or Unmute to enable or disable the mute Tx option on the interface. If muted, the radio will still receive signals, but will not transmit any signals. 4 From the Outgoing signal clock source drop down list, specify the outgoing signal clock source. Options are Internal clock, Loop, and STM-1 VC. The clock source and the clock source status may be different when the configuration does not match the current clock source in use, due to the signal failures listed below. If you choose Internal Clock (the default option), the quality will be SMC/SEC (ITU-T G.813). If you choose Loop (CDR mode), the signal clock source will be taken in accordance with the following table: # LOF from framer LOS from optics Mode of operation Clock source 1 LOF LOS Free run/holdover Local clock 2 LOF NO LOS Free run/holdover Local clock 3 NO LOF LOS N/A Local clock 4 NO LOF NO LOS Lock mode (loop timing) CDR If you choose STM-1 VC, the signal will be synchronized to the signal clock derived from a TDM trail. The clock will be taken from the first VC-12 configured in the STM-1 port. The VC source can be changed using the following CLI commands: cd interfaces/sdh/stm1/get sync-vc (shows the VC that the system will use as the clock and sync) Set sync-vc XX (XX = VC number) Note: The Clock source status field Indicates the current clock source. 5 In the Synchronization VC field, specify the VC channel used to synchronize the STM-1/OC-3 interface. 6 From the AIS VC Signaling Admin drop down list, select Enable or Disable to enable or disable AIS VC signaling. When enabled, if a signal failure at the trail outgoing from the STM-1/OC-3 interface occurs, the system will signal AIS at the VC level (AIS-V) in the V5 byte of the overhead. 7 From the Line Tx protection mode drop down list, select Normal or Uni-direction MSP to configure the behavior of the transmitting line in a 1+1 HSB configuration: In Normal mode the standby signal is silenced. The redundant STM-1/OC-3 will not transmit signals unless the primary IDU performs a switch due to a failure. Choose Uni-direction MSP when the system is configured for 1+1 with STM-1/OC-3 cards. Both cards will transmit, and the decision as to which one will actually function will be made by other equipment connected to it. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 125 of 577 8 Optionally, you can configure STM-1/OC--3 trace identifiers in the Trace Identifiers section of the STP-1/OC-3 Ports page: i In the Transmitted field, specify the string used as the transmitted STM-1/OC-3 signal J0 trace identifier. This is used to verify ongoing connection to the receiver. ii In the Expected field, configure the J0 trace identifier signal that is expected to be received on the STM-1/OC-3 interface. This is used to verify an ongoing connection to the remote side of the link. iii From the String Length drop down list, select a string length for the STM-1/OC-3 signal J0 trace identifier. Note: The Received field indicates the J0 trace identifier signal that was received on the on the STM-1/OC-3 interface. 9 You can configure STM-1/OC--3 thresholds in the Thresholds section of the STP-1/OC-3 Ports page: i From the Excessive BER drop down list, select the threshold value above which an excessive BER alarm is issued for errors detected over the radio link. The value can be 1e-3, 1e-4, or 1e-5. ii From the Signal degrade drop down list, select the threshold value above which a Signal Degrade alarm is issued for errors detected over the link. The value can be 1e-6, 1e-7, 1e-8, or 1e-9. 10 Click Apply to save your configuration changes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 126 of 577 10.9 Configuring Pseudowire This section includes: Pseudowire Overview Configuring an Ethernet Port for Pseudowire Configuring the Pseudowire TDM Ports Configuring TDM Trails for Pseudowire Configuring Pseudowire Synchronization Configuring the Pseudowire T-Card Configuring Pseudowire Profiles Configuring Pseudowire Encapsulation (Tunnels) Configuring DS0 Bundles Configuring Pseudowire Services Note: This section is not relevant for the IP-10E. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 127 of 577 10.9.1 Pseudowire Overview Above the MDR69 connector is an add-on slot which can contain a field- upgradable T-Card with either 16 additional E1/DS1 ports, an STM-1/OC-3 port, or 16 E1/DS1 pseudowire processing. IP-10G’s 16 E1/DS1 pseudowire (PW) processing T-Card processes E1 data, sends the data through the system in Ethernet packet format that can be processed by the IDU’s Ethernet ports. The T-Card also re-converts data received via pseudowire processing back to TDM format. Note: Release I6.9 only supports pseudowire for E1 lines. IP-10G supports the following pseudowire protocols: SAToP (Structure-Agnostic TDM-Over-Packet) – E1 lines must be transferred to pseudowire as full E1s. SAToP is agnostic with respect to the data being sent, which can be either 1 TS or 30 with CAS, or even unframed. CESoP (Circuit Emulation Services-Over-Packet) – E1 lines can be divided into individual bundles of DS0 channels. Pseudowire operates by encapsulating E1 input and sending it via one of the IP-10G’s Ethernet ports. Traffic sent via pseudowire is de-encapsulated at the other end of the link. Traffic must be passed to the pseudowire card by means of TDM trails from the E1 port to the pseudowire port. A cable must be connected between the pseudowire card and an Ethernet port in the same IDU as the PW T-Card. Proper synchronization is vital to ensure that traffic being transported via pseudowire is processed properly at the other end of the link. IP-10G offers the following synchronization options for pseudowire: Absolute (common) clock – A timing source external to the PW T-Card, such as a GPS, an E1 line from external equipment, or the IDU’s reference clock, is configured to provide synchronization on both sides of the link. Adaptive Clock Recovery (ACR) – Timing information is embedded in the packets containing pseudowire traffic and used for synchronization at the far end of the link. Pseudowire encapsulation is defined by one or more pseudowire tunnels. IP- 10G pseudowire encapsulation can be performed using: MEF-8 (Ethernet) UDP/IP You can configure up to 16 pseudowire services on the IP-10G. You can use a mixture of MEF-8 and UDP/IP services. Before configuring pseudowire services, you must configure one or more pseudowire profiles and tunnels. If you are using CESoP, you must also configure one or more DS0 bundles. Important Note: Once a profile, tunnel, or bundle has been assigned to a service, you cannot modify that profile, tunnel, or bundle until you first delete the service. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 128 of 577 Pseudowire Configuration Flow Ethernet Port Configuration TDM Port Configuration TDM Trail Configuration PW T-Card Configuration Pseudowire Profile Configuration Pseudowire Tunnel Configuration (Encapsulation) DS0 Bundle Configuration Pseudowire Service Configuration For CESoP services only For SAToP services FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 129 of 577 10.9.2 Configuring an Ethernet Port for Pseudowire The PW T-Card includes three RJ-45 interfaces: Sync – Used to connect an external synchronization source, such as a GPS or an E1 line. Prot – Reserved for future use. Eth – Used to connect the PW T-Card to an Ethernet port on the IP-10G. You must connect the Eth interface on the PW T-Card to one of the Ethernet ports on the IP-10G. Any electrical Ethernet port can be used, including either GbE or Fast Ethernet ports. You can use any type of Ethernet cable. The following Ethernet ports cannot be used for pseudowire: Optical ports Ports that belong to a LAG group FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 130 of 577 After connecting the Ethernet port to the PW T-Card, you must select the port as the pseudowire interface port in the Ethernet Ports page: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. 2 From the Pw interface port drop down list, select the Ethernet port you are using as the pseudowire interface. 3 Click Apply. The selected port is highlighted in the main screen. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 131 of 577 10.9.3 Configuring the Pseudowire TDM Ports To configure the pseudowire TDM ports: 1 Select Configuration > Pseudowire > TDM Ports. The TDM Ports page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 132 of 577 2 Click + next to the port you want to configure to display the port configuration settings. 3 From the Admin drop down list, select Enable. Note: The Line coding field is read only. 4 From the Line type drop down list: For SAToP, select E1 unframed. For CESoP, select from the following: E1 E1 Double-Frame CRC E1 Multi-Frame E1 Multi-Frame CRC 5 From the Channelization drop down list: For SAToP, select Disable. For CESoP, select Enable: 6 From the Timing mode drop down list, select the synchronization mode for the port. Options are: Loop – Transmits with the clock received from the TDM signal. Select this option if an E1 line is connected directly to the PW T-Card. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 133 of 577 Absolute – Transmits with the clock selected in the Clock source reference field. Select this option if the clock is received from the front panel or from NativeSync. Clock recovery – Uses Adaptive Clock Recovery (ACR). If you select this option, you must define the E1 port from which to receive the clock in the Clock source ref port field. 7 From the Clock source reference drop down list, you must select from the following clock source options if you selected Absolute in the Timing mode field: Sys ref clk – Select this option if the clock is received from the NativeSynch mechanism. Front panel – Select this option if clock is received from the front panel. 8 If you selected Clock Recovery in the Timing mode field, enter the E1 port from which to receive the clock. Note: Several E1s can use the same PW as a clock reference. 9 Click Apply. Note: The idle code is transmitted when the time slot is not being used. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 134 of 577 10.9.4 Configuring TDM Trails for Pseudowire In order to pass traffic between E1s and the PW T-Card, you must configure one or more TDM trails with the pseudowire interface as their start point or end point. If the pseudowire interface is not assigned to any TDM trail, a Loss of Frame (LOF) alarm will occur. For instructions, refer to Configuring TDM Trails on page 274. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 135 of 577 10.9.5 Configuring Pseudowire Synchronization The following synchronization modes are available to determine which clock is used to generate the outdoing TDM signals at the other end of the link. Smart TDM Pseudowire supports the following synchronization modes: Absolute (Common) Clock – The pseudowire mechanism takes the timing from either an external clock reference connected to the PW T-Card on the front panel or from IP-10G’s NativeSync mechanism. Loop Timing – The pseudowire TDM port recovers the timing from the incoming E1. Adaptive Clock Recovery (ACR) – Clock information is added to the TDM data stream at the point where the data is packetized. The clock information is extracted at the point where the packets are received and reconverted to TDM. The extracted clock information is used for the reconversion to TDM. ACR can provide very accurate synchronization, but requires low jitter. To configure the PW T-Card: 1 Select Configuration > Pseudowire > Card Configuration. The Card Configuration page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 136 of 577 2 From the Front panel clock admin drop down list, select Enable if you are using an external clock source such as a GPS or an E1 line from external equipment. In this case, the external clock source must be physically connected to the Sync interface on the PW T-Card. 3 From the Signal to system sync distribution reference drop down list, select the clock source that will be transmitted towards the general IP-10G synchronization mechanism. Options are: None – Select this if you do not want to transmit a clock source to the general IP-10G synchronization mechanism (e.g., if you are using the front panel for input only). Front Panel – Only available if Front panel clock admin is set to Enable. Select this option to use the front panel as the timing source. Clock Recovery – System uses Adaptive Clock Recovery (ACR) for synchronization. 4 From the Signal to front panel clock interface drop down list, select the clock source the system transmits to the front panel. Options are: None – Select None if the timing is coming from the front panel. Front Panel – Select this option to use an external clock source. Clock Recovery – System uses Adaptive Clock Recovery (ACR) for synchronization. 5 From the Front panel clock signal input drop down list, select the type of signal to be input at the Sync port on the PW T-Card: Sync – A digital 2 MHz signal. E1/DS1 – A normal coded TDM signal. 6 From the Front panel clock signal output drop down list, select the type of signal to be transmitted from the Sync port on the PW T-Card: Sync – A digital 2 MHz signal. E1/DS1 - A normal coded TDM signal. 7 If Signal to front panel clock interface field is set to Clock Recovery, then in the TDM port for front panel clock recovery reference field, enter the TDM port that serves as the clock recovery reference. 8 If Signal to system sync distribution reference field is set to Clock Recovery, then in the TDM port for system clock recovery reference field, enter the TDM port that serves as the clock recovery reference. 9 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 137 of 577 10.9.6 Configuring the Pseudowire T-Card To configure the PW T-Card: 1 Select Configuration > Pseudowire > Card Configuration. The Card Configuration page opens. 2 Configure the Synchronization parameters. Refer to Configuring Pseudowire Synchronization on page 135. 3 In the IP Addresses section of the Card Configuration page, enter a unique IP address and subnet mask for the PW T-Card. Note: The IP address and subnet mask are only necessary for UDP/IP encapsulation. Therefore, if all pseudowire in the system uses MEF-8 encapsulation, it is not necessary to configure an IP address and subnet mask for the PW T-Card. 4 In the Ethernet Port Configuration section of the Card Configuration page, configure the Ethernet port being used for pseudowire traffic: i From the Admin drop down list, select Enable to enable the port. ii From the Auto negotiation drop-down menu, select one of the following options. Note: The Auto negotiation setting must be the same as the auto- negotiation setting of the port connected to the IP-10G. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 138 of 577 On - The data flow between the IP-10G port and the external port is negotiated between the two ports. Off – The duplex type and Ethernet rate are determined by user configuration. iii From the Ethernet rate drop down list, select the Ethernet rate for the port. iv From the Flow control drop down list, select On or Off to enable or disable flow control for the port. Note: The remaining fields are read-only. The Mac address field displays the T-Card’s MAC address, which is unique to the card and used for Ethernet encapsulation. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 139 of 577 10.9.7 Configuring Pseudowire Profiles Each pseudowire service must include a pseudowire profile. The profile determines the behavior of the pseudowire service, including the buffer, alarm thresholds, payload suppression, and other parameters. A profile can be used by multiple pseudowire services. To configure pseudowire profiles: 1 Select Configuration > Pseudowire > PSN Profiles. The PSN Profiles page opens. 2 In the Add New Entry section, select a profile ID from the New profile ID drop down list, and do one of the following: Click Create new; or To create a new profile based on an existing profile select an existing profile from the Copy from profile drop down list and click Copy existing. The new profile appears in the Profiles Table. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 140 of 577 3 Click + next to the new profile (or any profile you want to edit). The profile is expanded. 4 In the Payload size field, enter the number of TDM frames per packet (from 1 to 64). This number multiplied by the number of DS0 channels in a specific bundle equals the size of the TDM payload, and does not include the Ethernet header. 5 In the Jitter buffer depth field, enter the desired jitter buffer depth (from 1 to 32, in milliseconds). This is used to enable the network to accommodate PSN-specific packet delay variation. The jitter buffer can be increased if the network experiences a higher-than-normal level of jitter. 6 From the Use RTP header drop down list, select Yes if you want the system to add RTP headers to Ethernet packets carrying pseudowire traffic. The default value is No. 7 From the RTP timestamp mode drop down list, select from the following RTP timestamp mode options: Absolute Differential The default value is Absolute. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 141 of 577 Note: This parameter is only relevant if you select Yes in the Use RTP header drop down list. 8 In the RTP timestamp multiplication factor field, enter the number by which the reference frequency is multiplied. This must be set to the same value at both ends of the pseudowire service. 9 from the Payload suppression drop down list, select Enable or Disable to enable or disable payload suppression. The default value is Disable. 10 In the Payload type field, enter a value between 96 and 127. This value is used to distinguish between signaling and data types. The default value is 96. 11 From the LOPS detection drop down list, select Enable or Disable to enable or disable LOPS detection. The default value is Enable. 12 In the Consecutive Packets in Sync for LOP field, enter the number of missing packets required in order for the system to indicate a loss of packet state (1-10). The default value is 2. 13 In the Consecutive Missing Packets Out of Sync for LOP field, enter the packets required in order for the system to go out of a loss of packet state (1-10). The default value is 2. 14 In the Packet loss time window, field, enter the time (in milliseconds) the system period (in seconds) the system uses to compute the average packet loss rate in order to detect excessive packet loss (1-65535). The default value is 3000. 15 In the Alarm threshold, field, enter the amount of time (in milliseconds) the system waits after a fault condition exists before indicating an alarm (1-65535). The default value is 2500. 16 In the Excessive packet loss threshold field enter the alarm threshold (in percentage) for excessive packet loss (1-100). The default value is 5. 17 In the Clear alarm threshold field, enter the time (in milliseconds) the system waits before clearing an alarm once the alarm condition has ended (1-65535). The default value is 10000. 18 In the Missing packets for SES threshold field, enter the percentage of missing packets detected within a one second window that will cause SES to be counted. 19 In the CAS alarm pattern field, enter the CAS alarm pattern transmitted on the E1 interface when packets overflow or underflow the jitter buffer. 20 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 142 of 577 10.9.8 Configuring Pseudowire Encapsulation (Tunnels) Each pseudowire service must include an encapsulation tunnel to determine how traffic over the service passes through the network. Encapsulation can use one of the following protocols: MEF-8 UDP/IP To configure a tunnel: 1 Select Configuration > Pseudowire > PSN Tunnels. The PSN Tunnels page opens. 2 Click Add Entry to add a tunnel. The Add Entry window opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 143 of 577 3 From the Tunnel ID drop down list, select a unique Tunnel ID from 1 to 512. 4 From the PSN type drop down list, select the encapsulation protocol for the tunnel: UDP/IP – The tunnel uses UDP/IP encapsulation. Ethernet – The tunnel uses MEF-8 encapsulation. 5 From the VLAN type drop down list, select the VLAN type used by the tunnel. Options are: None C type S type 6 In the VLAN ID field, enter a VLAN ID for the tunnel. 7 In the VLAN p-bits field, enter a p-bit value. This value will be assigned to frames transversing the tunnel. 8 For MEF-8 tunnels, enter the MAC address of the card at the other site of the link in the Remote MAC address field. Note: If the card at the other side of the link is replaced, you will have to re-configure the tunnel. 9 For UDP/IP tunnels, enter a destination IP address in the Destination IP address field. 10 For UDP/IP tunnels, if the destination is on a different segment of the network, enter a next hop IP address in the Next hop IP address field. 11 For UDP/IP tunnels, enter a ToS/DSCP value in the ToS-DSCP field. 12 Click Apply to add the entry. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 144 of 577 10.9.9 Configuring DS0 Bundles For CESoP-based services, you must allocate DS0 channels, splitting one E1 port into several DS0 bundles. To configure DS0 bundles: 1 Select Configuration > Pseudowire > DS0 Bundles. The DS0 Bundles page opens. 2 Click Add Bundle. The Add New Bundle window opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 145 of 577 3 In the Bundle ID field, enter a unique bundle ID from 1 to 496. 4 From the Port ID drop down list, select the E1 port from which you will add DS0 channels to the bundle. 5 In the Start channel field, enter the number of the first DS0 channel to include in the bundle. 6 In the End channel field, enter the number of the last DS0 channel to include in the bundle. 7 From the Admin field, select Enable. 8 Optionally, in the Description field you can enter a description of the bundle. 9 Click Apply to add the bundle. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 146 of 577 10.9.10 Configuring Pseudowire Services You can configure up to 16 pseudowire services. Important Note: Once a profile, tunnel, or bundle has been assigned to a service, you cannot modify that profile, tunnel, or bundle until you first delete the service. To configure a pseudowire service: 1 Select Configuration > Pseudowire > Pseudowire Service. The Pseudowire Service page opens. 2 Click Add Service. The Add Service window opens. 3 From the Service ID drop down list, select a unique Service ID. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 147 of 577 4 From the Pw type drop down list, select the pseudotype protocol you want to use for the service: E1 SAToP – Service uses SAToP protocol. CESoP – Service uses CESoP protocol without CAS signaling. CESoP with CAS – Service uses CESoP protocol with CAS signaling. 5 From the Psn type drop down list, select the encapsulation type: UDP/IP –UDP/IP Ethernet – MEF-8 6 From the Port ID drop down list: For SAToP services, select the TDM port to use with the service. For CESoP services, this option is grayed out. 7 From the Bundle ID drop down list: For SAToP services, this option is grayed out. For CESoP services, select the DS0 bundle to use with the service. 8 From the Profile ID field, select the pseudowire profile to use with the service. 9 From the Tunnel ID field, select the pseudowire tunnel to use with the service. 10 In the Service UDP port or ECID field, enter the source UDP Port for the UDP/IP tunnel or ECID for the Ethernet tunnel. 11 In the Destination UDP port or ECID field, enter the source UDP Port for the UDP/IP tunnel or ECID for the Ethernet tunnel. 12 From the Clock recovery master drop down list, select Enable if Clock Recovery is used for this service. Otherwise, select Disable. 13 From the Admin drop down list, select Enable to enable the service. 14 Click Apply. Note: It is recommended to assign high QoS priority for pseudowire services, using VLAN p-bits, MAC address, and DSCP QoS classification. For additional information: Configuring QoS and Enhanced QoS FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 148 of 577 11. Configuring Auxiliary Channels This chapter includes: Configuring the Wayside Channel Configuring the User Channel Viewing the EOW Channel Status FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 149 of 577 11.1 Configuring the Wayside Channel This feature cannot be used with: PTP Optimized Transport mode Wayside channel and PTP optimized transport mode are mutually exclusive features. You should verify that PTP optimized transport mode is not enabled before enabling the Wayside channel. Refer to Enabling PTP Optimized Transport on page 206. To configure the wayside channel: 1 Select Configuration > Interfaces > Wayside Channel. The Wayside Channel page opens. 2 Click Refresh. The current settings for the wayside channel are displayed. 3 From the Wayside admin drop-down menu, select Enable. 4 From the Capacity drop-down menu, select Narrow or Wide for the wayside channel capacity. 5 From the Auto negotiation drop-down menu, select one of the following options: On - The system controls the data flow between the wayside channel and the other active ports. Off - The data flow between the wayside channel and the other ports is not controlled by the system. 6 From the Duplex drop-down menu, select Full or Half duplex. 7 From the Rate drop-down menu, select the data rate for the port. 8 Click Apply. The settings for the Wayside Channel are configured. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 150 of 577 11.2 Configuring the User Channel Note: This section is not relevant for the IP-10E. To configure the user channel: 1 Select Configuration > Interfaces > User Channel. The User Channel page opens. 2 In the Admin field, select Enable or Disable to enable or disable the user channel. 3 In the Type field, specify the channel type: Asynchronous RS-232 Asynchronous V.11/X.21 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 151 of 577 11.3 Viewing the EOW Channel Status Note: This section is not relevant for the IP-10E. The EOW page displays the EOW (Engineering Order Wire) channel status. To display the EOW channel status, select Configuration > Interfaces > EOW. The EOW page opens. The status of the EOW channel (Enable or Disable) opens in the Admin field. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 152 of 577 12. Configuring the Radio Parameters This chapter includes: Enabling and Disabling the Radio Configuring the Radio Frequencies Specifying the Radio Link ID Configuring the Remote Radio IP Address Configuring the Radio Thresholds Enabling RSL Degradation Alarms Selecting a Radio Script and Configuring ACM Configuring Compression Configuring Radio Traffic Priorities Configuring the Power Options and Green Mode Related topics: Configuring QoS and Enhanced QoS Configuring Diversity Configuring XPIC FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 153 of 577 12.1 Enabling and Disabling the Radio To enable or disable the radio: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. 2 In the Configuration parameters section, select Enable or Disable from the Radio IF interface drop down list to enable or disable the radio. Note: The Radio IF operational status field indicates the current radio status. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 154 of 577 12.2 Configuring the Radio Frequencies You can configure both the local and the remote radio frequencies. To configure the Tx and Rx frequencies of the local radio: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. 2 In the Frequency Control section: i In the Tx frequency field, enter the transmission radio frequency. ii In the Rx frequency field, enter the received radio frequency. iii Optionally, select Set also remote unit to apply these frequency settings to the remote unit. 3 In the Configuration Parameters section: i In the Mute Tx field, select Enable or Disable to enable or disable Tx muting. ii In the Max Tx level field, enter a number between 2-20 as the maximum transmission frequency. To configure remote radio frequency settings: 1 Select Configuration > Radio > Remote Radio. The Remote Radio window opens. 2 In the Remote force max Tx level field, enter a number between 2-20 as the maximum transmit level for the remote radio. 3 In the Remote ATPC reference Rx Level field, enter a number between -70-30 as the ATPC receive level. 4 Click Apply. To unmute the remote unit transmitter output: 1 Select Configuration > Radio > Remote Radio. The Remote Radio window opens. 2 Click Force Unmute. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 155 of 577 12.3 Specifying the Radio Link ID To specify the radio link ID: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. 2 In the Configuration parameters section, enter the identification number of the link in the Link ID field. Note: When working with an IDU that has the Link ID feature on one end and an IDU that does not have this feature on the other end, set the Link ID to 1. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 156 of 577 12.4 Configuring the Remote Radio IP Address To set the remote radio IP address: 1 Select Radio > Remote Radio. The Remote Radio page opens. 2 In the Remote Radio Parameters section: In the Remote IP address field, enter the IP address of the remote unit. In the Remote floating IP address field, enter the remote floating IP address. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 157 of 577 12.5 Configuring the Radio Thresholds This section includes: Radio Threshold Levels RSL and TSL Thresholds MSE Threshold XPI Threshold Ethernet Throughput Threshold Ethernet Capacity Threshold Ethernet Utilization Threshold FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 158 of 577 12.5.1 Radio Threshold Levels To configure the radio threshold levels: 1 Select Configuration > Radio > Radio Thresholds. The Radio Thresholds page opens. 2 Click Refresh. The current remote radio unit settings are displayed. 3 From the Radio excessive BER threshold drop-down list, select the level above which an excessive BER alarm is issued for errors detected over the radio link. 4 From the Radio signal degrade threshold drop-down list, select the level above which a Signal Degrade alarm is issued for errors detected over the radio link. 5 The Radio BER field displays the value above which a BER alarm is issued for errors detected over the radio link. 6 Click Apply. The radio threshold levels are configured. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 159 of 577 12.5.2 RSL and TSL Thresholds To configure signal level thresholds: 1 Select PM & counters > Radio> Signal Level. The Signal Level page opens. 2 Go to the Thresholds Configuration section. 3 In the RSL Threshold #1 field, specify the number of seconds below which RSL 1 exceeded seconds will be counted. 4 In the RSL Threshold #2 field, specify the number of seconds below which RSL 2 exceeded seconds will be counted. 5 In the TSL Threshold field, specify the number of seconds below which TSL exceeded seconds will be counted. 6 Click Apply to save your changes. 7 Click Refresh to update the threshold values. 12.5.3 MSE Threshold To configure the MSE threshold: 1 Select PM & Counters > Radio> MSE. The MSE page opens. 2 Go to the Thresholds Configuration section. 3 In the MSE Threshold field, specify the number of seconds below which MSE exceeded seconds will be counted. 4 Click Apply to save your changes. 5 Click Refresh to update the threshold value. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 160 of 577 12.5.4 XPI Threshold To configure the XPI threshold: 1 Select PM & Counters > Radio> XPI. The XPI page opens. 2 Go to the Threshold Configuration section. 3 In the XPI Threshold field, specify the number of seconds below which XPI exceeded seconds will be counted. 4 Click Apply to save your changes. 12.5.5 Ethernet Throughput Threshold To configure the throughput threshold: 1 Select PM & Counters > Radio> Ethernet > Throughput. The Throughput page opens. 2 Go to the Thresholds configuration section. 3 In the Throughput Threshold field, specify the throughput threshold (in Mbps), above which will be counted as Throughput Exceeds seconds. 4 Click Apply to save your changes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 161 of 577 12.5.6 Ethernet Capacity Threshold To configure the Ethernet capacity threshold: 1 Select PM & Counters > Radio> Ethernet > Capacity. The Capacity page opens. 2 Go to the Thresholds Configuration section. 3 In the Capacity Threshold field, specify the capacity threshold (in bps), above which will be counted as Capacity Exceeds seconds. 4 Click Apply to save your changes. 12.5.7 Ethernet Utilization Threshold To configure the Ethernet utilization threshold: 1 Select PM & Counters > Radio> Ethernet > Utilization. The Utilization page opens. 2 Go to the Thresholds Configuration section. 3 In the Utilization Threshold field, select a range of utilized throughput, above which will be counted as Utilization Exceeds seconds. 4 Click Apply to save your changes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 162 of 577 12.6 Enabling RSL Degradation Alarms This feature enables the generation of an alarm when the RSL level degrades below a user-defined threshold. When enabled, an alarm is generated if the RSL level degrades below the nominal level minus the degradation margin. The alarm is cleared when the RSL level returns to a level above this point. To enable RSL degradation alarms: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. 2 Go to the Configuration Parameters section of the Radio Parameters page. 3 In the RSL degradation alarm admin field, select Enable. 4 In the Nominal RSL level for RSL degradation alarm field, enter the nominal level for the RSL degradation alarm. 5 In the Margin for RSL degradation alarm field, enter the degradation margin for the RSL degradation alarm. 6 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 163 of 577 12.7 Selecting a Radio Script and Configuring ACM The MRMC table lists all available radio scripts. Radio scripts define how the radio utilizes its available capacity. Each script is a pre-defined collection of configuration settings that specify the radio’s transmit and receive levels, link modulation, channel spacing, and bit rate. Scripts apply uniform transmit and receive rates that remain constant regardless of environmental impact on radio operation. Note: The list of available scripts reflects licensed features. Only scripts within your licensed capacity will be displayed. To apply a radio script: 1 Select Configuration > Radio > MRMC. The MRMC Table opens. 2 Specify which types of scripts to display. Select FCC to display only FCC compatible scripts. Select ETSI to display only ETSI compatible scripts. Select Both to display both FCC and ETSI scripts. 3 Click the + icon for a regular script (without the ACM prefix) to open the script configuration options. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 164 of 577 12.7.1 ACM Radio Scripts Related topics: Configuring Radio Traffic Priorities In ACM mode, a range of profiles determines Tx and Rx rates. This allows the radio to modify its transmit and receive levels in response to environmental conditions. The ACM TX profile is determined by the remote RX MSE performance. The RX end is the one that initiates an ACM profile upgrade or downgrade. To apply an ACM script: 1 Select Configuration > Radio > MRMC. The MRMC page opens. 2 Go to the MRMC Table, near the bottom of the page. 3 Click the + icon of an ACM script (scripts with an ACM prefix) to open the script configuration options. 4 Select the ACM mode: Fixed or Adaptive. Fixed ACM mode applies constant Tx and Rx rates. However, unlike regular scripts, with a Fixed ACM script you can specify a maximum profile to inhibit inefficient transmission levels. In Adaptive ACM mode, Tx and Rx rates are dynamic. An ACM-enabled radio system automatically chooses which profile to use according to the channel fading conditions. For ACM Fixed Mode scripts: 1 Select the MRMC profile. 2 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 165 of 577 For ACM Adaptive Mode scripts: 1 Specify the radio’s maximum allowed transmission frequency. In the Select Maximum ACM Profile section, select the maximum ACM profile. 2 Specify the radio’s minimum allowed transmission frequency. In the ACM Minimum Profile field, select the minimum ACM profile. 3 Specify whether the system should automatically align power usage to the current bandwidth utilization. Select Enable or Disable from the Adaptive Power field drop down list. In the Reference Class field, specify class-2/4/5B/6A for ETSI, or FCC for FCC. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 166 of 577 12.7.2 ACM with 1+1 HSB Protection When activating an ACM script together with 1+1 HSB protection, if an LOF alarm is raised, both the active and the standby receivers degrade to the lowest available profile (highest RX sensitivity). Because RX sensitivity is very high, the receivers may have “false lock”, which will result in a switchover. If the LOF alarm remains, protection switchovers may appear alternately every 1 sec. This may cause management instability and may even prevent management access to the units completely. In order to avoid this scenario, it is important to follow the instructions for setting up 1+1 HSB protection. In particular, make sure that the link is established with “lockout” configuration in order to avoid alternate switchovers. Once the link is up and running, ”lockout” can be disabled. The following ACM behavior should be expected in a 1+1 configuration: In the TX direction, the Active TX will follow the remote Active RX ACM requests (according to the remote Active Rx MSE performance). The Standby TX might have the same profile as the Active TX, or might stay at the lowest profile (profile-0). That depends on whether the Standby TX was able to follow the remote RX Active unit’s ACM requests (only the active remote RX sends ACM request messages). In the RX direction, both the active and the standby units follow the remote Active TX profile (which is the only active transmitter). For additional information: Configuring 1+1 HSB FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 167 of 577 12.7.3 ACM Adaptive Power This feature requires: RFU-C, running software version 2.01 or above When configuring an ACM script with Adaptive Mode, you can determine whether or not the RFU power will be adaptive as well. During fade conditions requiring a modulation drop, a constant power scheme cannot increase transmit power to compensate for the signal degradation, further reducing capacity. Adaptive power dynamically adjusts the power to the lowest transmit level for the current modulation. When disabled, the maximum Tx power in lower constellations is limited by the highest modulation. When enabled, the maximum Tx power in lower constellations is limited by the reference class. To enable adaptive power: 1 Select Configuration > Radio > MRMC. The MRMC Table opens. 2 Select an ACM script. 3 Expand an ACM script to configure its options. Note: ACM scripts are indicated by the ACM prefix. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 168 of 577 4 Enable or disable adaptive power. Select Enable or Disable from the Adaptive Power field drop down list. 5 Specify the adaptive power reference class. In the Reference Class field, select class-2/4/5B/6A for ETSI, or FCC for FCC. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 169 of 577 12.7.4 Enabling Alarms on MRMC Profile Degradation If the current radio script supports Adaptive Code Modulation (ACM), when enabled, traps can be generated upon Tx ACM profile degradation below the user-defined threshold. To enable alarms on MRMC profile degrade: 1 Select Configuration > Radio > MRMC. The MRMC Table opens. 2 Go to the MRMC Configuration section. 3 From the Alarm generation on MRMC profile degrade drop down list, select Enable to enable the MRMC profile degrade alarm. 4 In the Threshold for MRMC profile degrade alarm field, specify the profile above which will generate the profile degrade alarm. 5 In the Alarm generation for MRMC profile degrade field, select Enable or Disable to enable or disable event and trap generation on ACM profile degrade. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 170 of 577 12.7.5 Activating an Asymmetrical Script This feature requires: Asymmetrical Scripts license Note: When using an asymmetrical script, the capacity license relates to the TX side of each link. To activate an asymmetrical script, you must upgrade the uplink script (narrow TX, wide RX) at one end of the link, and upgrade the downlink script (wide TX, narrow RX) at the other end of the link. This operation requires reset. The number of TDM trails is determined by the capacity of the uplink (narrow script). To avoid loss of management while upgrading the scripts, it is recommended to upgrade the remote side first. Asymmetrical scripts are supported in both R2 and R3 hardware. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 171 of 577 12.8 Configuring Compression IP-10G/E offers several Ethernet header compression methods, which enable operators to significantly improve Ethernet throughout over the radio link without affecting user traffic: No Header Compression (Layer 1 Header Suppression) – Removes the IFG and Preamble fields. This mechanism operates automatically even if no header compression is selected by the user. MAC Header Compression (“Legacy Mode”) – Operates at Layer 2, compressing the MAC SA and the MAC DA. The user can enable or disable MAC header compression. Multi-Layer Header Compression (“Enhanced Compression”) –Users can configure the depth of Enhanced Compression, up to Layer 4. You must balance the depth of compression against the number of flows in order to ensure maximum efficiency. Up to 256 concurrent flows are supported. To configure header compression: 1 Select Configuration > Radio > Compression. The Compression page opens. 2 In the Compression mode field, select Legacy or Enhanced. Select Legacy if you want to use MAC header compression or no compression. Then, select Enable or Disable in the MAC header compression field to enable or disable MAC header compression, and click Apply. Select Enhanced if you want enhanced (multi-layer) header compression. Then, perform the steps in the next section. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 172 of 577 12.8.1 Configuring Enhanced Header Compression This feature requires: Enhanced Compression License Hardware version R3 Software version I6.9 or higher Enhanced (multi-layer) header compression identifies traffic flows and replaces header fields with a flow ID. The Enhanced Compression module includes an algorithm for learning each new flow, and implements compression on the flow type starting with the next frame of that flow type. In Enhanced Compression mode, you can determine the depth to which the compression mechanism operates, from Layer 2 to Layer 4. You must balance the depth of compression against the number of flows in order to ensure maximum efficiency. Multi-Layer (Enhanced) compression supports up to 256 flow types. To configure enhanced (multi-layer) header compression: 1 In the Compression mode field of the Compression page, select Enhanced. 2 Click Apply. The fields in the Compression Configuration section of the Compression page change as shown in the following figure. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 173 of 577 3 In the Enhanced Header Compression Mode field, select the layer depth to which compression will operate. Options are: L2 – Ethernet and MPLS L3 – Ethernet and IP L4 – All supported layers up to L4 4 Optionally, you can configure excluding rules to restrict the number of compressed flow. To add an excluding rule: i In the Rule Name field, enter a name for the rule. ii In the Rule Type field, select from the following options: Flow Type VLAN MAC DA MAC SA Ethertype iii In the Rule Value field, enter the value that you want to exclude, according to the following table: Rule Type Rule Value Flow Type 1 byte hexadecimal identifier of the protocol stack. For details, refer to Enhanced Header Compression Flow Type Bitmask and Supported Configurations on page 173. VLAN 4 bytes, including VLAN Ethertype to distinguish S-VLAN from C-VLAN, VLAN ID, and VLAN P-Bit. MAC DA 6 bytes in hexadecimal format. MAC SA 6 bytes in hexadecimal format. Ethertype 2 bytes in hexadecimal format. 5 Click Apply. 12.8.1.1 Enhanced Header Compression Flow Type Bitmask and Supported Configurations The following table shows the flow type bitmask. Bit 6-7 (MSB) Bit 5 Bit 4 Bit 3 Bit 2 Bit 0-1 (LSB) L2 PBB-TE MPLS L3 - IPv4 L3 - IPv6 L4 „00‟ untag „10‟ reserved „01‟ single tag „11‟ double tag „0‟ – no „1‟ - yes „0‟ – no „1‟ - yes „0‟ – no „1‟ - yes „0‟ – no „1‟ – yes „00‟ – no „01‟ – UDP „10‟ – TCP „11‟ - GRE FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 174 of 577 The following lookup table shows all supported flow type configurations: Flow Attributes Flow-type untag-no L4 0x00 untag-IPV6-no L4 0x04 untag-IPV6-UDP 0x05 untag-IPV6-TCP 0x06 untag-IPV4-no L4 0x08 untag-IPV4-UDP 0x09 untag-IPV4-TCP 0x0A untag-MPLS-no L4 0x10 untag-PBB-no L4 0x20 S-tag-no L4 0x40 S-tag-IPV6-no L4 0x44 S-tag-IPV6-UDP 0x45 S-tag-IPV6-TCP 0x46 S-tag-IPV4-no L4 0x48 S-tag-IPV4-UDP 0x49 S-tag-IPV4-TCP 0x4A S-tag-MPLS-no L4 0x50 C-tag-no L4 0x80 C-tag-IPV6-no L4 0x84 C-tag-IPV6-UDP 0x85 C-tag-IPV6-TCP 0x86 C-tag-IPV4-no L4 0x88 C-tag-IPV4-UDP 0x89 C-tag-IPV4-TCP 0x8A C-tag-MPLS-no L4 0x90 SC-tag-no L4 0xC0 SC-tag-IPV6-no L4 0xC4 SC-tag-IPV6-UDP 0xC5 SC-tag-IPV6-TCP 0xC6 SC-tag-IPV4-no L4 0xC8 SC-tag-IPV4-UDP 0xC9 FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 175 of 577 Flow Attributes Flow-type SC-tag-IPV4-TCP 0xCA SC-tag-MPLS-no L4 0xD0 12.8.1.2 Enhanced Header Compression Compatibility The IP-10G/E’s configuration monitoring mechanism is used to provide backwards compatibility with legacy hardware and software versions that do not support Multi-Layer (enhanced) header compression. A configuration mismatch may occur in the following scenarios: The remote IDU is using a pre-I6.9 software release. The remote IDU is using a pre-R3 hardware release. The remote IDU is configured to Legacy compression mode. In each of these scenarios, both sides of the link will use Legacy compression mode and an alarm will be raised to indicate that there is a configuration mismatch. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 176 of 577 12.9 Configuring Radio Traffic Priorities Related topics: ACM Radio Scripts Configuring QoS and Enhanced QoS Since radio bandwidth may vary in ACM, situations may arise in which it is necessary to drop some of the outgoing traffic. The system dynamically allocates bandwidth to traffic according to user-defined priorities. At the radio level, the system can discern between the following types of traffic: High-priority Ethernet traffic Low-priority Ethernet traffic High-priority TDM trails Low-priority TDM trails Users can configure the following parameters: The amount (in Mbps) of high priority Ethernet Bandwidth For each TDM trail, whether it is high or low priority The priority order between the different types of traffic. the following schemes are available (from high to low priority): High-TDM-over-high-Ethernet, meaning: 1. TDM high priority 2. Ethernet high priority 3. TDM low priority 4. Ethernet low priority High-Ethernet-over-TDM, meaning: 1. Ethernet high priority 2. TDM high priority 3. TDM low priority 4. Ethernet low priority TDM-over-Ethernet (default), meaning: 1. TDM high priority 2. TDM low priority 3. Ethernet For this mechanism to work properly, both sides of the link should be identically configured: Each TDM trail on both sides of a link should be assigned the same priority. Both sides of the link should have the same amount of high priority Ethernet bandwidth. Both sides of the link should use the same priority scheme. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 177 of 577 To configure radio traffic priority: 1 Select Configuration > Radio > Traffic Priority. The Traffic Priority page opens. 2 In the Traffic priority scheme field, select a traffic priority scheme: High TDM over Ethernet (default) TDM high priority TDM low priority Ethernet High Ethernet over TDM Ethernet high priority TDM high priority TDM low priority Ethernet low priority High TDM over high Ethernet TDM high priority Ethernet high priority TDM low priority Ethernet low priority Note: The Current available capacity field displays the amount of current capacity, in Kbps. 3 In the High-priority Ethernet BW field, specify how much of your current capacity to allocate for Ethernet bandwidth. 4 Click Apply to save configuration changes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 178 of 577 12.10 Configuring the Power Options and Green Mode This section includes: Configuring ATPC Override Configuring Green Mode FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 179 of 577 12.10.1 Configuring ATPC Override This feature cannot be used with the following: Green Mode ATPC is a closed-loop mechanism by which each RFU changes the transmitted signal power according to the indication received across the link, in order to achieve a desired RSL on the other side of the link. Without ATPC, if loss of frame occurs the system automatically increases its transmit power to the configured maximum. This may cause a higher level of interference with other systems until the failure is corrected. In order to minimize this interference, some regulators require a timer mechanism which will be manually overridden when the failure is fixed. The underlying principle is that the system should start a timer from the moment maximum power has been reached. If the timer expires, ATPC is overridden and the system transmits at a pre-determined power level until the user manually re-establishes ATPC and the system works normally again. The user can configure the following parameters: Override timeout (0 to disable the feature): The amount of time the timer counts from the moment the system transmits at the maximum configured power. Override transmission power: The power that will be transmitted if ATPC is overridden because of timeout. The user can also display the current countdown value. When the system enters into the override state, ATPC is automatically disabled and the system transmits at the pre-determined override power. An alarm is raised in this situation. The only way to go back to normal operation is to manually cancel the override. When doing so, users should be sure that the problem has been corrected; otherwise, ATPC may be overridden again. To configure ATPC override: 1 Select Configuration > Radio > ATPC. The ATPC page opens. 2 Go to the ATPC Configuration section. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 180 of 577 3 In the ATPC admin field, select Enable or Disable to enable or disable ATPC. 4 In the ATPC override Tx level field, enter a number between -50 and 34 as the ATPC override transmit level. 5 In the ATPC reference RSL field, enter a number between -70 and 30 as the reference value for the ATPC mechanism. 6 In the ATPC timeout field, specify the number of seconds before overriding the current Tx level with the ATPC override Tx level. Note: The ATPC timer counter field displays the number of seconds remaining until ATPC timeout. 7 Click Apply. To cancel ATPC override: 1 Select Configuration > Radio > ATPC. The ATPC page opens. 2 Go to the ATPC Configuration section. 3 Click ATPC Override Cancel. The cancel option aborts the current ATPC override for a radio that is transmitting at the ATPC override Tx level. Following execution, the system goes back to normal ATPC operating mode. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 181 of 577 12.10.2 Configuring Green Mode This feature requires: RFU-HP or RFU-A This feature cannot be used with the following: ATPC FibeAir IP-10G/E offers an optional ultra-high power radio solution that transmits the highest power in the industry, while employing an innovative Power Saving Mode that saves up to 30% power consumption. Power Saving Mode enables the deployment of smaller antennas, and reduces the need for repeater stations. Moreover, installation labor cost and electricity consumption are reduced, achieving an overall diminished carbon footprint. To configure radio Green mode: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. 2 Go to the Green Mode section. 3 In the Green mode admin field, select Enable or Disable to enable or disable Green Mode. 4 In the Green mode reference RX level field, enter a number between -70 -30 as the Green Mode reference level. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 182 of 577 13. Configuring QoS and Enhanced QoS This section includes: QoS Overview Configuring Standard QoS Configuring Enhanced QoS Related topics: Configuring Radio Traffic Priorities FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 183 of 577 13.1 QoS Overview IP-10G/E offers integrated QoS functionality in all switching modes. In addition to its standard QoS functionality, IP-10G/E offers an enhanced QoS feature. Enhanced QoS is license-activated. IP-10G/E’s standard QoS provides for four queues and six classification criteria. Ingress traffic is limited per port, Class of Service (CoS), and traffic type. Scheduling is performed according to Strict Priority (SP), Weighted Round Robin (WRR), or Hybrid WRR/SP scheduling. IP-10G/E’s enhanced QoS provides eight classification criteria instead of six, color-awareness, increased frame buffer memory, eight priority queues with configurable buffer length, improved congestion management using WRED protocols, enhanced counters, and other enhanced functionality. 13.1.1 Standard QoS Overview QoS enables users to configure classification and scheduling to ensure that packets are forwarded and discarded according to their priority. QoS configurations are available in all switch applications (Smart Pipe, Managed Switch, and Metro Switch). Since it is common to set QoS and rate limiting settings identically in several ports, the QoS configuration can be copied from one port to another. This saves considerable time and prevents configuration mistakes. The following diagram illustrates the QoS flow: Egress Port #y Ingress Port #x Classifier (4 Queues) 5 Policers (Ingress Rate Limiting) Queue Controller Shaper (Egress rate limiting) Marker Scheduler 13.1.1.1 Standard QoS Classifier Using IP-10G/E’s standard QoS functionality, the system examines the incoming traffic and assigns the desired priority according to the marking of the packets (based on the user port/L2/L3 marking in the packet). In case of congestion in the ingress port, low priority packets are discarded first. The standard QoS classifier is made up of four classification criteria hierarchies: MAC DA (Destination Address) Overwrite – Classification and marking is performed for incoming frames carrying a MAC DA that appears in the Static MAC table, according to the following options: Disable – No MAC DA classification or VLAN P-Bit overwrite (marking). Queue Decision – Only classification to queue. No marking. VLAN P-Bit Overwrite – Only VLAN P-Bits overwrite (marking). Classification according to a lower criterion. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 184 of 577 Queue Decision and VLAN P-Bit Overwrite – Both classification and VLAN P-Bits overwrite. VLAN ID Overwrite –If the first criteria is not fulfilled (either because it is disabled, or because the ingress frame does not carry any MAC DA that appears in the S MAC table), classification and/or marking (VLAN P-Bit overwrite, assuming the frame egress is tagged) is decided according to the VLAN ID to Queue table according to the following options: Disable – No VLAN ID classification or VLAN P-Bit overwrite (marking). Queue Decision – Only classification to queue. No marking. VLAN P-Bit Overwrite – Only VLAN P-Bit overwrite (marking). Classification is according to the lower criteria (P-Bits or port priority). In this case, P-Bits are assigned as follows (if egress frame is tagged): Frames classified to 1 st queue are given p-bits=0 Frames classified to 2 nd queue are given p-bits=2 Frames classified to 3 rd queue are given p-bits=4 Frames classified to 4 th queue are given p-bits=6 Queue Decision and VLAN P-Bit Overwrite – Both classification and VLAN P-Bit overwrite. Initial Classification is according to the following configuration: VLAN P-Bit – Classification is according to VLAN P-Bit. And the queue is assigned according to the VLAN P-Bit to Queue table. IP TOS – Classification is according to IP TOS (IP precedence, or IP diffserv). The queue is assigned according to the IP P-Bit to Queue table. VLAN P-Bit over IP TOS – Classification according to VLAN P-Bit, if the ingress frame carries a VLAN. For untagged packets with an IP header, classification is according to IP TOS. IP TOS over VLAN P-Bit – Classification is according to IP TOS, if the ingress frame has an IP header. If the ingress frame without an IP header carries a VLAN, classification is according to VLAN P-Bit. Port (Default) – If any of the above criteria are not fulfilled, the default classification is assigned to the ingress frame according to the port priority. Default Classification. Default priority for frames incoming at the port. 13.1.1.2 Standard QoS Policers IP-10G/E’s standard QoS provides up to five policers to perform ingress rate limiting. The policers are based on a color blind leaky bucket scheme, and can be applied per port or CoS. For each policer, users can define up to five class maps. Each class map includes the following parameters: FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 185 of 577 Committed Information Rate (CIR) – IP-10G/E supports CIR granularity of 64kbps up to 1 Mbps of CIR, 1 Mbps from 1 Mbps to 1 Gbps of CIR. Packets within the CIR defined for the service are marked green and passed through the QoS module. Committed Burst Size (CBS) – IP-10G/E supports CBS up to a maximum of 128 kbytes. The default value is 12 kbytes. Packets within the CBS defined for the service are marked green and passed through the QoS module. Committed Information Rate (CIR) – IP-10G/E supports the following granularity for CIR: 64Kbps <= CIR <= 960Kbps, in steps of 64Kbps. 1000Kbps <= CIR <= 100,000Kbps in steps of 1000Kbps. 100,000Kbps < CIR <= 1,000,000Kbps in steps of 10,000Kbps. Committed Burst Size (CBS) – IP-10G/E supports the following granularity for CBS: For 64Kbps <= CIR <= 960Kbps, 0 < CBS <= 273,404 Bytes. For 1000Kbps <= CIR <= 100,000Kbps, 0 < CBS <= 132,585 Bytes. For 100,000Kbps < CIR <= 1,000,000Kbps, 0 < CBS <= 4,192,668 Bytes. Data type – The rate can be limited based on the following data types: None (no limiting), Unknown unicast, Unknown multicast, Broadcast, Multicast, Unicast, Management, ARP, TCP-Data, TCP-Control, UDP, Non- UDP, Non-TCP-UDP, Queue1, Queue2, Queue3, Queue4. Note: Management frames are BPDUs processed by the system’s IDC, when processing L2 protocols (e.g., xSTP). Limit Exceed Action Discard Frame. Note: The rate for rate limiting is measured for all Layer 1 bytes, meaning: Preamble (8bytes) + Frame's DA to CRC + IFG (12 Bytes) 13.1.1.3 Queue Management, Scheduling, and Shaping IP-10G/E’s standard QoS has four priority queues. The queue controller distributes frames to the queues according to the classifier. The fourth queue is the highest priority queue, and the first queue is the lowest priority queue. The scheduler determines how frames are output from the queues. IP-10G/E’s standard QoS supports the following scheduling schemes: Strict Priority for all queues. Strict Priority for the fourth queue, and Weighted Round Robin (WRR) for the remaining queues. Strict Priority for the fourth and third queues, and WRR for second and first queues. WRR for all queues. In a WRR scheduling scheme, a weight is assigned to each queue, so that frames egress from the queues according to their assigned weight, in order to FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 186 of 577 avoid starvation of lower priority queues. In addition, frames egress in a mixed manner, in order to avoid bursts of frames from the same queue. Each queue’s weight can be configured. A queue's weight is used by the scheduler when the specific queue is part of a WRR scheduling scheme. Queue-Weight can be configured in the range of 1-32. The default queue weights are 8,4,2,1. The shaper determines the scheduler rate (egress rate limit). The shaper can be enabled and disabled by the user. By default, the shaper is disabled. The shaper rate is set with the following granularity: For 64Kbps <= Rate <= 960Kbps, in steps of 64Kbps. For 1000Kbps <= Rate <= 100,000Kbps in steps of 1000Kbps. For 100,000Kbps < Rate <= 1,000,000Kbps in steps of 10,000Kbps. 13.1.2 Enhanced QoS Overview Enhanced QoS provides an enhanced and expanded feature set. The tools provided by enhanced QoS apply to egress traffic on the radio port, which is where bottlenecks generally occur. Enhanced QoS capabilities include: Enhanced classification criteria CIR/CBS and EIR/EBS support 255 MEF-compliant policers with trTCM support. Policers per port, service (VLAN+CoS), and CoS Eight priority queues with configurable buffer length An enhanced scheduler based on Strict Priority, Weighted Fair Queue (WFQ), or a hybrid approach that combines Strict Priority and WFQ Shaper per priority queue WRED support, along with Tail-Drop, for congestion management A PTP Optimized Transport dedicated channel for time synchronization protocols Enhanced PM and statistics These and other IP-10G/E enhanced QoS features enable operators to provide differentiated services with strict SLA while maximizing network resource utilization. Enhanced QoS requires a license, and can be enabled and disabled by the user. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 187 of 577 The following figure illustrates the basic building blocks and traffic flow of enhanced QoS. The initial step in the enhanced QoS traffic flow is the classifier, which provides granular service classification based on a number of user-defined criteria. The classifier marks the Service ID, CoS, and color of the frames. If a frame’s VLAN ID matches a Service ID that is mapped to a policer, the frame is sent to the policer. Untagged frames or frames whose VLAN ID does not match a defined Service ID are sent directly to a queue, based on the frame’s CoS and color. Enhanced QoS provides up to 255 user-defined TrTCM policers. The policers implement a bandwidth profile, based on CIR/EIR, CBS/EBS, and several other criteria. The next step after the TrTCM policers is queue management. Queue management determines which packets enter which of the eight available queues. Queue management also includes congestion management, which can be implemented by Tail-Drop or WRED. Frames are sent out of the queues according to scheduling and shaping, IP- 10G/E’s enhanced QoS module provides a unique hierarchical scheduling model that includes four priorities, with WFQ within each priority and shaping per queue. This model enables operators to define flexible and highly granular QoS schemes for any mix of services. Finally, the enhanced QoS module re-marks the P-bits and CFI/DEI bits of the most outer VLAN according to the CoS and color decision in the classifier. This step is also known as the modifier. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 188 of 577 13.1.2.1 Queue Management Queue management is the process by which packets are assigned to priority queues. Queue management also includes congestion management. IP-10G provides the tail-drop method of congestion management, and enhanced QoS also offers Weighted Random Early Detection (WRED). Enhanced QoS supports eight queues with configurable buffer size. The user can specify the buffer size of each queue independently. The total amount of memory dedicated to these queue buffers is 4Mb, and the size of each queue can be set in granularity of 0.5Mb. The default buffer size is 0.5Mb for each queue. The following considerations should be taken into account in determining the proper buffer size: Latency considerations – If low latency is required (users would rather drop frames in the queue than increase latency) small buffer sizes are preferable. Note: The actual, effective buffer size of the queue can be less than 0.5Mb based on the configuration of the WRED tail drop curve. Throughput immunity to fast bursts – When traffic is characterized by fast bursts, it is recommended to increase the buffer sizes of the priority queues to prevent packet loss. Of course, this comes at the cost of a possible increase in latency. User can configure burst size as a tradeoff between latency and immunity to bursts, according the application requirements. One of the key features of IP-10G’s enhanced QoS is the use of WRED to manage congestion scenarios. WRED provides several advantages over the standard tail-drop congestion management method. WRED enables differentiation between higher and lower priority traffic based on CoS. Moreover, WRED can increase capacity utilization by eliminating the phenomenon of global synchronization. Global synchronization occurs when TCP flows sharing bottleneck conditions receive loss indications at around the same time. This can result in periods during which link bandwidth utilization drops significantly as a consequence of a simultaneous falling to a ”slow start” of all the TCP flows. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 189 of 577 13.1.2.2 Scheduling and Shaping Scheduling and shaping determine how traffic is sent on to the radio from the queues. Scheduling determines the priority among the queues, and shaping determines the traffic profile for each queue. IP-10G’s enhanced QoS module provides a unique hierarchical scheduling model that includes four priorities, with Weighted Fair Queuing (WFQ) within each priority, and shaping per port and per queue. This model enables operators to define flexible and highly granular QoS schemes for any mix of services. Shaping The egress shaper is used to shape the traffic profile sent to the radio. In enhanced QoS mode, there is an egress shaper for each priority queue. The user can configure the following parameters: Global shaper admin – Enables/disables all of the eight shapers. Shaper admin – Enables/disables each shaper for each priority queue. CIR – Committed Information Rate (as specified by MEF 10.2). CBS – Committed Buffer Size (as specified by MEF 10.2). Line compensation – Represents the number of bytes to compensate in the shaper credits counting for the Inter-Frame Gap (IFG) and the preamble + SFD fields between the two consecutive Ethernet frames. The default value is 20 bytes, which is the number of bytes used for IFG + preamble + SFD according to the Ethernet standard. Note: The user can configure the shaper to count in L2 by setting line compensation to zero. The user can also “punish” short frame senders for the overhead they cause in the network by increasing the line compensation to a value above 20 bytes. Scheduling IP-10G’s enhanced QoS mechanism provides Strict Priority and Weighted Fair Queue (WFQ) for scheduling. Users can configure a combination of both methods to achieve the optimal results for their unique network requirements. Each priority queue has a configurable strict priority from 1 to 4 (4=High;1=Low). WFQ weights are used to partition bandwidth between queues of the same priority. For each queue, the user configures the following parameters: Priority (1 to 4) – The priority value is strictly applied. This means the queue with higher priority will egress before a queue with lower priority, regardless of WFQ weights. WFQ weight (1 to 15) – Defines the ratio between the bandwidth given to queues of the same priority. For example if queue 6 and queue 7 are assigned WFQ weights of 4 and 8, respectively (using the notations of the above figure), then under congestion conditions queue 7 will be allowed to transmit twice as much bandwidth as queue 6. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 190 of 577 Note: In order to be able to egress frames, each queue must also have enough credits in its shaper. 13.1.2.3 Configurable P-Bit and CFI/DEI Re-Marking When enabled, the re-marker modifies each packet’s 802.1p P-Bit and CFI/DEI bit fields. 802.1p is modified according to the classifier decision. The CFI/DEI (color) field is modified according to the classifier and policer decision. The color is first determined by a classifier and may be later overwritten by a policer. Green color is represented by a CFI/DEI value of 0, and Yellow color is represented by a CFI/DEI value of 1. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 191 of 577 13.2 Configuring Standard QoS This section includes: Opening the QoS & Rate Limiting Page Configuring the Classification Settings Configuring the Egress Scheduler Configuring Ingress Rate Limiting Remapping P-Bits Configuring VLAN-ID to Queue Assigning IP P-Bits to Queue Assigning Queues According to P-Bits Assigning Queue Weights Configuring Policers Defining the Static MAC Table Copying QoS Settings from One Port to Another FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 192 of 577 13.2.1 Opening the QoS & Rate Limiting Page Most of the standard QoS configuration is performed in the QoS & Rate Limiting page. To configure open this page and display the port settings: 1 Select Configuration > Ethernet Switch > QoS & Rate Limiting. The QoS & Rate Limiting page opens. This page includes the following sections: Interfaces Table – Summarizes the current rate limiting settings for the selected port. Advanced Classifier Links – Includes advanced QoS parameters that you can apply to ports. Copy Ports Configuration – Enables you to copy the QoS configuration from one port to another. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 193 of 577 2 Click the + icon next to the port you want to configure to expand the port settings. 13.2.2 Configuring the Classification Settings Define the ports classification settings in the Ingress Classifier section of the QoS & Rate Limiting page. A frame ingressed to the port will be classified according to the four levels of criteria defined in this section. 1 Define the first criteria: MAC DA based. A frame ingressed to a port, carrying a MAC Destination Address (DA) that appears in the Static MAC table, will be classified, its VLAN P-bits will be overwritten (assuming the frame egress is tagged) according to one of these options: Disable - No MAC DA classification or VLAN P-bits will be overwritten. No marking. Queue decision - There will only be classification to queue. No marking. VLAN P-bits overwrite - Only VLAN P-bits will be overwritten (marked). Classification according to a lower criteria. Queue Decision & VLAN P-bits overwrite - Both classification and VLAN P-bits overwrite. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 194 of 577 2 Define the second criteria: VLAN ID based. If the first criteria is not fulfilled (whether it is disabled, or the ingress frame does not carry a MAC DA that appears in the Static MAC table), classification and/or marking (VLAN P-bits overwrite, assuming the frame egress is tagged) will be decided according to classification options defined in the VLAN ID to queue table. Options are: Disable - No VLAN ID classification or VLAN P-bits overwrite (marking). Queue decision - Only classification to queue. No marking. VLAN P-bits overwrite - Only VLAN P-bits overwrite (marking). Classification will be according to lower criteria. Queue decision & VLAN P-bits overwrite - Both classification and VLAN P-bits overwrite. 3 Define the third criteria. If both the first and second criteria are not fulfilled (whether they are both disabled, or the ingress frame does not carry a MAC DA or VLAN ID that appears in the tables), it will be classified according to the following configuration: VLAN P-bits - Classification according to VLAN P-bits. Queue is assigned according to the VLAN P-bits priority remap table. IP TOS - Classification according to IP TOS (IP precedence, or IP diffserv). Queue is assigned according to IP P-bits to queue table. VLAN P-bits over IP TOS - Classification according to VLAN P-bits, if the ingress frame carries a VLAN and has an IP header. IP TOS over VLAN P-bits - classification according to IP TOS, if the ingress frame carries a VLAN and has an IP header. Port (Default) - If any of the above criteria is not fulfilled, the default classification will be assigned to the ingress frame. 4 In the Default classification field, select the criteria to use as the default queue decision. 13.2.3 Configuring the Egress Scheduler The Egress scheduler section of the QoS & Rate Limiting page determines how frames are output from the queues. The fourth queue is the highest priority queue. The first queue is the lowest priority queue. The following scheduling schemes are supported: Strict for all queues. Strict for fourth queue, and Hierarchical Round Robin (HRR) for third, second, and first queues. Strict for fourth and third queues, and HRR for second and first queues. HRR for all queues. In the HRR scheduling scheme, a weight is assigned to each queue, so that frames egress from the queues according to their assigned weight, to avoid "starvation" of lower priority queues. In addition, frames will egress in a "mixed" manner, to avoid "bursts" of frames from the same queue. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 195 of 577 Each queue weight can be configured, and the weight will be used by the scheduler when the specific queue is part of the HRR scheduling scheme. The queue weight is a value between 1 and 32, and is configured via the queue weights table. The default queue weights are 8,4,2,1. To define how frames are output from the queues: 1 Expand the port and go to the Egress Rate Limiting section of the QoS & Rate Limiting page. 2 In the Egress shaper field, select On or Off to enable or disable the egress shaper. The default is OFF. 3 In the Shaper rate field, enter the Kb per second for the egress rate limit. The value should be in steps of 64K for values less than 1 Mbps; 1M steps for values between 1 Mbps and 100 Mbps; and 10M steps for values between 100 Mbps and 1000 Mbps: For 64 Kbps <= Rate <= 960 Kbps, in steps of 64 Kbps. For 1000 Kbps <= Rate <= 100,000 Kbps, in steps of 1000 Kbps. For 100,000 Kbps < Rate <= 1,000,000 Kbps, in steps of 10,000 Kbps. 13.2.4 Configuring Ingress Rate Limiting The Ingress rate limiting section of the QoS & rate limiting window determines the port ingress rate limit. To specify the port ingress rate limit: 1 Expand the port and go to the Ingress Rate Limiting section of the QoS & Rate Limiting page. 2 In the Attach policer field, specify which policer to attach to the port. You can configure up to five policers for each port. Each policer has the following parameters: CIR - Committed Information Rate. Rate limiting resolution is: For 64 Kbps <= CIR <= 960 Kbps, in steps of 64 Kbps For 1000 Kbps <= CIR <= 100,000 Kbps, in steps of 1000 Kbps For 100,000 Kbps < CIR <= 1,000,000 Kbps, in steps of 10,000 Kbps CBS - Committed Burst Size. CBS is CIR-dependent, and should be configured in bytes: For 64 Kbps <= CIR <= 960 Kbps, 0 < CBS <= 273,404 bytes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 196 of 577 For 1000 Kbps <= CIR <= 100,000 Kbps, 0 < CBS <= 132,585 bytes. For 100,000 Kbps < CIR <= 1,000,000 Kbps, 0 < CBS <= 4,192,668 bytes. Data type. Rate can be limited based on the following data types: None (no limiting) Unknown unicast |Unknown multicast Broadcast | Multicast | Unicast Management | ARP | TCP-Control UDP | Non- UDP | Non-TCP-UDP Queue1 | Queue2 | Queue3 | Queue4. 13.2.5 Remapping P-Bits You can re-mark p-bits per port. To re-mark p-bits: 1 In the Ingress Classifier section of the QoS & Rate Limiting page, click VLAN Pbits Priority Remap Table. The P-Bit Remapping table opens. 2 In the Pbit field, select the p-bit you want to remap. 3 In the Remapped Pbit field, select the value you want to apply to p-bits with the value selected in the Pbit field. 4 Click Apply. 5 Repeat for each p-bit value you want to remap. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 197 of 577 13.2.6 Configuring VLAN-ID to Queue The VLAN ID to queue page allows you to assign a frame to a queue according to the frame’s VLAN-ID. The number of table entries depends on the number of VLANs that have a queue allocation definition. By default, VLANs do not have a pre-determined queue allocation. To assign VLANs to queues according to VLAN ID: 1 Click VLAN ID to queue link in the Advanced section at the bottom of the QoS & Rate Limiting page The QoS-VLAN ID to Queue window opens. 2 In the Operation field, select Add or Delete to specify the operation type. 3 In the Start VID and End VID fields, enter the VLAN start and end IDs. 4 In the Queue field, specify to which queue to assign the frame. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 198 of 577 13.2.7 Assigning IP P-Bits to Queue The IP P-Bits to Queue page enables you to assign a queue to a frame according to the frame’s IP priority bits (IP-Precedence or Diffserv), assuming the frame is an IP packet. To assign a queue to a frame according to the frame’s IP priority bits: 1 Click IP P-bits to queue in the Advanced section at the bottom of the QoS & Rate Limiting page The QoS-IP Pbits to Queue window opens. 2 In the IP priority options section, specify the IP type: IP Precedence configuration: 8 entries. DiffServ configuration: 64 entries. 3 Click Apply. 4 In the QoS IP P-bits to Queue section, assign a queue to each IP priority bit. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 199 of 577 13.2.8 Assigning Queues According to P-Bits The VLAN P-Bits to Queue page enables you to assign a queue to a frame according to the frame’s p-bits (CoS), assuming the frame is tagged. To assign a queue to a frame according to the frame’s p-bits: 1 Click VLAN P-bits to queue in the Advanced section at the bottom of the QoS & Rate Limiting page The QoS-VLAN Pbits to Queue window opens. 2 In the QoS VLAN Pbits to Queue section, assign a queue to each p-bit. 3 Click Apply. 13.2.9 Assigning Queue Weights The Queue Weights page allows you to assign weights to each queue. Queue weight is used by scheduler when the specific queue is part of HRR scheduling scheme. To configure the QoS queue weights: 1 Click Queue weights in the Advanced section at the bottom of the QoS & Rate Limiting page The QoS-Queue Weights window opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 200 of 577 2 In the Scheduler Queue Weight section, select one of the four QoS queues in the drop-down list on the left and specify the weight for the selected queue in the drop-down list to the right. Queue weights can be configured in the range of 1-32. The higher the weight, the higher the priority for that queue. 3 Click Apply to save your configuration settings. In the QoS-Queue Weights table, click Refresh to display the current queue weights. 13.2.10 Configuring Policers The QoS-Policer List page enables you to add policy rules to a policer. You can configure up to five policy rules per policer. When a policer definition is completed, it can be associated with any port, by attaching its name to the port. This will enforce all policy rules of the policer on the port. You can use the detach command to remove the policer (and all its policy rules) from the port. To configure a policer: 1 Click Policer List in the Advanced section at the bottom of the QoS & Rate Limiting page The QoS-Policer List window opens. The Policer List includes the following columns: Policer Name – Identifies the policer. Attached Ports – Indicates to which ports the policer is attached. 2 In the Operation field above the QoS-Policer List section, select Add or Delete to specify the operation type. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 201 of 577 3 In the Policer Name field, enter a name for the policer. Note that the name cannot include spaces. However, you can use underscores instead. 4 Click Apply. The new policer appears in the QoS-Policer List section. 5 Select a policer from the list and click its + icon to expand the policer details. 6 In the Operation field, select Add or Delete to specify the operation type. 7 In the Class name field, enter a class name for the policer. 8 In the Traffic type field, select the type of traffic to which the policer can be applied. 9 In the CIR field, enter the CIR steps, in kbps. 10 In the CBS field, enter the CBS, in bytes. 11 Click Apply. 13.2.11 Defining the Static MAC Table The Static MAC table is used to load static MAC addresses to the forwarding table of the switch. To define the static MAC table: 1 Click Static MAC in the Advanced section at the bottom of the QoS & Rate Limiting page The QoS-Static MAC window opens. 2 In the Operation field, select Add or Delete to specify the operation type. 3 In the VLAN ID field, enter the ID of the frame. Each frame is attached with a VLAN ID. Frames are learned and filed in the static MAC table under their VLAN ID. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 202 of 577 4 In the Static MAC field, enter in the 48-bit static MAC address, in octet format (xx:xx:xx:xx:xx:xx). Note: The static MACs are never flushed. 5 In the Forward To field, select the destination port to which the frame should be forwarded. 6 In the Priority field, select a priority level. 7 Click Apply. In the QoS Static MAC table: VLAN ID – Indicates the ID of the frame. Static MAC – Indicates the 48-bit MAC address. Forward – Indicates which port the frame will be forwarded to. Priority – Indicates the priority level according to the QoS configurations. 13.2.12 Copying QoS Settings from One Port to Another Since it is common to set QoS and rate limiting settings identically in several ports, the Copy Ports Configuration option can be used to copy the configurations from one port to another. This saves considerable time and prevents configuration errors. To copy a port’s QoS configuration to another port: 1 In the Copy Ports Configuration section of the QoS & Rate Limiting page, select the source port from the Source port drop down list. 2 Select the port to which you want to copy the source port’s settings from the Destination port drop down list. 3 Specify the copy operation to be performed: Copy Priorities Configuration – Copies all traffic priorities using the ingress classifier. Copy Rate Limiting Configuration – Copies the policer configuration only. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 203 of 577 13.3 Configuring Enhanced QoS This feature requires: Enhanced QoS License Enhanced QoS settings apply to the egress traffic on the Radio port (where the bottleneck is located). All other ports function as usual. Standard QoS settings continue to apply even when enhanced QoS is activated. 13.3.1 Preparing the System for Enhanced QoS This section describes how to prepare the system to enable the Enhanced traffic manager to minimize the impact on traffic. In preparation for using the Enhanced traffic manager, you must disable the QoS egress shaper. You should also classify the in-band management traffic to ensure that the management signal is not affected. 13.3.1.1 Classifying In-Band Management Traffic To configure the classification of the in-band management signal: 1 Select Configuration > General > Management. The Management page opens. Management ports are configured in the Management Ports section, towards the bottom of the Management page. 2 In the bottom of the Management page, click Refresh. The current parameters are displayed. 3 Select In-band or Out of band from the Type drop down list to configure the management mode. 4 In the In-band Management VLAN ID field, enter the VLAN. ID that will be used to manage the unit, when the In-band management type is used. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 204 of 577 13.3.1.2 Disabling the QoS Egress Shaper To disable the QoS egress shaper: 1 Select Configuration > Ethernet switch > QoS & Rate Limiting. The QoS & Rate Limiting page opens. 2 Expand the radio port to open the port configuration options. 3 Go to the Egress Rate Limiting section. 4 In the Egress shaper field, select Off. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 205 of 577 13.3.2 Enabling Enhanced QoS Note that enabling Enhanced QoS will affect traffic on the radio port. To enable Enhanced Traffic Manager: 1 Select Configuration > Ethernet switch > Enhanced Traffic Manager > Configuration & Parameters. The Configuration & Parameters page opens. 2 Go to the Configuration section. 3 In the Enhanced Traffic Manager admin field, select Enable to enable Enhanced QoS. 4 From the PM calculation mode drop down list, select the PM calculation mode. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 206 of 577 13.3.3 Enabling PTP Optimized Transport This feature cannot be used with: Wayside Channel The Precision Time Protocol (PTP) optimized transport feature is a special channel with low Packet Delay Variation (PDV), which is essential for timing synchronization protocols such as IEEE 1588. PTP optimized transport channel is a Constant Bit Rate Channel that is dedicated to the Precision Time protocol with a constant latency that is invariant to ACM profile changes and to any congestion conditions that may occur on the payload traffic path. Upon enabling this feature, a special low PDV channel is created. This channel has 2Mb bandwidth and carries all the frames mapped to the 8th queue. Once enabling the feature, the user must make sure to classify all PTP frames to the 8th queue according to the criterion described above (e.g.,. by UDP destination ports 319 and 320 for IEEE 1588 protocol). In this mode, all frames from the 8th queue will bypass the shaper and scheduler and will be sent directly to the dedicated low PDV channel. To enable PTP Optimized transport: 1 Ensure that the Wayside channel is disabled: i Select Configuration > Interfaces > Wayside Channel. The Wayside Channel page opens. ii In the Wayside admin field, select Disable. iii Click Apply to disable the Wayside channel. 2 Select Configuration > Ethernet switch > Enhanced Traffic Manager > Configuration & Parameters. The Configuration & Parameters page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 207 of 577 3 Go to the Configuration section. 4 In the Precision Time Protocol optimized transport admin field, select Enable. 5 Click Apply. 6 Classify all PTP frames to the eighth priority queue.IN PTP optimized transport mode, frames from the eighth queue will bypass the shaper and scheduler and will be sent directly to the dedicated low PDV channel. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 208 of 577 13.3.4 Configuring Queue Size Enhanced QoS supports eight queues with configurable buffer sizes. The user can specify the buffer size of each queue independently. The total amount of memory dedicated to these queue buffers is 4Mb, and the size of each queue can be set in granularity of 0.5Mb. The default buffer size is 0.5Mb for each queue. The following considerations should be taken into account in determining the proper buffer size: Latency considerations – If low latency is required (users would rather drop frames in the queue than increase latency) small buffer sizes are preferable. Note: The actual, effective buffer size of the queue can be less than 0.5Mb based on the configuration of the WRED tail drop curve. Throughput immunity to fast bursts – When traffic is characterized by fast bursts, it is recommended to increase the buffer sizes of the priority queues to prevent packet loss. Of course, this comes at the cost of a possible increase in latency. You can configure burst size as a tradeoff between latency and immunity to bursts, according the application requirements. Note: Changing queue size can impact traffic output. To configure queue size: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Configuration & Parameters. The Configuration & Parameters page opens. 2 In the Queue Size section of the Configuration & Parameters page, select the buffer size in the Queue Size field for each queue. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 209 of 577 13.3.5 Configuring Enhanced QoS Classification The classifier is a basic element of each Enhanced Traffic Manager mechanism. Each frame is given a Class of Service (CoS) and color (based on MEF 10.2 recommendations). Green frames refer to traffic that complies with the configured CIR. Yellow frames exceed the CIR, but are still less than the configured CBS. Users can define several criteria that classify Ethernet frames. All the classification criteria are divided into three hierarchies from the most specific to the general. 13.3.5.1 Configuring Services You can configure services per VLAN. To configure services: 1 Select Configuration > Ethernet switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 Go to the Services Configuration section, towards the bottom of the Classification page. 3 Click Services Configuration Table. The Services Configuration Table opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 210 of 577 4 In the Row number field, enter the number of the row you want to configure and press <Enter>. The window jumps to the row you entered. 5 In the Service ID column, an ID for the service (1-255). 6 Click Apply. 13.3.5.2 Configuring the egress CoS and Color Modifier (Marker) You can configure the IP-10G/E to re-mark the P-bits and CFI/DEI bits of the most outer VLAN according to the CoS and color decision in the classifier. This step is also known as the modifier. To configure the modifier: 1 Select Configuration > Ethernet switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 Go to the Marker section, towards the bottom of the Classification page. 3 Select Enable. 4 Click Marker Configuration Table. The Marker Configuration Table opens. The markers are sorted by CoS and color. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 211 of 577 5 Click + next to the marker you want to modify. The marker is expanded. 6 Modify the P-bit value and/or the DEI/CFI value fields. 7 Click Apply. 13.3.5.3 Enabling Classification Rules To enable classification rules for Ethernet frames: 1 Select Configuration > Ethernet switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 In the First Hierarchy section, select Enable for the classification criteria. More than one criterion can be selected. To enable all first hierarchy criteria, select Enable all. To disable all first hierarchy criteria, select Disable all. 3 In the Second Hierarchy section, select Enable for the classification criteria: More than one criterion can be selected. To enable all first hierarchy criteria, select Enable all. To disable all first hierarchy criteria, select Disable all. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 212 of 577 4 In the Third Hierarchy section, select Enable for the classification criteria. More than one criterion can be selected. To enable all first hierarchy criteria, select Enable all. To disable all first hierarchy criteria, select Disable all. 5 Click Apply. 13.3.5.4 Setting the Default Classification Settings You can configure the default frame color and CoS for all unclassified frames. Additionally, you can change the queuing hierarchy of the CoS settings. The preconfigured setting for the CoS queuing hierarchy is that CoS 0 has the highest priority and CoS 7 has the lowest. To configure the default classification rule settings: 1 Select Configuration > Ethernet switch > Enhanced Traffic Manager > Classification. The Classification page opens. The default classification settings are located at the bottom of the page, underneath the Third Hierarchy section. 2 In the Default color field, select Green or Yellow to set the default frame color. 3 In the Default CoS field, enter the default Class of Service for frames. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 213 of 577 4 Click CoS to Queue Classification. The CoS to Queue Classification window opens. 5 Expand a CoS. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 214 of 577 6 In the Queue index field, enter the new Queue index for that CoS. Each queue is a physical resource which can be assigned to accommodate frames of a one or more CoS values. 7 Click Close to close the CoS to Queue Classification window. 8 In the Classification page, click Apply. 13.3.5.5 Configuring First Hierarchy Classification Rules The first hierarchy contains the classification rules that apply to the most specific traffic parameters. The first hierarchy contains following classification criteria: Source MAC address UDP ports Known destination multicast MAC addresses Any or all of these criteria can be used to classify the CoS for the frames. Classification by Source MAC Address Up to 16 separate MAC addresses can be configured. To configure traffic classification rules according to the source MAC Address: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 In the First Hierarchy section, click MAC Addresses Table to open the MAC addresses configuration window. 3 Go to the Add New Entry section 4 In the Row number field, select the number to be displayed in the # column for this classification rule. 5 In the MAC address field, enter the source MAC address that is being classified. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 215 of 577 6 In the CoS field, select the CoS to be assigned to traffic from this MAC address (0 – 7). 7 In the Color field, select the traffic color to be assigned to traffic from this MAC address. Options are Green (compliant) or Yellow (non-compliant). 8 Click Apply. To edit the parameters of a MAC address that is already listed in the MAC Addresses table: 1 Expand the MAC address. 2 Edit the MAC address, CoS, and/or Color fields. 3 Click Apply. Classification by UDP Ports Up to eight UDP port entries can be configured. To configure traffic classification rules according to the UDP ports: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 In the First Hierarchy section, click UDP Ports Table to open the UDP Ports Table window. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 216 of 577 3 Go to the Add New Entry section 4 In the Row number field, select the number to be displayed in the # column for this classification rule. 5 In the Source port field, enter the number of the source UDP port that is being classified. 6 In the Destination port field, enter the number of the destination UDP port that is being classified. 7 In the CoS field, select the CoS to be assigned to traffic from this UDP port. 8 In the Color field, specify whether the frames associated with this UDP port are designated as Green (compliant) or Yellow (non-compliant). 9 Click Apply. To edit the parameters of a UDP source port that is already listed in the UDP Ports table: 1 Expand the port. 2 Edit the Source port, Destination Port, CoS, and/or Color fields. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 217 of 577 UDP port configurations recommendations: To specify classification by UDP source port only, you should configure Destination Port to 0. To specify classification by UDP destination port only, you should configure Source Port to 0. When both the Source and Destination port parameters contain non-zero values, the classification rule only applies to frames that match both the Source and Destination ports. Classification by Known Multicast MAC Address You can classify the CoS and color of traffic that is being sent to one of the predefined multicast MAC addresses. The Known multicast MAC addresses table contains a list of 66 destination MAC addresses which are reserved for network protocols use. To configure traffic classification rules according to the known multicast MAC addresses: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 In the First Hierarchy section, click Known Multicast MAC Addresses Table to open the Known Multicast MAC Addresses Table window. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 218 of 577 3 Click the + icon next to a listed MAC address to view its details. 4 In the CoS field, select the CoS to be assigned to traffic from this MAC address. 5 In the Color field, specify whether the frames associated with this MAC address are designated as Green (compliant) or Yellow (non-compliant) 6 In the Validity field, select Valid or Not valid to specify whether the classification rules are applied to frames that are sent to this destination MAC address. 7 Click Apply. 13.3.5.6 Configuring Second Hierarchy Classification Rules The second hierarchy enables you to determine CoS according to Service ID or in-band management VLAN ID. The latter is used to give high priority to the in-band management frames in order to prevent loss of the management signal on the remote sites. To configure the second hierarchy classification rules: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 219 of 577 2 Go to the Second Hierarchy section. 3 In the 1st criterion, by in-band management VLAN ID field, select Enable to Enable in-band management by VLAN ID. 4 In the VLAN ID field, enter the VLAN ID for the in-band management signal. Note: The VLAN ID is configured in the Management Ports section of the Management window. Refer to Configuring In-Band Management on page 89. 5 In the Color field, select Green or Yellow to specify the classification color for the in-band management signal. Green - The in-band management signal complies with the CIR. Yellow - The in-band management signal complies with the EIR. 6 In the CoS field, enter a number between 0-7 as the CoS value for the in- band management signal. 7 In the 2nd criterion, by Service Id field, click Service to CoS and Color Classification Table. The Service to CoS and Color Classification Table opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 220 of 577 8 Click + next to the service to which you want to assign a CoS and color to expand the service. 9 In the Service Name field, enter a name for the service. 10 In the CoS field, enter the CoS you want to assign to the service. 11 From the Color drop down list, select the color you want to assign to the service. 12 From the Validity drop down list, select Valid. 13 Click Apply to save the settings. 14 When you have finished configuring services, click Close to close the Service to CoS and Color Classification Table. 15 Click Apply to save the second hierarchy settings. 13.3.5.7 Configuring Third Hierarchy Classification Rules The third hierarchy contains the classification rules that apply to the most general traffic parameters. The third hierarchy contains three classification criteria: VLAN P-Bits to CoS DSCP/TOS Bits to CoS MPLS exp Bits to CoS VLAN P-bits to CoS The first classification rule in the third hierarchy manages the outgoing traffic according to the VLAN P-bits value that already exists on the frame. You can configure the CoS and frame color of the traffic according to the P-bits and CFI value of each frame. There are two CFI options for each P-bit and a total of 16 classification rules according to the VLAN P-bits. To view VLAN P-bits traffic classification rules: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 221 of 577 2 In the Third hierarchy section, click VLAN P-Bits to CoS and Color Classification Table to open the VLAN P-bits to CoS and Color Classification table. In the VLAN P-bits to CoS and Color Classification table: # - Indicates the number of the classification rule. 802.1 UP - Indicates the P-bit value for this classification rule. The range of options is 0 to 7. CFI/DEI - Indicates the CFI/DEI value for this classification rule. The options are 0 or 1. Class of Service - Indicates the configured CoS for this classification rule. Color - Indicates the configured color for this classification rule. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 222 of 577 To configure VLAN P-bits traffic classification rules: 1 Click the + icon for a selected rule to view its details. 2 In the CoS field, enter the Class of Service you want to assign to the rule. 3 In the Color field, select Green or Yellow to specify whether frames with the P-Bit and CFI/DEI value assigned to this rule are designated as Green (compliant) or Yellow (non-compliant). 4 Click Apply. DSCP/TOS Bits to CoS Differentiated Service Code Point (DSCP) or Type of Service (TOS) is a 6 bit length field inside the IP datagram header carrying priority information. Classification by DSCP bits can be used for untagged frames, as well as 802.1Q tagged or provider VLAN tagged frames. The classifier also supports classification by Traffic Class (TC) of the IPv6. Whichever IP protocol version is used, the classifier extracts the adjacent field automatically. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 223 of 577 To configure DSCP/TOC P-bits traffic classification rules: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. 2 In the Third Hierarchy section, click DSCP/TOS Bits to CoS and Color Classification table to open the DSCP/TOS Bits to CoS and Color Classification table. 3 Click the + icon for a selected rule to view its details. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 224 of 577 4 In the CoS field, enter the Class of Service you want to assign to the rule. 5 In the Color field, select Green or Yellow to specify whether frames with the DSCP/TOS value assigned to this rule are designated as Green (compliant) or Yellow (non-compliant). 6 Click Apply. MPLS exp Bits to CoS MPLS experimental bits are used to provide QoS capabilities by utilizing the bits set in the MPLS labels. MPLS Label Format Classification by MPLS experimental bits is supported in both untagged and 802.1Q/provider tagged frames. To configure MPLS experimental bits traffic classification rules: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Classification. The Classification page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 225 of 577 2 In the Third Hierarchy section, click MPLS exp bits to CoS and Color Classification Table to open the MPLS exp bits to CoS and Color Classification table. 3 Click the + icon for a selected rule to view its details. 4 In the CoS field, enter the Class of Service you want to assign to the rule. 5 In the Color field, select Green or Yellow to specify whether frames with the MPLS value assigned to this rule are designated as Green (compliant) or Yellow (non-compliant). 6 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 226 of 577 13.3.6 Configuring Egress Policers You can define up to 256 egress policers and map services to policers. To define egress policers: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Egress Policing. The Egress Policing page opens. 2 Select Enable. 3 Click Policer Configuration Table. The Policer Configuration Table opens. 4 Click + next to the policer you want to define to display the policer configuration settings. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 227 of 577 5 In the Policer Name field, enter a name for the policer. 6 In the CIR field, enter the CIR value. The default value is 0. 7 In the CBS field, enter the CBS value. The default value is 12288 bytes. 8 In the EIR field, enter the EIR value. The default value is 0. 9 In the EBS field, enter the EBS value. The default value is 12288. 10 In the Color mode field, select Color aware or Color blind: In Color aware mode, all packets that ingress with a CFI/DEI field set to 1 (yellow) are treated as EIR packets, even if credits remain in the CIR bucket. In Color blind mode, all ingress packets are treated as green regardless of their CFI/DEI value. A color-blind policer discards any former color decisions. 11 In the Coupling admin field, select Enable or Disable. When enabled, frames that ingress as yellow may be converted to green when there are no available yellow credits in the EIR bucket. Note: Coupling admin is only relevant in color aware mode. 12 In the Line compensation field, enter the IFG + Preamble. The default value is 20 bytes. The policer adds this value to the size of each arriving frame size (e.g., frame size of 64 bytes will be handled as a frame size of 64+20=84 bytes). When Line compensation is 20, the policer operates as Layer 1. When Line compensation is 0, the policer operates as Layer 2. 13 In the Admin field, select Enable to enable the policer. 14 Click Apply to save the policer’s configuration. 15 When you have finished configuring policers, click Close to close the Policer Configuration Table. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 228 of 577 16 In the Egress Policing page, click Service to Policer Mapping Table. The Service to Policer Mapping Table opens. 17 In the Service ID field, enter the Service ID of the service you want to map. 18 In the Policer ID field, enter the Policer ID of the policer to which you want to map the service. An ID of 0 is void, which means that no policer is attached to the service. Note: A service can only be mapped to one policer, unless you select the Policer per CoS option described in the next step. A policer can be mapped to multiple services. 19 Optionally, to use the Policer per CoS option (refer to Policer per Cos Option on page 229). i Select a Policer ID of 8 or a multiple of 8. ii In the Value field, select On. iii Click Apply. 20 Click Apply. 21 When you have finished mapping services to policers, click Close to close the Service to Policer Mapping Table. 22 In the Egress Policing page, click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 229 of 577 13.3.6.1 Policer per Cos Option The Policer per Cos option allocates eight consecutive policers to the same service. Each policer is assigned a different CoS value, and can be configured to a different bandwidth profile. For example, if Service 3 is mapped to Policer 8 and the Policer per CoS option is enabled: Policer8 > Service3; Cos=0 Policer9 > Service3 ; Cos=1 Policer10 > Service3 ; Cos=2 Policer11 > Service3 ; Cos=3 Policer12 > Service3 ; Cos=4 Policer13 > Service3 ; Cos=5 Policer14 > Service3 ; Cos=6 Policer15 > Service3 ; Cos=7 Using the Policer per CoS option will consume eight policers from the total pool of 255 policers. Note: The Policer per CoS option can be enabled only for a Policer with a Policer ID of 8 or a multiple of 8, e.g., Policer8, Policer16,Policer24, …, Policer248 . When using the Policer per CoS option, none of the 8 policers that are allocated to the service can be used by other services. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 230 of 577 13.3.7 Configuring WRED Weighted Random Early Detect (WRED) mechanism can increase capacity utilization of TCP traffic by eliminating the phenomenon of global synchronization. Global synchronization occurs when TCP flows that share bottleneck conditions receive loss indications at the same time. This can result in periods during which link bandwidth utilization drops significantly as a consequence of simultaneous falling to ‘slow start’ of all the TCP flows. To enable WRED: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > WRED. The WRED page opens. 2 In the WRED admin section, click Enable. 3 Click Apply. The WRED profile curve describes the probability of randomly dropping packets as the specific queue uses more bandwidth. You can configure a separate WRED profile curve for each priority queue. Additionally, you can configure different weights for yellow (non-compliant) and green (compliant) packets so that the system drops yellow packets first. To configure WRED traffic classification thresholds: 1 Go to the WRED Thresholds section of the WRED page. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 231 of 577 2 Click the + icon for a selected queue to view its details. 3 In the Green packets low threshold field, specify the minimum throughput of green packets for this queue. When this value is reached, the system begins dropping green packets in this queue. 4 In the Green packets high threshold field, specify the maximum throughput of green packets for this queue. When this value is reached, all green packets in this queue are dropped. 5 In the Green packets maximal drop percentage field, specify maximum percentage of dropped green packets for this queue. 6 In the Yellow packets low threshold field, specify the minimum throughput of yellow packets for this queue. When this value is reached, the system begins dropping yellow packets in this queue. 7 In the Yellow packets high threshold field, specify the maximum throughput of yellow packets for this queue. After this value is reached, all yellow packets in this queue are dropped. 8 In the Yellow packets maximal drop percentage field, specify the maximum percentage of dropped yellow packets for this queue. 9 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 232 of 577 13.3.8 Configuring the Egress Shaper and Scheduler The Egress shaper feature is used to shape the traffic profile sent to the radio. The Enhanced Traffic Manager enables you to configure an Egress shaper for each priority queue. When using the Enhanced Traffic Manager feature, the egress scheduler uses the Weighted Fair Queue (WFQ) algorithm instead of Weighted Round Robin (WRR). Each priority queue is assigned a strict priority between 1 and 4 (4=High; 1=Low). WFQ weights are used to partition bandwidth between the queues of the same priority. To enable the enhanced egress shaping and scheduling: 1 Select Configuration > Ethernet Switch > Enhanced Traffic Manager > Egress Shaper & Scheduler. The Egress Shaper & Scheduler page opens. 2 In the Global Shaper admin section, select Enable. 3 Click Apply. To configure Egress shaper and scheduler for the priority queues: 1 Go to the Queue Configuration section of the Egress Shaper & Scheduler page. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 233 of 577 2 Select a queue and click the + icon to view its details. 3 In the Priority field, enter a number between 1-4 as the egress priority for this queue. The queue with a higher priority egresses before a lower one regardless of WFQ weights. 4 In the WFQ weight field, enter a number between 1 and 15 to set the WFQ weight. This weight determines the ratio for allowed bandwidth to queues with the same priority. For example, if queue 5 has a WFQ weight of 4, and queue 7 has a WFQ weight of 8, then under congestion conditions, queue 7 will be allowed to transmit twice as much bandwidth as queue 5. 5 In the Shaper admin field, select Enable or Disable to enable or disable the Egress shaper and scheduler for this priority queue. 6 In the CIR field, enter the number of Kbps to be allocated for CIR for this queue. 7 In the CBS field, enter the number of bytes to be allocated for CBS for this queue. 8 In the Line compensation field, enter the number of bytes that is compensated in the shaper credits counting for the Inter-Frame Gap (IFG) and the preamble + SFD fields between the two consecutive Ethernet frames. The default value is 20 bytes which is the number of bytes used for IFG + preamble + SFD according to the Ethernet standard. 9 Click Apply. Note: You may want the Egress shaper to count in L2 by setting line compensation to 0. You can also “punish” short frame senders for the overhead they cause in the network by increasing the line compensation above 20 bytes. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 234 of 577 14. Setting Up Protected Configurations This chapter includes: Protection Overview Configuring 1+1 HSB Configuring a 2+0 Configuring 2+2 HSB Specifying Active and Standby Mode Configuring Switchover Criteria Viewing Mate Parameters Configuring Multi-Unit LAG Related topics: Troubleshooting Protection FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 235 of 577 14.1 Protection Overview Equipment protection is possible in both standalone and nodal configurations. The following protected configurations are available: 1+1 HSB 2+0 Multi-Radio 2+0 Multi-Radio with IDU and Line Protection 2+2 HSB and Multi-Radio The following table summarizes the degree of protection provided by the various IP-10G/E configuration options. Comparison of IP-10G/E Protection Options Configuration # of IDUs per Terminal # of RFUs per Terminal Radio Capacity – Normal Radio Capacity – Unit Failure Native TDM Protection 1 XPIC Support ACM Support BBS (SD/FD) Support 1+1 HSB 2 2 1 1 Protected – TDM trails are duplicated in the active and standby IDUs. No Optional 2 Optional 2+0 Multi-Radio 2 2 2 RFU Failure – 1 3 IDU (Slave) Failure – 1 4 IDU (Master) Failure - 0 TDM capacity is doubled but not protected. 5 Optional Optional No 2+0 Multi-Radio with IDU and Line Protection 2 2 2 RFU Failure – 1 6 IDU (Slave or Master) Failure - 1 7 Protected – TDM trails are duplicated in the active and standby IDUs. Optional Optional 8 No 2+2 HSB with Multi-Radio 4 4 2 2 Full protection Optional Optional No 1 TDM protection is not relevant to the IP-10E. 2 ACM is not supported when BBS (SD/FD) is used. 3 With graceful degradation. 4 With graceful degradation. 5 Protection can optionally be provided using the SNCP/ABR mechanism. This is done by defining a primary TDM trail over one radio carrier and a secondary trail over the other radio carrier. The secondary trail will back up the primary trail in the event of any failure (assuming the main IDU performing the node TDM XC is functional). 6 With graceful degradation. 7 With graceful degradation. 8 ACM support is only provided for Ethernet traffic, not for TDM trails. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 236 of 577 14.2 Configuring 1+1 HSB This section includes: 1+1 HSB Overview Configuring 1+1 HSB Protection in a New Standalone System Replacing the Standby Unit in a 1+1 HSB Standalone System Configuring 1+1 HSB Protection in a New Nodal System Replacing the Standby Unit in a 1+1 HSB Nodal System This feature cannot be used with: Multi-Radio 2+0 Multi-Radio with IDU and line protection XPIC Related topics: Specifying Active and Standby Mode Configuring Switchover Criteria Configuring IP Addresses ACM with 1+1 HSB Protection FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 237 of 577 14.2.1 1+1 HSB Overview A 1+1 configuration scheme can be used to provide full protection in the event of IDU or RFU failure. The two IDUs operate in active and standby mode. If there is a failure in the active IDU or RFU, the standby IDU and RFU pair switches to active mode. TDM trails are duplicated in the active and standby IDUs, so that both Ethernet and TDM traffic is protected. In a 1+1 configuration, the protection options are as follows: Standalone – The IDUs must be connected by a dedicated Ethernet protection cable. Each IDU has a unique IP address. Nodal – The IDUs are connected by the backplane of the nodal enclosure. There is one IP address for each of the main units. 1+1 HSB can be used with BBS Space or Frequency Diversity. The following figure illustrates a 1+1 HSB configuration in a standalone setup, with an Ethernet protection cable connecting the two IDUs via their Protection ports. 1+1 HSB Protection – Connecting the IDUs A Protection Panel or protection split cable is designed to implement E1/DS1 splitters. Split cables must be used for Ethernet signals. Cables for other units should be connected to the protection panel and cables. The traffic, management, and wayside interfaces for both the active and the standby IDUs should also be connected to the protection panel. It is also possible to use Ethernet splitters to the FE and SFP (Optical GbE) ports. The electrical GbE (10/100/1000) interface can be split by means of the protection panel or protection split cables, subject to the following limitations: The interface should be set to Auto negotiation = OFF, Rate=100, and Duplex=Full. When the standby unit is powered Off and back On, Ethernet traffic running through electrical GbE ports in the active unit may be affected. For additional information: Configuring Ethernet Ports FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 238 of 577 14.2.2 Configuring 1+1 HSB Protection in a New Standalone System For a 1+1 configuration, in a standalone system the IDUs must be connected by a dedicated Ethernet protection cable. Perform the following preliminary steps: Check the serial/part numbers section in the Configuration > General > Unit Parameters page to verify that all the IDU’s are using the same hardware versions. Check the software versions in the Versions table in the Configuration > General > Versions > IDU page to verify that all the IDU’s are using the same software versions. Check the license compatibility in the License features section in the Configuration > General > Licensing page to verify that all the IDU’s are using the same license. Check the IP Addresses Local IP configuration section in the Configuration > General > Management page to verify that each IDU has a unique IP Address and that all addresses are within the same subnet. Check the Type field in the Management Ports section in the Configuration > General > Management page to verify that each IDU has the same Management mode (In-Band or Out-of-Band). For In-Band management, ensure that all IDUs have the same In-Band VID. To configure 1+1 HSB protection in a standalone system: 1 Disconnect all cables (radio, traffic, wayside, and protection), except for the Management cable, from the units. 2 Turn on the Active unit. 3 Connect a management cable to the management interface of the Active IDU, or configure the IDU via terminal: i Install the license (if necessary). Refer to Loading a New License Key on page 77. ii Upgrade the software (if necessary). Refer to Upgrading the IDU Software Version on page 62. iii Configure the radio parameters. Refer to Configuring the Radio Parameters on page 152. iv Configure the Ethernet Application Type to set the Switching mode. Possible values are Smart Pipe, Managed Switch, and Metro Switch. Refer to Configuring the Ethernet Switching Mode on page 97. 4 Configure the required Management Type (Out-of-Band or In-Band). If you use In-Band management, configure a management VLAN ID. Refer to Configuring Unit Management on page 84. 5 For the Active IDU, set Protection Admin to: 1+1 HSB. At this point, management might be lost for approximately 50 seconds. 6 For the Active IDU, set Protection Lockout to: On. 7 Turn on the Standby IDU. 8 Connect a management cable to the management interface of the Standby IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 239 of 577 9 Perform the following configuration steps on the Standby IDU: i Install the license (if necessary). Refer to Loading a New License Key on page 77. ii Upgrade the software (if necessary). Refer to Upgrading the IDU Software Version on page 62. iii Configure the Ethernet Application Type to the same Switching mode as the Active IDU. Possible values are Smart Pipe, Managed Switch, and Metro Switch. Refer to Configuring the Ethernet Switching Mode on page 97. iv If you are using Metro Switch, set its Ether Type to the same value as the Active unit’s Ether Type. Possible values are: 0x88a8, 0x8100, 0x9100 and 0x9200. v Configure the Standby IDU to the same Management Type as the Active IDU (Out-of-Band or In-Band). If you use In-Band management, configure a management VLAN ID. Refer to Configuring Unit Management on page 84. 10 For the Standby IDU, set Protection Admin to: 1+1 HSB. At this point, both units should start communicating, and transmitting their local MAC and IP addresses to each other. 11 To verify communication between the two IDUs, check both IDUs to ensure that there is no Mate Communication Failure alarm. If this alarm is active on either IDU, installation of 1+1 HSB Protection has failed. 12 The management cable can be disconnected from the Standby IDU. Use a Y splitter cable or the Protection Panel to connect both units’ management interfaces. 13 Check if there is a Configuration Mismatch alarm on either IDU. This alarm indicates that the IDUs do not have an identical configuration. If a Configuration Mismatch alarm is raised: i Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 14 Connect all traffic, radio, and wayside cables to both units (via the protection panel, or via splitters). 15 Configure the Ethernet and E1/DS1 interfaces to Enable. 16 Perform a Copy to Mate operation to ensure that both IDUs remain synchronized: i Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 17 Disable Protection Lockout and verify that there are no alarms on either IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 240 of 577 18 Verify that the IDU connected to the RFU fed by the lower attenuation channel of the RF coupler is in Active mode. If this IDU is in Standby mode, enter a Manual Switch command. Note: The same procedure should be performed on the remote end while installing the radio. 14.2.3 Replacing the Standby Unit in a 1+1 HSB Standalone System 1 On the Active IDU, set Protection Lockout to: On. 2 Disconnect all cables, including management, Ethernet, and radio cables, from the Standby unit. 3 Remove the unit. 4 Insert the new Standby IDU in place of the old Standby IDU. 5 Connect only the management cable and/or the serial COM to the Standby unit. Note: It is important to connect a separate management cable to the Standby IDU, rather than managing it via the Y splitter. Radio and other line interfaces should not be connected at this stage. 6 Set the IP address and Subnet address of the new Standby IDU. You can do this via the CLI or the Web EMS. 7 Configure the new Standby IDU as follows: i Install the license (if necessary). Refer to Loading a New License Key on page 77. ii Upgrade to the software of the new Standby unit to match the software version of the Active unit. Refer to Upgrading the IDU Software Version on page 62. iii Configure the Ethernet Application Type to the same Switching mode as the Active IDU. Possible values are Smart Pipe, Managed Switch, and Metro Switch. Refer to Configuring the Ethernet Switching Mode on page 97. iv If you are using Metro Switch, set its Ether Type to the same value as the Active unit’s Ether Type. Possible values are: 0x88a8, 0x8100, 0x9100, and 0x9200. 8 Configure the Standby IDU to the same Management Type as the Active IDU (Out-of-Band or In-Band). If you use In-Band management, configure a management VLAN ID. Refer to Configuring Unit Management on page 84. 9 For the Standby IDU, set Protection Admin to: 1+1 HSB. At this point, both IDUs should start communicating, and transmitting their local MAC address and IP address to each other. 10 To verify communication between the two IDUs, check both IDUs to ensure that there is no Mate Communication Failure alarm. If this alarm is active on either IDU, installation of 1+1 HSB Protection has failed. Disconnect the management cable from the new Standby unit. 11 Use a Y Ethernet splitter cable or the Protection Panel to connect both units’ management interfaces. 12 Verify that the new Standby IDU is set to Standby mode. 13 Connect all traffic, RFU, and WSC cables to the new Standby IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 241 of 577 14 Check if there is a Configuration Mismatch alarm on either IDU. This alarm indicates that the IDUs do not have an identical configuration. To remedy this: i Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 15 Verify that there are no alarms on either IDU. 16 For the Active IDU, set Protection Lockout to: Off. 14.2.4 Configuring 1+1 HSB Protection in a New Nodal System For a 1+1 configuration, in a nodal system, the IDUs are connected by the backplane of the nodal enclosure. Perform the following preliminary steps: Check the serial/part numbers section on the Configuration > General > Unit parameters page to verify that all the IDU’s are using the same hardware versions. Check the software versions in the Versions table on the Configuration > General > Versions > IDU page to verify that all the IDU’s are using the same software versions. Check the license compatibility in the License features section on the Configuration > General > Licensing page to verify that all the IDU’s are using the same license. Check the IP Addresses Local IP configuration section on the Configuration > General > Management page to verify that each IDU has a unique IP Address and that all addresses are within the same subnet. Check the Type field in the Management Ports section on the Configuration > General > Management page to verify that each IDU has the same Management mode (In band or OOB). For In-Band management, ensure that all IDUs have the same In-Band VID. To configure the protection: 1 Disconnect all cables (radio, traffic, wayside, and protection), except for the Management cable, from the units. 2 Turn on the Active IDU. 3 Connect a management cable to the management interface of the Active IDU, or configure the IDU via a terminal. 4 Perform the following configuration steps on the Active IDU: i Install the license (if necessary). Refer to Loading a New License Key on page 77. ii Upgrade the software (if necessary). Refer to Upgrading the IDU Software Version on page 62. iii Configure the radio parameters. Refer to Configuring the Radio Parameters on page 152. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 242 of 577 iv Configure the Ethernet Application Type to set the Switching mode. Possible values are Smart Pipe, Managed Switch, and Metro Switch. Refer to Configuring the Ethernet Switching Mode on page 97. v Configure the required Management Type (Out-of-Band or In-Band). If In-Band management is used, configure a management VLAN ID. Refer to Configuring Unit Management on page 84. 5 For the Active IDU, set Protection Admin to: 1+1 HSB. At this point, management might be lost for approximately 50 seconds. 6 For the Active IDU, set Protection Lockout to: On. Note: Do not insert the Standby unit into its slot or turn its power on at this point. 7 Connect a management cable to the management interface of the Standby IDU. 8 Perform the following configuration steps on the Standby IDU: i Install the license (if necessary). Refer to Loading a New License Key on page 77. ii Upgrade the software (if necessary). Refer to Upgrading the IDU Software Version on page 62. iii Configure the Ethernet Application Type to the same Switching mode as the Active IDU. Possible values are Smart Pipe, Managed Switch, and Metro Switch. Refer to Configuring the Ethernet Switching Mode on page 97. iv Configure the Management Type to the same Management Type as the Active IDU (Out-of-Band or In-Band). If In-Band is used, configure a management VLAN ID. Refer to Configuring Unit Management on page 84. 9 For the Standby IDU, set Protection Admin to: 1+1 HSB. 10 Turn off the power of the Standby IDU. 11 Insert the Standby IDU into its slot in the nodal enclosure. 12 Turn the power of the Standby IDU on. At this point, both IDUs should start communicating, and transmitting their local MAC address and IP address to each other. 13 To verify communication between the two IDUs, check both IDUs to ensure that there is no Mate Communication Failure alarm. If this alarm is active on either IDU, installation of 1+1 HSB Protection has failed. 14 The management cable can be disconnected from the Standby IDU. Use a Y splitter cable or the Protection Panel to connect both units’ management interfaces. 15 Check if there is a Configuration Mismatch alarm on either IDU. This alarm indicates that the IDUs do not have an identical configuration. To remedy this: i Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 16 Connect all traffic, radio, and wayside cables to both units via the Protection Panel, or via splitters. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 243 of 577 17 Set the Ethernet and E1/DS1 interfaces to Enable. 18 Perform an additional Copy-to-Mate operation to ensure that both IDUs remain synchronized: i Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 19 For the Active IDU, set Protection Lockout to: Off. 20 Verify that there are no alarms on either IDU. 21 Verify that the IDU connected to the RFU fed by the lower attenuation channel of the RF coupler is in Active mode. If this IDU is in Standby mode, enter a Manual switch command. Note: The same procedure should be performed on the remote end, while installing the radio. 14.2.5 Replacing the Standby Unit in a 1+1 HSB Nodal System 1 On the Active IDU, set Protection Lockout to: On. 2 Power down the Standby unit (the unit that needs to be replaced). Note: Make sure not to power-down or otherwise re-configure the Active unit to ensure that live traffic is not interrupted. 3 Disconnect all cables from stand-by unit, including management, Ethernet and radio cables. 4 Remove the Standby IDU. 5 Turn on the power on the new Standby IDU, but do not insert it into the nodal enclosure at this point. 6 Connect only the Management cable and/or serial COM (craft terminal) to the new Standby IDU. Note: It is important to connect a separate management cable to the Standby IDU, rather than managing it via the Protection Panel or a Y splitter. Radio and other line interfaces should not be connected at this stage. Set the IP address and Subnet address of the new Standby IDU using the CLI or the Web EMS. 7 Perform the following configuration steps on the Standby IDU: i Install the license (if necessary). Refer to Loading a New License Key on page 77. ii Upgrade the software version of the Standby IDU to the same version used in the Active IDU. Refer to Upgrading the IDU Software Version on page 62. iii Configure the Ethernet Application Type to the same Switching mode as the Active IDU. Possible values are Smart Pipe, Managed Switch, and Metro Switch. Refer to Configuring the Ethernet Switching Mode on page 97. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 244 of 577 iv Configure the Standby IDU to the same Management Type as the Active IDU (Out-of-Band or In-Band). If In-Band management is used, configure a management VLAN ID. Refer to Configuring Unit Management on page 84. v For the Standby IDU, set Protection Admin to: 1+1 HSB. 8 Turn off the power of the new Standby IDU. 9 Insert the Standby IDU into its slot in the nodal enclosure. 10 Turn the power of the Standby IDU on. At this point, both IDUs should start communicating, transmitting their local MAC address and IP address to each other. 11 To verify communication between the two IDUs, check both IDUs to ensure that there is no Mate Communication Failure alarm. If this alarm is active on either IDU, installation of 1+1 HSB Protection has failed. 12 The management cable can be disconnected from the Standby unit. Use a Y splitter cable or the Protection Panel to connect both units’ management interfaces. 13 Verify that new Standby IDU is set to Standby mode. 14 Connect all traffic, radio, and WSC cables to the new Standby IDU. 15 Check if there is a Configuration Mismatch alarm on either IDU. This alarm indicates that the IDUs do not have an identical configuration. To remedy this: i Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 16 For the Active IDU, set Protection Lockout to: Off. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 245 of 577 14.3 Configuring a 2+0 System This section includes: 2+0 Overview Configuring 2+0 Protection Incompatible features 1+1 HSB 2+2 HSB Space and frequency diversity Related topics Configuring Multi-Radio Configuring XPIC FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 246 of 577 14.3.1 2+0 Overview You can set up an IP-10G or IP-10E system in a 2+0 configuration. You can use the XPIC, Multi-Radio, or both in a 2+0 configuration. In a 2+0 configuration, each RFU is connected to an IDU via the IDU’s RFU interface. While a standard 2+0 Multi-Radio configuration protects against radio malfunction or failure, a 2+0 Multi-Radio configuration with line protection adds protection for the line interfaces, guaranteeing that there will be no single points of failure. Multi-Radio with line protection is only available for adjacent pairs of IDUs in a nodal enclosure (slots 1 and 2, 3 and 4, 5 and 6). Selecting 2+0 HSB automatically configures Multi-Radio for the selected pair of units. The active unit is the IDU that currently holds the line interfaces. This unit will be the Multi-Radio master unit. 2+0 HSB radio blocking criteria consists of: Minimum ACM point and enable/disable Radio Excessive BER enable/disable Radio Signal degrade enable/disable Block/unblock traffic from radio link 2+0 HSB automatic state propagation criteria consists of: Radio LOF Excessive BER FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 247 of 577 14.3.2 Configuring 2+0 Protection 1 Select Configuration > Protection >Protection Parameters. The Protection Parameters page is displayed. 2. In the Protection configuration section: i In the Protection admin field, select 2+0 HSB. ii If no mate is associated with the unit, the Protection mode field will be read-only, and the mode will be set to Active. 3. Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 248 of 577 14.4 Configuring 2+2 HSB This section includes 2+2 Overview Deploying a 2+2 Configuration Configuring 2+2 HSB Protection XPIC and 2+2 Protection Replacing Units in a 2+2 Configuration This feature requires: Nodal configuration This feature cannot be used with: 2+0 Multi-Radio with line protection Space and Frequency Diversity FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 249 of 577 14.4.1 2+2 Overview 2+2 HSB protection provides full redundancy between two pairs of IDUs. Each pair is a 2+0 link, which can be configured for XPIC or in different frequencies. If there is a failure in one of these pairs, the other pair takes over. A 2+2 protection scheme must be implemented by means of a nodal configuration. Each pair is inserted into its own main nodal enclosure, with a protection cable to connect the main IDUs (in slot 1) in each pair. Protection is performed between the pairs. At any given time, one pair is active and the other is on standby. The Active IDUs transmit to the line and radio, and the standby outputs of the IDUs are set to mute. A 2+2 configuration scheme is only possible between units in a main nodal enclosure (slots 1 and 2). Extension nodal enclosures (slots 3 – 6) are not supported in a 2+2 configuration. In a 2+2 configuration, the lower IDU in each pair is a master unit, and does the following: Sends and receives traffic to and from the user through line interfaces. Receives protection information from the slave unit in the pair. Sends and receives protection information to and from a second master unit. At any one time, one master unit is the decision unit, and the other is the report unit. In a 2+2 configuration, the upper IDU in each pair is a slave unit, and does the following: Sends and receives traffic through line interfaces. Sends protection information to the master unit in the pair. Slave units always behave as report units. In other words, they are told by the master unit whether to be in active or standby mode. 2+2 operation is similar to 1+1, as follows: Locking, forcing protection is done from master units only Copy-to-Mate operations are available separately in master units and slave units. The same criteria (interfaces LOS, LOC, LOF) are monitored and compared between active and standby units, with the comparison carried out by master units. All enabled interfaces of all four IDUs are monitored. A missing slave unit is interpreted as LOS in its interfaces. A missing master causes a No Mate condition. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 250 of 577 14.4.2 Deploying a 2+2 Configuration In order to deploy a 2+2 configuration, insert the two IDU pairs into separate main nodal enclosures, and connect a protection (RJ-45) cable between the lower IDUs (slot #1) using the protection connector on the front panel. Fast Ethernet, TDM, and optical SFPs must be split between both lower units and between both upper units. There are three configuration options: protection disabled, 1+1 protection, and 2+2 protection. The configuration is separate in each of the four IDUs, and you must configure 2+2 in all four IDUs. In a 2+2 configuration, a protection cable must be connected between the two nodes via the Protection interface (RJ45). All four IDUs in a 2+2 configuration must be the same hardware type (part number) and must be configured to 2+2 protection mode. In addition, both master IDUs need to comply with the following requirements (as in a 1+1 configuration): Same Ethernet switch application (Smart Pipe, Managed Switch, or Metro Switch). Same management type (In-Band or Out-of-Band). Same In-Band VLAN. This VLAN may not be used for traffic. Different IP addresses within the same subnet. 2+2 external protection can work with or without XPIC, and with or without Multi-Radio. In particular, in this case, all four IDUs must be configured with the same script. Note that changing the script and radio frequencies in the lower IDU will be copied automatically to the upper IDU. Note: If you are switching from 1+1 to 2+2 configuration, you must first set Protection admin to Disable. For additional information: Configuring Multi-Radio Configuring XPIC FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 251 of 577 14.4.3 Configuring 2+2 HSB Protection 1 Select Configuration > Protection > Protection Parameters. The Protection Parameters page opens. 2. In the Protection configuration section: i In the Protection admin field, select 2+2 HSB. ii If no mate is associated with the unit, the Protection mode field will be read-only, and the mode will be set to Active. 3. Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 252 of 577 14.4.4 XPIC and 2+2 Protection Related topics Configuring XPIC XPIC Recovery Mechanism The XPIC recovery mechanism is disabled in a 2+2 HSB configuration. The reason for this is that in case of a failure in a link, the system must switch to the standby pair instead of attempting to recover the link, as in 2+0 XPIC. Additionally, in order to assure that the conditions for XPIC exist (in particular, having the same radio script and frequencies), the following mechanisms are active in a 2+2 XPIC configuration: The following parameters can be changed only in the master units. The changes are implemented in the corresponding slave units automatically: Radio script Radio TX frequency Radio RX frequency If the change failed to be implemented in the slave unit for any reason, the change in the master unit is rolled back, and an error message is displayed. For addition information: Configuring XPIC Specifying Active and Standby Mode Configuring Switchover Criteria Configuring IP Addresses FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 253 of 577 14.4.5 Replacing Units in a 2+2 Configuration To replace a slave unit: 1 On the Master unit that is paired with the Slave unit you want to replace, set Protection Lockout to: On. 2 Insert the new Slave unit. 3 Turn on the power on the new Slave unit. 4 For the new Slave unit, set Protection Admin to: 2+2 HSB. i On the Master unit, perform a Copy to Mate operation to ensure that both IDUs remain synchronized: Enter a Copy to Mate command on the Active IDU. This copies the configuration of the Active IDU to the Standby IDU. ii Perform a Cold Reset on the Standby IDU. When the Standby IDU comes back online, its configuration should be identical to that of the Active IDU, and the Configuration Mismatch alarm should be cleared on both IDUs. 5 Connect the RFU to the relevant Ethernet, and PDH/SDH Y-cables/fibers. To replace a standby master unit: 1. On the Standby Master unit, set Protection Lockout to: On. 2. Set the new IDU to default configuration while it is in standalone mode (i.e., before inserting the IDU into the nodal enclosure). 3. Perform a Cold Reset on the new Master unit.. 4. Configure the new Standby Master unit to the same Management Type as the other IDUs in the system (Out-of-Band or In-Band). If you use In-Band management, configure the same management VLAN ID as the other IDUs in the system. 5. Insert the new Standby Master unit into Slot 1 of the Standby nodal enclosure. 6. Turn on the power on the new Standby Master unit. 7. Connect the protection cable between the active master and the standby master units. 8. For the new Standby Master unit, set Protection Admin to: 2+2 HSB. 9. On the Master unit, perform a Copy to Mate operation to ensure that both IDUs remain synchronized. 10. Connect the RFU to the relevant Ethernet and PDH/SDH Y-cables/fibers. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 254 of 577 14.5 Specifying Active and Standby Mode If a mate unit is configured, you can specify which unit is the active unit. To specify the protection mode: 1 Select Configuration > Protection >Protection parameters. 2 In the Protection Configuration section, in the Protection mode field, select Active or Standby. If no mate is associated yet with the unit, the Protection mode field will be read-only, and the mode will be set to Active. 3 Click Apply to modify the protection mode. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 255 of 577 14.6 Configuring Switchover Criteria In the Protection parameters page, you can specify the protection switchover criteria. To disable protection switchover: 1 Select Configuration > Protection >Protection Parameters. 2 In the Protection Commands section, select On or Off from the Protection lockout drop down list to enable or disable protection lockout. To force a protection switch: 1 Select Configuration > Protection >Protection parameters. 2 In the Protection Commands section, in the Protection force switch field, select On to force a protection switchover and freeze the protection state. To manually switch protection: 1 Select Configuration > Protection > Protection parameters. In the Protection Commands section: 1 Click Manual switch to issue a switchover that will take affect when no other protection related alarms are raised. To enable radio excessive BER switching: 1 Select Configuration > Protection > Protection parameters. 2 In the Protection Switch Criteria section Enable forced switchovers for specific types of alarms. i Radio excessive BER – Select Enable to initiate a switchover when a radio excessive BER alarm is raised. This option is only displayed when the MRMC script is regular or ACM is running in Fixed mode. ii External alarm #1 – Select Enable to initiate a switchover when external alarm #1 is raised. Note: Since multi-radio protects against radio channel failure by blocking the defective radio, in 2+0 HSB, radio failure or excessive BER will not cause a protection switchover. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 256 of 577 14.7 Viewing Mate Parameters The Protection parameters page displays the mate unit’s IP and MAC addresses, and provides a link to open the mate unit management system. To specify the mate unit: 1 Select Configuration > Protection > Protection Parameters. In the Mate Parameters section: Mate IP address - Indicates the IP address of the mate unit. Mate MAC address - Indicates the MAC address of the mate unit. To open the mate unit’s management system: 1 Click Open mate. To copy the main unit’s configuration settings to the mate unit: 1 Select Configuration > Protection > Protection Parameters. 2 Click Copy to Mate. In the Protection Commands section: Copy to mate status - Indicates the status of the Copy to Mate command. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 257 of 577 14.8 Configuring Multi-Unit LAG Multi Unit LAG provides Ethernet line protection for the Gigabit Ethernet (GbE) electrical and optical interfaces. An external switch is connected to the HSB protected IP-10 link by means of two static Link Aggregation (LAG) ports. The external switch can be another IP-10 IDU or any third party equipment that supports static LAG protocol. Multi-Unit LAG is supported with any of the following protection features: 1+1 HSB 1+1 Space or Frequency Diversity 2+2 HSB 2+0 Multi Radio with Line Protection The following are some important Multi-Unit LAG configuration notes: Multi-Unit LAG is only supported in Smart Pipe mode. Multi-Unit LAG is supported in both standalone and nodal configurations. Multi-Unit LAG supports both electrical and optical interfaces. In Multi-Unit LAG, an external switch is connected to the protected IP-10 link by means of two static Link Aggregation (LAG) ports. The external switch can be another IP-10G or IP-10E IDU or any third party equipment that supports static LAG protocol. External switch Ethernet port 1 Ethernet port 2 (mirroring) active standby LAG Ethernet port 2 (mirroring) Ethernet port 1 The first LAG port of the external switch is connected to Ethernet port 1 of the active IP-10G/E unit and the second LAG port is connected to Ethernet port 1 of the standby IP-10G/E unit. In the 2+0 uplink direction (toward the radio), the external switch splits the packets between the two LAG interfaces, which are connected to the primary and the secondary IP-10G/E units. Ethernet packets received from the LAG interface in the active IP-10G/E unit are sent to the radio. To configure Multi-Unit LAG: 1 Enable protection. Each of the IP-10G/E protection features can work with Multi-Unit LAG. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 258 of 577 2 Enable static LAG on the External switch. 3 Connect the External switch LAG interfaces to port 1 of the active and standby IP-10 units respectively. 4 Connect Ethernet port 2 of the active IP-10G/E unit to the Ethernet port 2 of the standby IP-10 unit. 5 Select Configuration > Protection> Multi-Unit LAG to open the Multi- Unit LAG page. 6 In the Multi-Unit LAG admin section select Enable and click Apply to Enable Multi-Unit LAG in the active IP-10 unit. Upon enabling, each IDU will perform the following configurations automatically in both active and standby units: Enable port 2. Set a LAG on port 1 and port 2. Enable mirroring. 7 Upon disabling Multi-Unit LAG, the configuration implemented in Step 6 will be disabled automatically. In 2+2 HSB configuration, Multi-Unit LAG can be activated between slot 1 of the active nodal enclosure and slot 1 of the standby nodal enclosure and/or between slot 2 of the active nodal enclosure and slot 2 of the standby nodal enclosure, respectively. Note: To improve protection switchover delays, it is recommended to disable auto-negotiation and automatic state propagation on all of the interfaces. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 259 of 577 15. Configuring Diversity This chapter includes Diversity Overview Configuring 1+1 Space Diversity Configuring 1+1 Frequency Diversity (BBS) Configuring IF Combining Diversity FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 260 of 577 15.1 Diversity Overview Space Diversity and Frequency Diversity are common methods to negate the effects of fading caused by multipath phenomena. Space Diversity is implemented by placing two separate antennas at a distance from one another that makes it statistically likely that if one antenna suffers from fading caused by signal reflection, the other antenna will continue to receive a viable signal. Frequency Diversity is implemented by configuring two RFUs to separate frequencies. The IDU selects and transmits the better signal. IP-10G and IP-10E offer Frequency Diversity and two methods of Space Diversity: Baseband Switching (BBS) Frequency and Space Diversity – Each IDU receives a separate signal from a separate antenna. Each IDU compares each of the received signals, and enables the bitstream coming from the receiver with the best signal. Switchover is errorless (hitless switching). IF Combining (IFC) Space Diversity – Signals from two separate antennas are combined in phase with each other to maximize the signal to noise ratio. IF Combining is performed in the RFU. Note: Frequency and Space Diversity configurations offer the option of Ethernet line protection using Multi-Unit LAG. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 261 of 577 15.2 Configuring 1+1 Space Diversity (BBS) This feature requires: Two antennas Two RFUs 1+1 HSB configuration Nodal configuration This feature cannot be used with the following: ACM Multi-Radio 2+0 Multi-Radio with IDU and Line Protection BBS Space Diversity requires a 1+1 configuration in which there are two IDUs and two RFUs protecting each other at both ends of the link. In the event of IDU failure, Space Diversity is lost until recovery, but the system remains protected through the ordinary switchover mechanism. For BBS Space Diversity, the antennas must be separated by approximately 10 to 20 meters. In addition, 1+1 Protection must be enabled. To configure 1+1 Space Diversity: 1 Select Configuration > Protection > Radio Diversity. The Radio Diversity page opens. 2 In the Radio Diversity section, in the Radio diversity type field, select Space diversity. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 262 of 577 15.3 Configuring 1+1 Frequency Diversity (BBS) This feature requires: Two antennas Two RFUs 1+1 HSB configuration Nodal configuration This feature cannot be used with the following: ACM Multi-Radio 2+0 Multi-Radio with IDU and Line Protection BBS Frequency Diversity requires a 1+1 configuration in which there are two IDUs and two RFUs protecting each other at both ends of the link. In the event of IDU failure, Frequency Diversity is lost until recovery, but the system remains protected through the ordinary switchover mechanism. In frequency diversity, ATPC and Green mode can be enabled on each RFU independently. You can enable and disable ATPC and Green mode, and can set thresholds on each IDU independently. Since radio channel fading may have a different impact on each frequency, it is recommended to allocate different fade margins for each frequency. For BBS Frequency Diversity, 1+1 Protection must be enabled. To configure 1+1 Frequency Diversity: 1 Select Configuration > Protection >Radio Diversity. The Radio Diversity page opens. 2 In the Radio Diversity section in the Radio diversity type field, select Frequency diversity. 3 Click Apply. Configurable options after enabling frequency diversity: Frequency diversity enabled/disabled (to be operational, 1+1 HSB must be enabled as well) Revertive mode enable/disable Primary radio for revertive switches Revertive timer Switching commands Force to radio Manual switch Clear switch counter command FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 263 of 577 15.4 Configuring IF Combining Diversity This feature requires: Dual-receiver RFU (FibeAir 1500HP) The RFU receives and processes both signals, and combines them into a single, optimized signal. The IFC mechanism gains up to 2.5 dB in system gain. Note: 1500 HP (11 GHz) 40 MHz bandwidth does not support IF Combining. For this frequency, space diversity is only available via BBS. 1+0 (IFC - IF combining) is a feature for configurations that use a single RFU- HP with two antennas, two Rx ports and a single IDU. The selected signal line output is based upon the Rx signal at the RFU. 1500 HP (11 GHz) 40 MHz bandwidth does not support IF Combining. When enabled, IF Combining parameters are located at the bottom of the Radio Parameters window. To configure IF Combining diversity: 1 Select Configuration > Radio > Radio parameters. 2 In the Configuration parameters section, select Enable or Disable from the Radio IF interface drop down list. Note: Changing the Radio IF interface requires a system reset. The Radio IF operational status field displays the current status of the radio interface. 3 In the RFU mode field in the IF Combining Parameters section, select Combined. 4 In the RFU mode field select Main, Diversity, or Combined. Main - Only the main antenna signal is selected. Diversity - Only the diversity antenna signal is selected. Combined - The best signal from both antennas is selected. Note: To use Combined mode, you must perform delay calibration. 5 Select which antenna is the source for the external connector. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 264 of 577 6 In the RSL connector source field, select either Main or Diversity. Main - The main antenna is selected. Diversity - The diversity antenna is selected. 7 For Manual delay calibration, in the Delay calibration field, enter the number of nanoseconds to delay between the main and diversity signals. Note: Manual delay is used only for Combined mode. 8 For Automatic delay calibration, click Calibrate. The system automatically calibrates the required delay between the signals from the main and diversity antennas. The Automatic delay calibration field displays the system status of the Automatic Delay Calibration feature. Success –Indicates that the system has successfully calibrated the signal delay Failure –Indicates that the system cannot automatically calibrate the signal delay. No action –Indicates that the system has not performed an automatic delay calibration. Note: Automatic delay calibration can only be performed when the system is error-free and there are no negative weather conditions. The following are read-only fields: Rx level diversity – Indicates the Rx level of the diversity antenna. Rx level combined – Indicates the Rx level of the combined signals. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 265 of 577 16. Configuring Multi-Radio This chapter includes Configuring 2+0 Multi-Radio Configuring 2+0 Multi-Radio with Line Protection FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 266 of 577 16.1 Configuring 2+0 Multi-Radio This feature requires: Nodal configuration This feature cannot be used with: 1+1 HSB BBS Space Diversity BBS Frequency Diversity Multi-Radio enables two separate radio links to be shared by a single Ethernet port. Multi-Radio can be used in 2+0 and 2+2 configurations. In a 2+0 Multi- Radio configuration, the IDUs perform in master and slave mode in which each Multi-Radio channel can carry up to 500 Mbps, resulting in a total 1 Gbps capacity. Because the Multi Radio interface uses the nodal backplane, a nodal configuration is required for Multi Radio. Like XPIC, IDUs in Multi-Radio mode can be placed inside a main node or extension node in any of the following slots: 1 and 2 (main node), 3 and 4 (extension node), and 5 and 6 (second extension node). Slot 1 is the bottom slot in the main node. Ethernet traffic should be connected only to the lower IDU in a Multi-Radio couple (slots 1, 3, or 5). TDM traffic can be connected to either slot. Multi-Radio feature is applicable for Ethernet data only. For TDM, each link remains separate, and users can decide to configure trails to either radio (or both, by using SNCP or ABR). Multi Radio can operate with both XPIC and ACM, and with any switching mode such as Smart Pipe, Managed Switch, and Metro Switch. Multi Radio requires that every IDU in the system be configured with Multi Radio Enabled. Each unit must also use the same script and the same hardware version. Multi-Radio configuration options are only displayed after Multi-Radio is enabled. To enable or disable Multi-Radio: 1 Select Configuration > Radio > Radio Parameters. 2 In the Multi radio section, in the Multi Radio admin field, select Enable, or Disable. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 267 of 577 16.1.1 Multi Radio Traffic Blocking Since traffic is distributed between both carriers at layer 1 level, a failure in one of the radio links may cause all Ethernet frames to be affected. Therefore, Multi-Radio take steps to ensure graceful degradation in the case of a failure. You can configure a link to be blocked, so that the transmitter does not distribute data to this link and the receiver ignores it when combining. By default, blocking is disabled. To enable traffic blocking: 1 Select Configuration > Radio > Radio Parameters. 2 To enable the traffic blocking for either slot#1 or slot#2, in the Multi-Radio section, select On for the corresponding slot field. All traffic is then sent to the radio interface in the other slot. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 268 of 577 16.1.2 Setting Multi-Radio Thresholds You can configure Multi-Radio to shut down links when they drop below configured thresholds. To configure Multi-Radio thresholds: 1 Select Configuration > Radio > Radio parameters. 2 To enable or disable shutting down the link if it drops below the signal degrade threshold, in the Multi radio section in the Signal degrade admin field, select Enable or Disable. 3 To enable or disable shutting down the link if it drops below the Excessive BER threshold, in the Excessive ber admin field, select Enable or Disable 4 Click Apply to save your settings. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 269 of 577 16.2 Configuring 2+0 Multi-Radio with Line Protection This feature requires: Nodal configuration This feature cannot be used with: 1+1 HSB BBS Space Diversity BBS Frequency Diversity Another Multi-Radio option is 2+0 with Line Protection. 2+0 Multi-Radio with line protection supplies additional protection for the line interfaces, guaranteeing no single point of failure. In case of failure of any line interface, a protection switch is initiated. Note: 2+0 Multi-Radio with Line Protection cannot be used with other protection configurations (1+1 HSB and 2+2 HSB). In the case of Multi-Radio 2+0 with line protection every IDU in the system must be configured with 2+0 with line protection enabled. As with ordinary Multi-Radio, each unit must use the same script and the same hardware version. To configure 2+ 0 Multi-Radio with Line Protection: 1 Select Configuration > Protection >Protection Parameters. The Protection Parameters page is displayed. 2 In the Protection admin field, select 2+0 with line protection. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 270 of 577 17. Configuring XPIC This chapter includes Conditions for XPIC Configuring the Antenna and RFU for XPIC Displaying XPI Values This feature requires: 2+0 or 2+2 HSB configuration Nodal configuration Related topics XPIC and 2+2 Protection XPIC Recovery Mechanism Cross Polarization Interference Canceller (XPIC) is a feature that enables two radio carriers to use the same frequency with a polarity separation between them. Since they will never be completely orthogonal, some signal cancelation is required. In addition, XPIC includes an automatic recovery mechanism that ensures that if one carrier fails, or a false signal is received, the mate carrier will not be affected. This mechanism also assures that when the failure is cleared, both carriers will be operational. XPIC can be used in a 2+0 or 2+2 configuration. XPIC can be, but does not have to be, used in conjunction with Multi-Radio. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 271 of 577 17.1 Conditions for XPIC XPIC is achieved using two IDUs inserted in a main nodal enclosure. One IDU is used for the horizontal polarization and the other is used for the vertical polarization. XPIC IDUs can be placed inside a main node or extension node in any of the following slots: 1 and 2 (main node), 3 and 4 (extension node), and 5 and 6 (second extension node). Slot 1 is the bottom slot in the main node. The data of each polarization is marked by a different value, so the modem cannot lock on the signal of the mate polarization. When installing an XPIC system, each IDU and each RFU must be the same hardware type. In addition, each IDU on both sides of the link must be set to the same frequency. An appropriate alarm is raised if these requirements are not met. In order to activate XPIC, an XPIC script should be selected during initial configuration. The same script must be used in all the IDUs on both sides of the link. After changing a script, the IDU must be reset. 17.2 Configuring the Antenna and RFU for XPIC 1 Install the dual polarization antenna and point it in the direction of the other site. 2 Following alignment, verify that the link achieves its required RSL. 3 The antenna feeders may also need to be aligned (slight rotations) in order to achieve the highest XPI (in absolute value) during installation, and no less than 25dB. Refer to Displaying XPI Values on page 272. 4 Install the two RFUs on a dual polarization antenna using the appropriate mounting kit, and mark the RFUs as V. and H. respectively. 17.2.1 IDU-RFU Cable Installation 1 Install two cables between the RFUs and the IDU. Note that the cable length difference should not exceed 10 meters. 2 Mark the cables with V. and H. respectively and connect them respectively to the IDU and RFU. 3 It is recommended to connect IP-10G/E units in the lower slots of a pair (slots 1, 3, and 5) to the RFUs with vertical polarization, and the IP-10G/E units in the upper slots of a pair (slots 2,4, and 6) to the RFUs with horizontal polarization. 17.2.2 Antenna Alignment 1 Power up the lower IDU (V) on both ends of the link and configure it to the desired frequency channel, and using the XPIC script with the maximum power. 2 Align the antennas, one at a time, until the expected RSL is achieved. Make sure the RSL achieved is no more than +/-2 dB from the expected level. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 272 of 577 17.2.3 Polarization Alignment Polarization alignment is required to verify that the antenna feeds are adjusted, ensuring that the antenna XPD (Cross Polarization Discrimination) is achieved. Polarization adjustment should only be performed on one antenna. 1 Disconnect the V cable from the V RFU and connect it to the H RFU. 2 Check the RSL achieved in the H RFU and compare it to the RSL achieved by the V RFU. 3 Verify that the XPI (Cross Polarization Interference) is at least 25dB where: sites. both at used ons polarizati orthogonal with RSL Link RSL sites. both at used on polarizati same with the RSL Link RSL XPOL POL XPOL POL RSL RSL XPI 4 If the XPI is less than 25dB, adjust the feed polarization by opening the polarization screw and gently rotating the feed to minimize the RSLXPOL. Note: Polarization alignment is not always possible since the RSLXPOL might fall below the sensitivity threshold of the RFU. 17.3 Displaying XPI Values The current XPI value can be displayed in the Web EMS and the CLI (the value is valid only when the modem is locked on a signal). Using CLI, enter the command xpi. Using Web-Based Management: To view the current XPI value, select Configuration > Radio > Radio Parameters from the menu bar on the left side of the main management page. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 273 of 577 Note: The XPI level field only appears if the IDU is using an XPIC script. To view XPI performance for intervals of 15 minutes or daily, select PM & Counters > Radio > XPI from the menu bar on the left side of the main management page. The XPI PM Report is displayed. XPI PM Report Note: In “clear sky” conditions, a normal XPI level is between 25 and 30dB. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 274 of 577 18. Configuring TDM Trails This chapter includes: TDM Trails Overview Viewing the Trails List Adding New Trails Activating and Reserving Trails Deleting Trails Configuring SNCP and ABR Trail Protection Configuring AIS Detection and Signaling Note: This section is not relevant for the IP-10E. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 275 of 577 18.1 TDM Trails Overview IP-10G provides the capability for the user to map any pair of interfaces in order to created TDM trails. Interfaces may be the following: E1/DS1 line ports: Ports 1-16 are available in the lower SCSI connector; ports 17-32 are available in the upper one (if a T-card is installed in the IP- 10G). VC-11/12 in STM-1 line port: Available as a T-card. Radio VCs: Each radio in the system has designated channels each of which can carry a duplex TDM signal. These channels are called VCs and in addition to the TDM signal they carry extra data used for monitoring. Note: Radio VCs are proprietary and do not conform to SDH VCs. They are terminated at line interfaces. After a trail is created: TDM traffic (E1/DS1) is exchanged between the two interfaces. Line interfaces are enabled (if no trails are assigned to them, they are disabled). The trail is monitored in order to raise indications and measure PMs. The switching fabric is located in the main unit. Therefore, a failure in this unit will cause all TDM traffic to fail unless the main unit is protected. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 276 of 577 18.2 Viewing the Trails List To view the trails list: 1 Select Configuration > Trails > TDM Trails. In the TDM Trails List table: ID – Indicates the trail ID. Description – Indicates the trail description. Interface #1 and Interface #2 – Indicate the trail end points. Alarms status – Indicates the severity of the trail’s most severe alarm. ACM priority - Indicates the priority for which trails will be dropped first from radio links when bandwidth is reduced. Operational status - Indicates whether the selected trail is Operational or Reserved. Protected – Indicates if the trail is protected. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 277 of 577 18.3 Adding New Trails To add a new trail: 1 Select Configuration > Trails > TDM Trails. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 278 of 577 2 Click Add underneath the trails list to open the Add new trail window. 3 In the Add new trail window, select the first interface for the trail. The interface can be a line (E1/DS1, STM-1/OC-3 VC-11/12, PW E1) interface or radio interface in the system that is not used by any other TDM trails. For IDUs in a 1+1 configuration, TDM trails can contain interfaces in only one of the IDUs. 4 Select the second interface. Interfaces 1 and 2 cannot be in the same radio or IDU. 5 In the Trail ID field, enter a 15-character string to identify the trail. This string cannot include spaces. 6 In the Trail description field, enter a 30-character string to describe the trail. The trail description is provided to help users identify the trail. It is not used by the system. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 279 of 577 7 Select High or Low from the ACM priority drop down list. ACM priority determines the order in which trails will be dropped from radio links when bandwidth is reduced (in ACM). 8 Select Operational or Reserved from the Reserved/Operational drop down list. Operational trails occupy bandwidth and pass traffic. Reserved trails do not occupy bandwidth and pass traffic, but they are saved in the database, and new trails cannot be configured to these interfaces. 9 To set up a secondary trail to cover the main trail if it fails, configure the trail protection options. If you chose Protected 1+1 or Protected ABR, you’ll be asked to select a third interface that will function as the end point for the secondary path. Unprotected trails are point-to-point. Protected trails allow traffic from two different paths to be chosen. i Select Protected 1+1 for an SNCP protected trail with permanent use of bandwidth in both paths. ii Select Protected ABR for an SNCP protected trail with better use of the radio capacity in the unused path. TDM trails configuration notes: Up to 180 TDM trails can be configured. A path-protected trail counts as two trails. Trails must be configured accordingly on both sides of the link. If an IDU is disconnected from the nodal enclosure and ceases to function as part of the shelf configuration, the removal will be treated as an alarm. The IDU can then function as a stand-alone unit, using a default E1/DS1 configuration. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 280 of 577 18.4 Activating and Reserving Trails To set the operational status of selected trails: 1 Select Configuration > Trails > TDM Trails. 2 In the Activate and Reserve Trails section select Operational or Reserved from the Status drop down list. 3 Click Set Selected. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 281 of 577 18.5 Deleting Trails To delete selected trails: 1 Select Configuration > Trails > TDM Trails. 2 In the TDM Trails List table: i Select the trails that you want to delete. ii Mark the checkbox corresponding to each trail that you wish to include in the delete operation. iii Click Delete Selected below the trail list. To delete all trails: 1 Select Configuration > Trails > TDM Trails. 2 Click Delete All below the trail list. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 282 of 577 18.6 Configuring SNCP and ABR Trail Protection Path-protected trails are a special case of TDM trails, in which three interfaces are configured in order to protect traffic from any failure along its end-to-end path. SNCP trails differ from unprotected trails in the roles of their interfaces: Interface 1: The end-point interface. Outgoing traffic is split between interfaces 2 and 3. Interface 2: The primary interface; it will be initially active. Interface 3: The secondary interface; it will be initially standby. Traffic will switch from the currently active interface to the standby interface in the following cases: Signal failure Note: When line interfaces (STM-1) are used along a TDM trail path, AIS detection must be enabled for SNCP to work properly. User command to force traffic to the standby interface Note: Forcing traffic will cause the selected interface to become active (even if its signal fails) until the user cancels this setting (revertive mode is not supported at this stage). To configure switch timeout for revertive protected trails 1 Select Configuration > Trails > TDM Trails. 2 In the Switch timeout for revertive protected trails section, In the Trails revertive switch timeout field, specify the number of seconds. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 283 of 577 18.7 Configuring AIS Detection and Signaling If enabled, a signal failure is generated at the corresponding trail, which will prevent the far end from receiving a signal (including trail ID indications). The trail status displays a Signal Failure message. In addition, an indication is sent to the relevant interface. This is not a system alarm, since the problem originates elsewhere in the network. To enable /disable AIS line detection: 1 Select Configuration > Interfaces > AIS. 2 In the AIS line detection admin section, select Enable or Disable. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 284 of 577 19. Configuring Synchronization This chapter includes: Synchronization Overview Configuring the Synchronization Source Configuring the Outgoing Signal Clock Configuring PRC Regenerator Mode and Direction Note: IP-10E does not support E1/DS1, STM-1/OC-3, and pseudowire, so all references to these types of lines in this chapter are only relevant to IP-10G. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 285 of 577 19.1 Synchronization Overview Frequency signals can be taken by the system from a number of different interfaces (one reference at a time). The reference frequency may also be conveyed to external equipment through different interfaces. The available interfaces for frequency distribution depend on the hardware assembly, as summarized in the following table: Hardware type Available interfaces as frequency input (reference sync source) Available interfaces as frequency output IP-10G R2 TDM trails E1/DS1 interfaces STM-1/OC-3 signal STM-1/OC-3 VC-11/12s Radio channels PW clock port Incoming PW signal E1/DS1 interfaces STM-1/OC-3 signal STM-1/OC-3 VC-11/12s Radio channels Gigabit Ethernet interfaces PW clock port Reference clock for PW signals IP-10G R3 TDM trails E1/DS1 interfaces STM-1/OC-3 signal STM-1/OC-3 VC-11/12s Radio channels Gigabit Ethernet interfaces PW clock port Incoming PW signal E1/DS1 interfaces STM-1/OC-3 signal STM-1/OC-3 VC-11/12s Radio channels Gigabit Ethernet interfaces PW clock port Reference clock for PW signals IP-10E R3 Radio channels Gigabit Ethernet interfaces Radio channels Gigabit Ethernet interfaces When using a radio channel to distribute a frequency, 2Mbps of bandwidth is used for this purpose. However the following facts mitigate the loss of bandwidth: When using TDM trails as a synchronization source (co-located mode), no additional bandwidth is taken (the 2Mbps is already used by the trail). When distributing through a network, a single channel per radio link is necessary to synchronize all the nodes in the network, regardless of their number. It is possible to configure up to eight synchronization sources in the system. At any given moment, only one of these sources is active; the clock is taken from the active source onto all other appropriately configured interfaces. Note: At this point there is support for loops and for quality indicators (SSM) in the radio interfaces only. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 286 of 577 19.2 Configuring the Synchronization Source To configure a synchronization source: 1 Select Configuration > Interfaces > Synchronization > Sync Source. The Synchronization page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 287 of 577 2 Select an interface from the displayed IDU to specify the synchronization source. A drop-down list appears to the left of the IDU representation, and the relevant fields beneath the IDU representation are automatically populated. 3 In the drop down list to the left of the IDU representation, select the exact synchronization source. For example, if you select a pseudowire interface, you can select from PW reference clock or any of the E1 pseudowire ports, as shown in the following figure. 4 Select a priority level for the selected synchronization source from the Sync source priority drop down list. Note: No two interfaces may have the same priority. 5 In the Quality field, apply a quality level to the selected source. This enables the system to select the source with the highest quality as the current synchronization source. Options are Automatic, G.811, SSU A, SSU B, or g813/8262. 6 Click Apply. 7 Optionally, to configure a synchronization source revertive timer, go to the Sync Parameters section and in the Sync source revertive timer field, specify the number of seconds before timing out a synchronization source. 8 Click Apply. At any given moment, only one of these sources is active; the clock is taken from the active source onto all other appropriately configured interfaces. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 288 of 577 The following restrictions exist for frequency distribution configuration: Synchronization source interfaces must not be assigned to a TDM trail, unless the “tdm trail” interface is used. In this case, a pre-existing trail must be configured. An interface can either be used as a synchronization source or can take its signal from the system reference, but not both, except for SDH interfaces which allow local loop timing. If no interface is configured as a synchronization source, no interfaces may take its outgoing clock from the reference. If at least one interface is currently taking its outgoing clock from the reference, the synchronization source cannot be removed. The clock taken from a line interface (E1/DS1, SDH, VC-11/12, PW E1, Ethernet) cannot be conveyed to another line interface in the same IDU. The clock taken from a radio channel cannot be conveyed to another radio channel in the same radio. In each IDU, only one line interface at the main board and only one at the T-card can take its outgoing clock from the reference clock at any given time. All other interfaces in the same board must make use of the local clock. 19.2.1 Viewing Current Synchronization Sources To view configured synchronization sources: 1 Select Configuration > Interfaces > Synchronization > Sync Source. The Synchronization page opens. In the Current Sync Sources table: # - Indicates the number of the synchronization sources. There can be up to eight synchronization sources. Valid – Indicates whether the configuration is valid. Slot Number – Indicates the slot number of the synchronization source. Interface Type – Indicates the interface type. Interface Index – Indicates the priority of the synchronization source. Quality – Indicates the synchronization source quality. Status – Indicates the status of the synchronization source. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 289 of 577 In the Sync Parameters section: Transmitted SSM value – Indicates the SSM value derived from the clock source. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 290 of 577 19.3 Configuring the Outgoing Signal Clock The Clock Source window configures the ports that output the clock source. For each type of interface, you can specify whether the clock source is based on a received sync source or the local internal IDU source. 19.3.1 Configuring Clock Sources To configure the clock source: 1 Select Configuration > Interfaces > Synchronization > Clock Source. The Clock Source page opens. 2 Click an interface in the displayed IDU to configure its clock source. 3 From the Clock source drop down list, specify the clock source for the selected interface. Options in the Clock source drop down list vary according to the selected interface: For radio interfaces, select the radio channel. For line interfaces, select the port number. For Ethernet interfaces, select Local for internal, or Sync if the clock source is received from the sync source. For STM-1 interfaces, select Internal to use the local clock source, Loop to sync between the selected interface and the output destination, Sync to use the sync source as the outgoing clock source value, and STM-1/ OC/3 VC to use one of the VC channels as the clock source value. For pseudowire interfaces, select one of the E1 ports in the PW T-Card. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 291 of 577 19.3.2 Viewing Clock Sources To view configured clock sources: 1 Select Configuration > Interfaces > Synchronization > Clock Source. The Clock Source page opens. In the Current configuration table: Interface – Indicates the type of interface. Configuration – Indicates whether the interface is configured for synchronization input or output. Clock source – Indicates the source of its outgoing signal clock. None – Indicates that a clock source has not been configured for this interface. Local clock – Causes the interface to generate its signal from a local oscillator, unrelated to the system reference frequency. Synchronization reference – Causes the interface to generate its signal from the system reference clock, which is taken from the synchronization source. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 292 of 577 19.4 Configuring PRC Regenerator Mode and Direction Regenerator mode is a special mode for reproducing PRC quality reference clock in SP application. This mode will be available only in SP applications and will be activated upon user configuration (as in IP10). The reference clock reproduction will be performed in 2 directions: from the interface to the radio and from the radio to the interface (as described in the figure below). Both operations are performed at the same time. In IP-10 R3 systems operating in Smart Pipe mode, an additional synchronization mode is available called PRC pipe regenerator mode. In this mode, frequency is transported between the GbE interfaces through the radio link. PRC pipe regenerator mode makes use of the fact that the system is acting as a simple link (so no distribution mechanism is necessary) in order to achieve the following: Improved frequency distribution performance: PRC quality No use of bandwidth for frequency distribution Simplified configuration 19.4.1 Basic Operation In PRC pipe regenerator mode, frequency is taken from the incoming GbE Ethernet signal, and used as a reference for the radio frame. On the receiver side, the radio frame frequency is used as the reference signal for the outgoing Ethernet PHY. Frequency distribution behaves in a different way for optical and electrical GbE interfaces, because of the way these interfaces are implemented: For optical interface, separate and independent frequencies are transported in each direction. For electrical interfaces, each PHY must act either as clock master or as clock slave in its own link. For this reason, frequency can only be distributed in one direction, determined by the user. PRC regenerator mode does not completely override the regular synchronization distribution, but since it makes use of the Ethernet interfaces, the following limitations apply: In PRC regenerator mode, Ethernet interfaces cannot be configured as a synchronization source for distribution. In PRC regenerator mode, Ethernet interfaces cannot be configured to take the system reference clock for their outgoing signal. Frequency distribution through the radio is independent for each mechanism and is carried out at a different layer. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 293 of 577 19.4.2 User Configuration For PRC pipe regenerator mode to work, the following is necessary: The system must be configured to Smart Pipe mode. Ethernet port #1 (GbE) must be enabled. Ethernet interfaces must not be configured as the system synchronization source. User can configure the following: PRC regenerator mode admin Direction of synchronization distribution (applicable only for electrical GbE interfaces; for optical interfaces, this parameter is ignored) Line to radio Radio to line Note: PRC regenerator mode is available only for R3 hardware releases, and can only be enabled for Smart Pipe applications. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 294 of 577 To configure PRC regenerator mode: 1 Select Configuration > Interfaces > Synchronization > Sync Source. The Sync Source page opens. 2 In the Sync source regenerator admin field, select Enable or Disable to enable or disable PRC regenerator mode. 3 In the Frequency transport direction for electrical GBE field, select Line to radio or Radio to line to specify the PRC regenerator mode direction. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 295 of 577 20. Configuring RSTP This section includes: Network Resiliency Overview Setting the xSTP Protocol Configuring Ring-Optimized RSTP Configuring Ethernet Ports to Support RSTP Configuring RSTP Priority FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 296 of 577 20.1 Network Resiliency Overview IP-10G and IP-10E support the following spanning tree Ethernet resiliency protocols: Rapid Spanning Tree Protocol (RSTP) (802.1w) Carrier Ethernet Wireless Ring-optimized RSTP (proprietary) Standard RSTP configurations are identical to those for Ring-Optimized RSTP. The two protocols differ in the following respects: Topologies supported Standard RSTP is meant to work with any mesh topology Ring-Optimized RSTP is meant for ring topologies only Interoperability Standard RSTP is fully interoperable Ring-Optimized RSTP is proprietary Performance Standard RSTP converges in up to a few seconds Ring-Optimized RSTP converges in under 200ms in most cases 20.1.1 Standard RSTP Standard RSTP is supported in both Managed Switch mode (regular VLANs) and Metro Switch mode (Provider Bridge). Provider Bridge RSTP is automatically activated when RSTP is enabled in a Metro Switch bridge. In addition, Cisco PVST proprietary address is supported. The following tables describe the behavior of provider bridge RSTP PDUs. Provider Bridge RSTP PDUs in CN Ports Spanning Tree type Destination Address Ingress Action Bridge Group Address 01-80-C2-00-00-00 Add S-Vlan tag and multicast it to all PN ports Provider Bridge Group Address 01-80-C2-00-00-08 Discard CISCO PVST 01-00-0C-CC-CC-CD Add S-Vlan tag and multicast it to all PN ports Provider Bridge RSTP PDUs in PN Ports Spanning Tree type Destination Address Ingress Action Bridge Group Address 01-80-C2-00-00-00 Add S-Vlan tag and multicast it to all the ports Provider Bridge Group Address 01-80-C2-00-00-08 Perform Ring-Optimized RSTP CISCO PVST 01-00-0C-CC-CC-CD Add S-Vlan tag and multicast it to all the ports FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 297 of 577 20.1.2 Carrier Ethernet Wireless Ring-Optimized RSTP IP-10G/E’s proprietary RSTP implementation is optimized for Carrier Ethernet wireless rings. Ring-optimized RSTP enhances the RSTP algorithm for ring topologies, accelerating the failure propagation relative to ordinary RSTP. Ring-Optimized RSTP uses the standard RSTP BPDUs: 01-80-C2-00-00-00. With IP-10G/E’s ring-optimized RSTP, failure propagation is much faster than with regular RSTP. Instead of link-by link serial propagation, the failure is propagated in parallel to all bridges. In this way, the bridges that have ports in alternate states immediately place them in the forwarding state. The ring is revertible. When the ring is set up, it is converged according to RSTP definitions. When a failure appears (e.g., LOF is raised), the ring is converged. When the failure is removed (e.g., LOF is cleared), the ring reverts back to its original state, still maintaining service disruption limitations. RSTP PDUs coming from Edge ports are discarded (and not processed or broadcasted). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 298 of 577 20.2 Setting the xSTP Protocol This feature requires: Network Resiliency license Related topics: Configuring Automatic State Propagation Loading a New License Key To set the xSTP protocol: 1 Select Configuration > Ethernet Switch> STP Protocol. The STP Protocol page opens. 2 Select RSTP or Ring RSTP. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 299 of 577 20.3 Configuring Ring-Optimized RSTP This feature requires: Network Resiliency license Managed Switch or Metro Switch mode Related topics: Configuring Automatic State Propagation Loading a New License Key This section includes: Ring RSTP Limitations Ring RSTP Supported Topologies Ring RSTP Performance Ring RSTP Management Ring RSTP Configuration Ring RSTP Installation FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 300 of 577 20.3.1 Ring RSTP Limitations Users should be aware of the following Ring RSTP limitations: Ring RSTP is a proprietary implementation of Ceragon Networks, and is not interoperable with other Ring RSTP implementations from third party vendors. Ring RSTP provides improved performance for ring topologies. For any other topology, the algorithm will converge but performance may take several seconds. Ring RSTP can be used in Managed Switch mode and Metro Switch mode. It is not available in Smart Pipe mode. Ring RSTP can be used with 1+1 HSB protection, but in some cases (change of root node) the convergence time may be above 1 second. 20.3.2 Ring RSTP Supported Topologies This section describes the IP-10G and IP-10E node configurations that can be used as part of a ring topology using Ring-Optimized RSTP. For configuration instructions for these two topologies, see Ring RSTP Configuration on page 304. Node Type A The node is connected to the ring with one radio interface (e.g., East) and one line interface (e.g., West). The node contains only one IP-10 IDU. The Radio interface is directed towards one direction (e.g., East), and one of the Gigabit interfaces (electrical or optical) is directed towards the second direction (e.g., West). The other line interfaces are in Edge mode, which means that they are user interfaces, and do not belong the ring itself. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 301 of 577 Node Type B Using two IP-10G or IP-10E IDUs, this node is connected to radios in both directions of the ring (East and West). Each IDU supports the radio in one direction. In this topology, Ring RSTP is enabled in one IDU. The other IDU operates in Smart Pipe mode. The IDUs are connected to each other using one of their Gigabit interfaces (either optical or electrical). Other line interfaces are in Edge mode. 20.3.3 Ring RSTP Performance The following failures will initiate convergence: Radio LOF Link ID mismatch Radio Excessive BER (optional) ACM profile is below a pre-determined threshold (optional) Line LOC Node cold reset (“Pipe” and/or “Switch”). Node power down (“Pipe” and/or “Switch”). xSTP port Disable/Shutdown Notes: Ring port (non-edge port) shutdown will initiate convergence, but since this is a user configuration, it is not considered a failure, and is not propagated. When the user issues a port shutdown, fast convergence should not be expected. The ring is converged in order to cope with physical layer failures. Any other failure that might disrupt data, such as interface configuration that excludes necessary VLANs will not be taken care of by Ring RSTP. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 302 of 577 The ring shall NOT converge optimally upon path cost configuration, since such a configuration might force the ring to converge into a different steady state (CQ19998). The ring acquires its steady state in a non optimal time, similar to standard RSTP. Convergence performance is as follows: Up to 4 nodes < 150mSec Up to 8 nodes < 200mSec Exceptions: 10% of convergence scenarios might take 600mSec. Excessive BER convergence might end within 600mSec (CQ19230). HW (cold reset) resets, convergence might end within 400-600 mSec (CQ20697). Radio TX mute/ un-mute convergence takes, in 5-10% of cases, 500 – 1000 mSec (CQ19926). 20.3.4 Ring RSTP Management You can use either in-band or out-of-band management in a node using RSTP. The advantages of in-band management are that management is protected by RSTP along with other data traffic, and an additional interface in each node is left free for traffic. 20.3.4.1 In-Band Management In-band management is part of the data traffic. RSTP therefore protects management traffic along with the other network traffic when the ring is re- converged as a result of a ring failure. When in-band management is used, IDUs set to Managed Switch are configured to In-Band, while IDUs set to Smart Pipe mode are configured to Out-of-Band. Out-of-Band. IDUs using Smart Pipe mode are connected to their mates, which are using Managed Switch mode, via an external Ethernet cable for management. This is because an IDU in Smart Pipe mode shuts down its Gigabit traffic port in the event of failure, which would prevent management traffic from reaching the IDU. Note: If the IDU in Managed Switch mode loses power, its mate in Smart Pipe mode will lose management access. As a result, the entire node will lose management access. However, if the IDU in Smart Pipe mode loses power, its mate in Managed Switch mode will retain management access. In band management provides additional free interfaces for traffic in each node. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 303 of 577 The following figure illustrates a ring with four nodes using in-band management: Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Managed Switch: In-Band Single Pipe: Out-of-Band Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Radio Radio Radio Radio Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Network Management Managed Switch: In-Band Single Pipe: Out-of-Band Managed Switch: In-Band Single Pipe: Out-of-Band Managed Switch: In-Band Single Pipe: Out-of-Band Resilient In-Band ring management Management Traffic Connectivity 20.3.4.2 Out-of-Band Management Out-of-band management uses the Wayside Channel (WSC) for management access to the IDUs in the network. An external switch using some form of STP should be used in order to obtain resilient management access and resolve management loops. When out-of-band management is used, all IDUs must be configured to: Out-of-Band WSC Enabled FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 304 of 577 The following figure illustrates a ring with four nodes using out-of-band management: Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Managed Switch Single Pipe Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Eth1 Eth2 Eth3 Eth4 Eth5 Eth6 Eth7 Eth8 Managed Switch Single Pipe Managed Switch Single Pipe Managed Switch Single Pipe Radio Radio Radio Radio Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Mng Mng WSC Network Management Mng Resilient Out-of-Band ring management xSTP External Switch, resolving management loops. Management Traffic Connectivity 20.3.5 Ring RSTP Configuration This section explains how to configure Ring-Optimized RSTP in each of the two node configuration types described in Ring RSTP Supported Topologies on page 300. 20.3.5.1 Node Type A Configuration The following are the basic configuration settings for the IDUs in a Type A node: Switch application: Managed Switch Automatic State Propagation: Enable. The user can choose which faults to propagate. It is recommended to enable all the options to gain convergence upon any failure. Note: Fast convergence cannot be guaranteed if Automatic State Propagation is not enabled (CQ19363). Ring management: For out-of-band management, at least three management ports in the management gateway node, and two management ports in the other nodes. WSC should be set to Enable. For in-band management, at least two management ports in the management gateway node, and one port in any other node. WSC should be set to Disabled. Ethernet-Fast-Ring-RSTP: Enable Bridge level Ring-RSTP parameters should be configured (“Bridge Priority”) FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 305 of 577 Port Level Ring-RSTP parameters: Only two interfaces that connect the node to the ring should be configured as non-edge interfaces. Non edge ports should have their Port Priority and Path Cost configured. Traffic ports should be configured to be Edge ports. The Management and WSC ports should be configured to be Edge ports. 20.3.5.2 Node Type B Configuration The IDUs using Managed Switch mode should be configured using the same settings described for a Node Type A configuration. Refer to Node Type A Configuration on page 304. The IDUs using Smart Pipe mode should be configured as follows: Switch application: Smart Pipe Automatic State Propagation: Enable. You can choose which faults to propagate. It is recommended to enable all the options to gain re- convergence upon any failure. Note: Fast convergence cannot be guaranteed if Automatic State Propagation is not enabled (CQ19363). Note: It is recommended to design the ring to be constructed of symmetrical radio links. This means that the radio links must use the same switch application on both ends, e.g., Smart Pipe with a Smart Pipe link, or Managed Switch with a Managed Switch link. This is because Managed Switch does not react to an LOC fault that might be propagated by a Smart Pipe when they are in the same link. This can affect ring re- convergence performance. Ring management: Out-of-Band. At least two ports must be configured as management ports, with WSC enabled. 20.3.6 Ring RSTP Installation This section describes two installation scenarios: Scenario 1: Configuring Ring-Optimized RSTP from scratch. Scenario 2: Replacing an IDU in a ring that uses Ring-Optimized RSTP. 20.3.6.1 Installation Scenario1: Node with no STP 1 Disconnect all Ethernet cables from the relevant IDU (except local management if needed). 2 Insert the new IDU into its slot, and turn it ON. 3 Install licenses for L2 Switch and Network Resiliency in the IDU.. 4 Configure the IDU, as explained in Ring RSTP Configuration on page 304. 5 Connect one “arm” of the ring to the node (the radio for example, without a line). 6 Make sure the node “understands” its role in the network. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 306 of 577 7 Connect the second “arm” of the ring. At this point, the ring should be re- converged, and the alternate port should appear again. 8 Make sure the ring is converged properly, and all nodes are accessible. 20.3.6.2 Scenario2: Replacing an IDU in an RSTP Ring 1 Identify the port in the network that is now shut down due to ring failure. 2 Identify whether the IDU that should be replaced is or is not a root. 3 Turn OFF the IDU with the port that is shut down. 4 Disconnect all Ethernet cables from the IDU that is to be replaced. 5 Remove the IDU. 6 Insert the new IDU into its slot, and turn it ON. Do not connect Ethernet cables to new units (except local management if needed). 7 Install licenses for L2 Switch and Network Resiliency in the new unit. 8 Configure the new IDU according to the configuration of the previous IDU. It is recommended to download a backup configuration. If the IDU was not root, it is recommended to configure its Bridge Priority to a higher value than the current root, to ensure that the new IDU will not be root. If the IDU was root, it is recommended to configure its Bridge Priority to a lower value than the new root, to ensure that it will become root. If the IDU was operating in Smart Pipe mode, its configuration is not relevant for RSTP. 9 Connect one “arm” of the ring to the node (radio for example, without a line). 10 Make sure the node “understands” its role in the network. 11 Connect the second “arm” of the ring. At this point the ring should be re- converged, and the alternate port should appear again. 12 Make sure the ring is converged properly, and all nodes are accessible. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 307 of 577 20.4 Configuring Ethernet Ports to Support RSTP In the Ethernet Ports that Support (Ring) RSTP table, each interface in the IDU can be configured to support RSTP. To configure supporting Ethernet ports for RSTP: 1 Select Configuration > Ethernet Switch > RSTP. The RSTP page opens. 2 Click the + icon next to the port number to open port configuration. 3 In the Priority field, enter a number between 0-240 as the priority for the selected port. 4 In the Path cost field, enter a path cost between 1 and 200000000. The lower the value, the more likely that port is used. 5 In the Edge port field, select Yes or No to specify whether or not the port is an edge port. Non edge ports are used as service access ports that construct the ring. 6 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 308 of 577 20.5 Configuring RSTP Priority Configuring (Ring) RSTP priority allows you to determine the root bridge, providing more control over the spanning tree path design. There are two options for determining the root bridge: The IDU with the lowest priority. The IDU with the lowest MAC address. The system first checks the priority field. If priority is configured for all of the RSTP IDUs, the root bridge will be the IDU with the lowest priority. If the system is unable to determine which IDU has the lowest priority – if the priority isn’t set for all of the RSTP IDUs, or the priority is the same for all the IDUs – the root bridge will be the IDU with the lowest MAC address. You can avoid this by configuring priority for the path IDUs. To specify the (Ring) RSTP root bridge: 1 Select Configuration > Ethernet Switch > RSTP. The RSTP page opens. 2 In the Priority field, specify the bridge priority by entering a number between 0 and 61440, in multiples of 4096 (4096, 8192, 12,288, etc.). By default the IDU priority is set to 32768. Enter a lower priority for the IDU that you wish to serve as the root bridge. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 309 of 577 21. Working with Service OAM This section includes: Working with MAIDs Managing Local MEPs Managing Remote MEPs Working with MEPs Working with MIPs Performing Manual Ping and Linktrace Operations FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 310 of 577 21.1 Working with MAIDs This section includes: Viewing MAID List Status and Details Adding MAIDs Deleting MAIDs FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 311 of 577 21.1.1 Viewing MAID List Status and Details The MAID list table section displays details about each MAID. To view a MAID’s details: 1 Select Service OAM > MAID List. The MAID List page opens. In the MAID list section: # - Indicates the domain number (internal number of the displayed function). Status - Indicates the status of the current domain: No MEPs – Indicates that no MEPs are configured yet for the selected MAID. This state is used for empty domains, before defining MEPs, or for a domain that contains only MIPs. Monitoring - CFM (CCM) – Indicates that proactive monitoring is running, no error found. Failure – Indicates a connectivity error in at least one MEP. Domain name - Displays the maintenance domain name. Level - Indicates the maintenance domain level. Association name - Displays the maintenance domain association name. VLAN ID - Displays the identification # of the VLAN Send CCM - Displays the CCM status: Disable - no continuity (CCM) frames are sent from the local MEP to remote MEPs. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 312 of 577 Enable - continuity (CCM) frames are sent from the local MEP to remote MEPs. CCM interval - Indicates the (periodic) time interval during which CCM messages are sent. Valid values include 1Sec, 10Sec, 1Min, and 10Min. Click the + in each MAID entry for more options. 21.1.2 Adding MAIDs To add a new MAID: 1 Select Service OAM > MAID List. The MAID List page opens. 2 Click Add to open the Add MAID configuration window. 3 In the Domain Name field, enter the name of the maintenance domain. 4 In the Level field, select the maintenance domain level. 5 In the Association name field, enter the maintenance domain association name. 6 In the VLAN ID field, enter a number between 1-4090 as the MAID VLAN ID. 7 Click Apply. 21.1.3 Deleting MAIDs To delete MAIDs: 1 Select Service OAM > MAID List. The MAID List page opens. 2 Select each MAID you want to remove. 3 Click Delete selected at the bottom of the page. 4 Click OK to confirm the deletion. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 313 of 577 21.2 Managing Local MEPs This section includes: Viewing Local MEPs Adding Local MEPs Deleting local MEPs FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 314 of 577 21.2.1 Viewing Local MEPs The Local MEP section displays details for all the local MEPs that are configured for the selected MAID. To view local MEPs: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. In the Local MEP section: Local MEP ID – Indicates the ID of the MAID local MEP. Ethernet port – Displays the selected port number on which the local MEP is located. MAC address – Displays Ethernet protection MAC address. Priority – Displays the P-bit priority that the CCM message carries. LDI - Local Defect Indication. If the value is Yes, click the + in the right corner of the table to view the reasons for this bug. Connected – Indicates the connection status of the local MEP. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 315 of 577 21.2.2 Adding Local MEPs You can define additional local MEPs for the selected MAID. To add a local MEP: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. 3 In the Local MEP section, click Add underneath the list of local MEPs to open the Add MEP window. 4 In the Ethernet port field, enter the port number of the local MEP. 5 In the Local MEP ID field, enter a number between 1-8191 for the MEP ID. 6 In the Level field, select the MAID domain level. 7 In the VLAN ID field, enter a number between 1-4090 for the MAID VLAN ID. 8 In the Direction field, select either Up or Down as the MEP direction. 9 In the Priority field, select the P-bit priority for the CCM message. 10 Click Apply. 21.2.3 Deleting local MEPs To delete a MEP from a port: 1 Select Service OAM > MAID List. The MAID List opens. 2 In the Local MEP section, select each MEP you want to remove. 3 Click Delete selected underneath the list of local MEPs. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 316 of 577 21.3 Managing Remote MEPs This section includes: Viewing Remote MEPs Adding Remote MEPs Deleting Remote MEPs Pinging Remote MEPs Remote MEP Linktrace Enabling Automatic Linktrace for a MAID FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 317 of 577 21.3.1 Viewing Remote MEPs The Remote MEP section displays details for all the remote MEPs that are configured for the selected MAID. To view remote MEPs: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. In the Remote MEP section: MEP ID – Displays the remote MEP ID. Actual MAC address – Indicates the MAC address of the remote MEP, which the local MEP recognizes. Configured MAC address – Indicates the configured MAC address. This is USED when you decide to specify a selected MAC address for the remote MEP. Status – Indicates the remote MEP connection status. Cross Check – Indicates whether current remote MEP was cross checked (pre-configured) or learned from incoming CCMs. RDI – Indicates the Remote Defect Indication status. Ping – Allows you to ping (run a loopback) from the local MEP to a specific remote MEP ID. Automatic Linktrace – Indicates whether Automatic Linktrace is enabled for this MEP. The checkbox column is used to delete the selection or issue a linktrace (ETH-LT) command from the local MEP to the current remote MEP. 21.3.2 Adding Remote MEPs To add a remote MEP: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 318 of 577 3 In the Remote MEP section, click Add underneath the Remote MEP list to open the Add Remote MEP configuration window. The upper part of the window displays a short summary of the MAID where the remote MEP is being added. MAID <ID #> - Indicates the ID of the selected MAID. Domain name - Displays the maintenance domain name. VLAN ID - Displays the identification # of the VLAN In the bottom part of the Add Remote MEP window, define the new MEP. 1 In the Remote MEP ID field, enter a number between 1-8191 as the remote MEP ID. 2 Optionally, in the Configured MAC address field, specify a selected MAC address for the remote MEP. 3 Click Apply. 21.3.3 Deleting Remote MEPs To delete a remote MEP: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. 3 In the Remote MEP section, select each MEP you want to remove. 4 Click Delete selected underneath the list of port MEPs. 5 Click OK. 21.3.4 Pinging Remote MEPs You can ping remote MEPs. To perform a remote ping: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 319 of 577 3 In the Remote MEP section, click the Ping icon for any MEP in the list to open the Remote ping window. The upper part of the window provides a short summary of the MAID. Domain name - Displays the maintenance domain name. Level - Indicates the maintenance domain level. VLAN ID - Displays the identification # of the VLAN The Ping to section provides a short summary of the remote MEP being pinged. Remote MEP ID – Displays the remote MEP ID. Remote MAC address – Indicates the MAC address of the remote MEP, which the local MEP recognizes. The ping success rate percentage is displayed at the bottom of the window. The success rate is the percentage of LBM packet transmission over the received LBR packets. 21.3.5 Remote MEP Linktrace You can perform a linktrace for any of the MAID’s remote MEPs. To perform a remote linktrace: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. 3 In the Remote MEP section, select the MEP you want to trace. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 320 of 577 4 Click Linktrace selected underneath the Remote MEP list. Note: You can only trace one MEP at a time. The Linktrace result section provides a short summary of the MAID and the Remote MEP being traced. From - Indicates the ID and MAC address of the source of the trace. To - Indicates the ID and MAC address of the destination of the trace. Domain name - Displays the maintenance domain name. Level - Indicates the maintenance domain level. Association name - Displays the maintenance domain association name. VLAN ID - Displays the identification # of the VLAN Priority – Indicates the P-bit priority that the CCM message carries. Linktrace results are displayed at the bottom of the page. The table is refreshed automatically every fixed period of time (configurable, set to 15 min by default), displaying the last updated date and time. Reply TTL - Displays the hop number. Mac address - Displays the hop (MEP/MIP) MAC address. Relay action - Displays the hop LTM relay action. Click Ping to perform a ping on the returned linktrace hops or results. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 321 of 577 21.3.6 Enabling Automatic Linktrace for a MAID To configure automatic linktrace for a MAID: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. 3 Go to the Automatic linktrace parameters section. 4 In the Automatic linktrace interval field, enter a number between 60 and 3600 as the number of seconds for the linktrace interval. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 322 of 577 21.4 Working with MEPs This section includes: Configuring CCM Viewing MAID Ethernet Ports Viewing Port MEPs Adding MEPs to a Port Deleting MEPs from a Port FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 323 of 577 21.4.1 Configuring CCM Continuity check messages (CCM) are heartbeat messages sent by the MAID’s MEPs to confirm connectivity with the other MAID entities. When enabled, the settings will be applied to all MEPs and MIPs in the selected MAID. To configure CCM: 1 Select Service OAM > MAID List. The MAID List opens. 2 Select a MAID from the list. 3 Go to the CCM configuration section. 4 In the Send CCM field: Select Enable to allow continuity messages to be sent over the MAID. Select Disable if you do not want continuity messages (CCM) sent over the selected MAID. 5 In the CCM Interval field, select the CCM interval. The interval can be 1 second, 10 seconds, 1 minute, or 10 minutes. 6 Click Apply. 21.4.2 Viewing MAID Ethernet Ports The Ethernet ports section displays details for all the selected MAID Ethernet ports. To view Ethernet port details: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. In the Ethernet ports section: Ethernet port – Displays the Ethernet port number. MAC address – Displays the Ethernet port MAC address. Connector type – Displays the Ethernet port connector type. Function – Displays the Ethernet port function. MEP or MIP defined – Indicates with a check indicates that you defined an MEP or MIP on this port. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 324 of 577 21.4.3 Viewing Port MEPs The Port MEPs section of the MEP and MIP list displays details for all the selected MAID Ethernet port MEPs. To view port MEPs: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. 2 Select an Ethernet port. In the Port MEPs section: Local MEP ID – Indicates the ID of the MAID local MEP. Domain name - Displays the maintenance domain name. Level - Indicates the maintenance domain level. Association name - Displays the maintenance domain association name. VLAN ID - Displays the identification # of the VLAN Direction- Indicates the MEP direction: Up or Down. Send CCM - Displays the CCM status: Disable - no continuity (CCM) frames are sent from the local MEP to remote MEPs. Enable - continuity (CCM) frames are sent from the local MEP to remote MEPs. CCM interval - Indicates the (periodic) time interval during which CCM messages are sent. Valid values include 1Sec, 10Sec, 1Min, and 10Min. Priority - The P-bit priority that the CCM message carries. LDI - Local Defect Indication. If the value is Yes, click the + in the right corner of the table to view the reasons for this bug. 21.4.4 Adding MEPs to a Port To add a MEP to a port: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. 2 Select an Ethernet port. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 325 of 577 3 In the Port MEPs section, click Add underneath the list of port MEPs. The Add MEP to Port window opens. 4 In the Ethernet port field, enter the port number of the local MEP. 5 In the Local MEP ID field, enter the ID of the MAID local MEP. 6 In the Level field, select the MAID domain level. 7 In the VLAN ID field, enter a number between 1-4090 for the MAID VLAN ID. 8 In the Direction field, select Up or Down to specify the MEP direction. 9 In the Priority field, select the P-bit priority for the CCM message. 10 Click Apply. 21.4.5 Deleting MEPs from a Port To delete a MEP from a port: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. 2 Select an Ethernet port. 3 In the Port MEPs section, select each MEP you wish to remove. 4 Click Delete selected underneath the list of port MEPs. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 326 of 577 21.5 Working with MIPs This section includes: Viewing Port MIPs Adding MIPs to a Port Deleting MIPs from a Port FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 327 of 577 21.5.1 Viewing Port MIPs The Port MIPs section of the MEP and MIP list displays details for all the selected MAID Ethernet port MIPs. To view port MIPs: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. 2 Select an Ethernet port. In the Port MIPs section: Domain name - Displays the maintenance domain name. Level - Indicates the maintenance domain level. 21.5.2 Adding MIPs to a Port To add a MIP to a port: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. 2 Select an Ethernet port. 3 In the Port MIPs section, click Add underneath the list of port MIPs to open the Add MIP to port window. 4 In the Ethernet port field, enter the [Name | Number] of the Ethernet port to which you want to add a MIP. 5 In the Level field, select the MIP level. 6 Click Apply. 21.5.3 Deleting MIPs from a Port You can delete MIPs from a port. To delete a MIP from a port: 1 Select Service OAM > MEP and MIP List. The MEP and MIP List page opens. 2 Select an Ethernet port. 3 In the Port MIPs section, select each MIP you want to remove. 4 Click Delete selected underneath the list of port MIPs. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 328 of 577 21.6 Performing Manual Ping and Linktrace Operations This section includes: Pinging Remote MEPs and MIPs Performing a Manual Linktrace FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 329 of 577 21.6.1 Pinging Remote MEPs and MIPs You can manually ping remote MEPs and MIPs. To configure a manual ping: 1 Select Service OAM > Advanced > Manual Ping. The Manual Ping page opens. 2 In the MAC address field, enter the target MEP/MIP MAC address. 3 In the Level field, select the MAID level. 4 In the VLAN ID field, enter a number between 1-4090 for the VLAN ID. 5 In the Priority field, select the P-bit priority bit for the outgoing ETH-LTM packets. 6 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 330 of 577 21.6.2 Performing a Manual Linktrace To perform a manual linktrace: 1 Select Service OAM > Advanced > Manual Linktrace. The Manual Linktrace page opens. 2 In the MAC address field, enter the target MEP/MIP MAC address. 3 In the Level field, select the MAID level. 4 In the VLAN ID field, enter a number between 1-4090 for the VLAN ID. 5 In the Priority field, select the P-bit priority bit for the outgoing ETH-LTM packets. 6 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 331 of 577 22. Viewing System Activity and Performance This chapter includes: Displaying and Clearing PMs Displaying and Resetting RMON Counters Displaying Ethernet Statistics Displaying TDM PMs Displaying Radio PMs Viewing Radio Status Viewing Ethernet Interface Status Viewing RSTP Status Viewing Enhanced Traffic Management Statistics Related topics: LED Indicators Viewing Current Alarms Viewing the Event Log Monitoring the IDU-RFU Interface FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 332 of 577 22.1 Displaying and Clearing PMs The Performance Monitoring commands window enables you to clear all performance monitoring measurements in the unit, except for RMON. To clear performance monitoring data: 1 Select PM & Counters > PM Commands. The PM Commands page opens. 2 Click Clear. Many of the Performance Monitoring (PM) windows contain an option to display the PM data as a graph. All the reports described in this section can be displayed for the previous 24 hours in 15 minute intervals, or for the past month in daily intervals. To display reports in 15 minute intervals, select 15 Minutes. To display reports in daily intervals, select Daily. To display a PM graph: 1 Click the graph icon at the top of the PM window, located to the left in the figure above. The PMs appear in a graph format. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 333 of 577 22.2 Displaying and Resetting RMON Counters IP-10G/E supports Ethernet statistic counters (RMON) display. The counters are designed to support: RFC 2819 – RMON MIB. RFC 2665 – Ethernet-like MIB. RFC 2233 – MIB II. RFC 1493 – Bridge MIB. The statistic counters are divided into ingress statistics and egress statistics To reset RMON counters: 1 Select PM & Counters > RMON. The Running Counters page opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 334 of 577 In the Running Counters page: To reset a specific counter, click Clear at the top of the column. To reset all counters, click Clear All at the bottom of the page. Good octets received – Indicates the number of FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 335 of 577 Bad octets received – Indicates the number of Unicast frames received – Indicates the number of Multicast frames received – Indicates the number of Broadcast frames received – Indicates the number of Pause frames received – Indicates the number of flow-control pause frames received. Undersize frames received – Indicates frames shorter than 64 bytes Fragmented frames received – Indicates the number of Oversize frames received – Indicates frames longer than 1632 bytes Jabber frames received – Indicates the total number of frames received with a length of more than 1632 bytes, but with an invalid FCS Fragments frames received – Indicates the total number of f frames received with a length of less than 64 bytes, and an invalid FCS FCS frames received – Indicates the total number of f frames received with CRC error, not counted in "Fragments", "Jabber" or "Rx error" counters Rx error frames received – Indicates the total number of f frames received with Phy-error In discard frames – Counts good frames that cannot be forwarded due to lack of buffer memory In filtered frames – Counts good frames that were filtered due to egress switch VLAN policy rules Frames 64 octets – Indicates the total number of frames transmitted with a length of exactly 64 octets. Frames 65-127 octets – Indicates total number of frames transmitted with a length of 65-127 octets. Frames 128-255 octets – Indicates the total number of frames transmitted with a length of 128-255 octets. Frames 256-511 octets – Indicates the total number of frames transmitted with a length of 256-511 octets. Frames 512-1023 octets – Indicates the total number of frames transmitted with a length of 512-1023 octets. Frames >=1024 octets – Indicates the total number of frames transmitted with a length of 1024 octets or higher. Good octets sent – Indicates the sum of the lengths of all Ethernet frames sent from this MAC. Unicast frames sent – Indicates the number of unicast frames transmitted to the radio port. Broadcast frames sent – Indicates the number of broadcast frames transmitted to the radio port. Multicast frames sent – Indicates the number of multicast frames transmitted to the radio port. Pause frames sent – Indicates the number of pause frames sent. Out FCS error frames – Indicates the number of frames transmitted with an invalid FCS. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 336 of 577 Out filtered frames sent – Counts the number of good frames that were filtered due to egress policy rules. Deferred frames sent – Indicates the total number of successfully transmitted frames that experienced no collisions but are delayed because the medium was busy during the first attempt. This counter is applicable in half-duplex only. Collision events – Indicates the number of collision events seen by the MAC not including those counted in 'Single', 'Multiple', 'Excessive', or 'Late'. This counter is applicable in half-duplex only. Single collision frames – Indicates the total number of successfully transmitted frames that experienced exactly one collision. This counter is applicable in half-duplex only. Multiple collision frames – Indicates the total number of frames that have been successfully transmitted and have also experienced more than one collision. This counter is applicable in half-duplex only. Late collision detect – Indicates the number of times a collision is detected later than 512 bit-times into the transmission of a frame. This counter is applicable in half-duplex only. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 337 of 577 22.3 Displaying Ethernet Statistics This section includes: Displaying Frame Error Rate Statistics Displaying Throughput Statistics Displaying Capacity Statistics Displaying Utilization Statistics FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 338 of 577 22.3.1 Displaying Frame Error Rate Statistics The Frame Error Rate report displays statistics about the Ethernet frame error rate (%) measured on the radio Ethernet port. To view Frame error rate performance: 1 Select PM & Counters > Radio > Ethernet > Frame Error Rate. The Frame Error Rate PM report opens. In the Frame Error Rate PM report: Frame Error Rate (%) - Indicates the percentage of received error frames relative to all frames received by the radio Ethernet port. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 339 of 577 22.3.2 Displaying Throughput Statistics The Throughput PM report displays radio Ethernet throughput statistics (excluding TDM traffic), measured on the radio port. To view Throughput PM: 1 Select PM & Counters > Radio > Ethernet > Throughput. The Throughput PM report opens. In the Throughput PM report: Peak Throughput (bps) - Indicates the maximum throughput measured during the last interval. Average Throughput (bps) - Indicates the average throughput measured during the last interval. Throughput Exceed (Seconds) - Indicates the number of seconds the throughput exceeded the threshold (configured in the field below the table) during the last interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 340 of 577 22.3.3 Displaying Capacity Statistics The Capacity PM report displays statistics of the Ethernet capacity, including Ethernet data and overhead bytes, measured on the radio port. To view Capacity PM: 1 Select PM & Counters > Radio > Ethernet > Capacity. The Capacity PM report opens. In the Capacity PM report: Peak Capacity (bps) - Indicates the maximum capacity measured during the last interval. Average Capacity (bps) - Indicates the average capacity measured during the last interval. Capacity Exceed (seconds) - Indicates the number of seconds the throughput exceeded the threshold during the last interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 341 of 577 22.3.4 Displaying Utilization Statistics The Utilization PM report displays statistics of Ethernet utilization (%) measured on the radio port. Ethernet utilization is a measurement of actual Ethernet throughput, relative to the potential Ethernet throughput of the radio, excluding TDM channels. Ethernet utilization during the last interval is displayed as one of five bins: 0-20% | 20-40% | 40-60% | 60-80% | 80-100% To view Ethernet utilization statistics: 1 Select PM & Counters > Radio > Ethernet > Utilization. The Utilization PM report opens. In the Utilization PM report: Range of Peak Utilization (%) - Indicates the maximum utilization measured during the last interval. Range of Average Utilization (%) - Indicates the average utilization measured during the last interval. Utilization Exceed (Seconds) - Indicates the number of seconds the value exceeded the threshold during the last interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 342 of 577 22.4 Displaying TDM PMs This section includes: Displaying E1/DS1 Line PMs Displaying TDM Channel PMs Displaying TDM Trail PMs Displaying STM-1/OC-3 Line PMs Displaying Pseudowire PMs FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 343 of 577 22.4.1 Displaying E1/DS1 Line PMs You can display E1 or DS1 line PMs. The E1 and DS1 PM pages contain a separate PM window for each E1 or DS1 link in use. To view E1 or DS1 PMs: 1 Select PM & Counters > E1> Port# or PM & Counters > DS1 > Port#. The E1 or DS1 line PM report opens. In the E1 or DS1 PM report: ES – Indicates the number of seconds during which errors occurred. SES – Indicates the number of seconds during which severe errors occurred. UAS – Indicates the Unavailable Seconds value of the current interval. The value can be between 0 and 900 seconds (15 minutes). BBE – Indicates the number of background block errors. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 344 of 577 22.4.2 Displaying TDM Channel PMs The TDM Channel report displays the unavailable seconds (UAS) of the expected E1/T1 trails on the radio. When ACM decreases, the capacity of the radio is reduced. Trails with insufficient bandwidth in the radio link capacity may be dropped. When a trail is dropped, its UAS counter will start counting the seconds for which the trail was not serviced. To view TDM radio PM: 1 Select PM & Counters > Radio > TDM channels > Channel#. The Channel PM report opens. In the Channel PM report: UAS – Indicates the Unavailable Seconds value of the current interval. The value can be between 0 and 900 seconds (15 minutes). Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 345 of 577 22.4.3 Displaying TDM Trail PMs End-to-end PM measurements are taken for TDM trails. This PM is based on BER measurement, and not on code violation, which distinguishes it from line interface PMs. The measurements are the same as those for line interfaces (ES, SES, UAS, BBE), but are based on BER measurements. PM for trails is measured in the following cases, and is maintained in the relevant IDUs: End point interfaces: trail end line interfaces Radio interfaces that perform SNCP If TDM trail path protection is configured, the system performs measurement on both the primary and secondary paths. To display PMs for a trail: 1 Select PM & Counters >TDM Trails. 2 Select a trail from the Trails List section. The TDM Trail report opens. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 346 of 577 22.4.4 Displaying STM-1/OC-3 Line PMs The STM-1/OC-3 PM page contains a separate PM window for each STM- 1/OC-3 link in use. You can set display to show PMs for the previous 24 hours in 15 min intervals, or for the past month in daily intervals. To view STM-1/OC-3 PMs: 1 Select PM & Counters > STM-1> Port#. The STM-1/OC-3 PM report opens. In the STM-1/OC-3 PM report: ES – Indicates the number of seconds during which errors occurred. SES – Indicates the number of seconds during which severe errors occurred. UAS – Indicates the Unavailable Seconds value of the current interval. The value can be between 0 and 900 seconds (15 minutes). BBE – Indicates the number of background block errors. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 347 of 577 22.4.5 Displaying Pseudowire PMs When a pseudowire T-Card is installed, you can display statistics for the pseudowire ports, the Ethernet port associated with the pseudowire ports, and pseudowire services. To display PMs for the Ethernet port associated with the pseudowire ports: 1 Select PM & Counters > Pseudowire> Port RMON. The Port RMON PM report opens. The following is a brief description of the pseudowire PMs: txrx_frames_64: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 64 bytes in length inclusive (excluding framing bits but including FCS bytes). txrx_frames_127: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 65 to 127 bytes in length inclusive (excluding framing bits but including FCS bytes). txrx_frames_255: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 128 to 255 bytes in length inclusive (excluding framing bits but including FCS bytes). txrx_frames_511: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 256 to 511 bytes in length inclusive (excluding framing bits but including FCS bytes). txrx_frames_1023: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 512 to 1023 bytes in length inclusive (excluding framing bits but including FCS bytes). txrx_frames_1518: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 1024 to 1518 bytes in length inclusive (excluding framing bits but including FCS bytes). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 348 of 577 txrx_frames_1522: Unsigned 64-bit modulo counter of good or bad frames transmitted and received that are 1519 to 1522 bytes in length inclusive (excluding framing bits but including FCS bytes). rx_bytes: Unsigned 64-bit modulo counter of byte count of frames received with 0 to 1518 bytes, including those in bad packets, excluding framing bits but including FCS bytes. rx_packets: Unsigned 64-bit modulo counter of number of received packets (including bad packets, all Unicast, Broadcast, and Multicast packets). rx_err_fcs: Unsigned 64-bit modulo counter of frames received that have a integral 64 to 1518 byte length and contain a Frame Check Sequence error. rx_multicast: Unsigned 64-bit modulo counter of number of multicast good frames of length 64 to 1518 (non VLAN) or 1522 (VLAN) bytes excluding Broadcast frames. Note: This statistic does not take into account frames with range/length errors. rx_broadcast: Unsigned 64-bit modulo counter of number of broadcast good frames of length 64 to 1518 (non VLAN) or 1522 (VLAN) bytes excluding Broadcast frames. Note: This statistic does not take into account frames with range/length errors. rx_mac_control: Unsigned 64-bit modulo counter of MAC Control frames received (PAUSE & Unsupported). rx_mac_pause: Unsigned 64-bit modulo counter of valid PAUSE MAC Control frames received. rx_mac_unknown: Unsigned 64-bit modulo counter of MAC Control Frames received that contain an opcode other than a PAUSE. rx_err_alignment: Unsigned 64-bit modulo counter of received frames from 64 to 1518 (non VLAN) or 1522 (VLAN) bytes in length that contain an invalid FCS and are not an integral number of bytes. rx_err_length: Unsigned 64-bit modulo counter of frames received in which the 802.3 length field did not match the number of data bytes actually received (46 - 1500 bytes). The counter is not incremented if the length field is not a valid 802.3 length, such as an EtherType value. rx_err_code: Unsigned 64-bit modulo counter of number of instances where a valid carrier was present and at least one invalid data symbol was detected. rx_err_false_carrier: Unsigned 64-bit modulo counter of number of false carriers detected during idle, as defined by a 1 on RX_ER and an '0xE' on RXD. The event is reported along with the statistics generated on the next received frame. Note: Only one false carrier condition can be detected and logged between frames. rx_undersize: Unsigned 64-bit modulo counter of frames received that are less than 64 bytes in length, contain a valid FCS, and were otherwise well formed. Note: This statistic does not look at range/length errors. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 349 of 577 rx_oversize: Unsigned 64-bit modulo counter of frames received that exceeded 1518 (non VLAN) or 1522 (VLAN) bytes in length, contain a valid FCS, and were otherwise well formed. Note: This statistic does not look at range/length errors. rx_fragments: Unsigned 64-bit modulo counter of frames received which are less than 64 bytes in length and contain an invalid FCS, including integral and non-integral lengths. rx_jabber: Unsigned 64-bit modulo counter of frames received which exceed 1518 (non VLAN) or 1522 (VLAN) bytes in length and contain an invalid FCS, including alignment errors. rx_dropped: Unsigned 64-bit modulo counter of frames received that are streamed to the system but are later dropped due to lack of system resources. tx_bytes: Unsigned 64-bit modulo counter of number of bytes that were put on the wire including fragments of frames that were involved with collisions. This count does not include preamble/SFD or jam bytes. tx_packets: Unsigned 64-bit modulo counter of transmitted packets (including bad packets, excessive deferred packets, excessive collision packets, late collision packets, all Unicast, Broadcast, and Multicast packets). tx_multicast: Unsigned 64-bit modulo counter of Multicast valid frames transmitted (excluding Broadcast frames). tx_broadcast: Unsigned 64-bit modulo counter of Broadcast frames transmitted (excluding Multicast frames). tx_mac_pause: Unsigned 64-bit modulo counter of valid PAUSE MAC Control frames transmitted. tx_defer: Unsigned 64-bit modulo counter of frames that were deferred upon first transmission attempt. Does not include frames involved in collisions. tx_excess_defer: Unsigned 64-bit modulo counter of number of frames aborted that were deferred for an excessive period of time (3036 byte times). tx_single_collision: Unsigned 64-bit modulo counter of frames transmitted which experienced exactly one collision during transmission. tx_multi_collision: Unsigned 64-bit modulo counter of frames transmitted which experienced 2-15 collisions (including any late collisions) during transmission as defined using the RETRY [3-0] field of the TX function control register. tx_late_collision: Unsigned 64-bit modulo counter of frames transmitted that experienced a late collision during a transmission attempt. Late collisions are defined using the LCOL[50] field of the TX Function control register. tx_excess_collision: Unsigned 64-bit modulo counter of frames that experienced 16 collisions during transmission and were aborted. tx_no_collision: Unsigned 64-bit modulo counter of number of frames transmitted that had no collision. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 350 of 577 tx_mac_pause_honored: Unsigned 64-bit modulo counter of number of times a valid PAUSE MAC Control frame was transmitted and honored. tx_dropped: Unsigned 64-bit modulo counter of number of times the input PFH is asserted. tx_jabber: Unsigned 64-bit modulo counter of oversized transmitted frames with an incorrect FCS value. tx_err_fcs: Unsigned 64-bit modulo counter of valid sized packets transmitted with an incorrect FCS value. tx_control: Unsigned 64-bit modulo counter of valid size frames transmitted with a Type Field signifying a Control frame. tx_oversize: Unsigned 64-bit modulo counter of oversized transmitted frames with a correct FCS value. tx_undersize: Unsigned 64-bit modulo counter of transmitted frames less than 64 bytes, with a correct FCS value. tx_fragments: Unsigned 64-bit modulo counter of transmitted frames less than 64 bytes, with an incorrect FCS value. rx_host_frames: Unsigned 64-bit modulo counter of number of complete good Ethernet frames received and terminated to the host. rx_iw_frames: Unsigned 64-bit modulo counter of the number of received Ethernet Interworking frames that were received and sent to the L3 Interworking module. rx_err_host_full: Unsigned 64-bit modulo counter of number of FIFO overrun errors. rx_err_fbp_underrun: Unsigned 64-bit modulo counter of the number of received Ethernet Interworking frames which were dropped due free buffer pool (FBP) Overrun rx_err_nonvalid_mac: Unsigned 64-bit modulo counter of the number of received Ethernet frames whose MAC-DA is not valid. (Unrecognized by address recognition routine in DPS). rx_err_mru: Unsigned 64-bit modulo counter of the number of received Ethernet Interworking frames which were dropped due the Maximum Receive Unit frame size being exceeded. rx_err_sdu: Unsigned 64-bit modulo counter of the number of Ethernet frames which were closed due the maximum frame size has been exceeded tx_err_underrun: Unsigned 64-bit modulo counter of number of times Ethernet transmitter underun occurred. rx_err_overrun: Unsigned 64-bit modulo counter of number of received Ethernet frames which were closed (in a middle of a frame) or discarded due to a receive buffer overrun event (no available buffers). tx_frames: Unsigned 64-bit modulo counter of number of complete good frames transmitted. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 351 of 577 To display pseudowire line PMs: 1 Select PM & Counters > Pseudowire> TDM Ports > Port#. The Pseudowire PM report opens. In the Pseudowire PM report: ES – Indicates the number of seconds during which errors occurred. SES – Indicates the number of seconds during which severe errors occurred. UAS – Indicates the Unavailable Seconds value of the current interval. The value can be between 0 and 900 seconds (15 minutes). Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 352 of 577 To display PMs for pseudowire services: 1 Select PM & Counters > Pseudowire> Pseudowire Services > Service#. The Pseudowire Service report opens. In the Pseudowire Service report: ES – Indicates the number of seconds during which errors occurred. SES – Indicates the number of seconds during which severe errors occurred. UAS – Indicates the Unavailable Seconds value of the current interval. The value can be between 0 and 900 seconds (15 minutes). FC – Failure counts. A failure is an LOPS event. FER – Frame error ratio. Missing Packets – Number of missing packets. Misorder Dropped – Number of packets detected out of order that could not be re-ordered or could not fit in the jitter buffer. Malformed Packets – Number of packets detected with unexpected size, or bad headers stack. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 353 of 577 22.5 Displaying Radio PMs This section includes: Displaying Signal Level PMs Displaying Aggregate Radio PMs Displaying Radio MRMC PMs Displaying Radio MSE PMs Displaying Radio XPI PMs FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 354 of 577 22.5.1 Displaying Signal Level PMs The Signal Level PM report shows signal level performance. You can set display to show PMs for the previous 24 hours in 15 min intervals, or for the past month in daily intervals. To view signal level performance: 1 Select PM & Counters > Radio > Signal Level. The Signal Level PM report opens. In the PM report section: Min RSL – Indicates the minimum received level measured during the interval. Max RSL – Indicates the maximum received level measured during the interval. RSL Exceed #1 - Displays the number of seconds the RSL threshold #1value was exceeded during the current interval. RSL Exceed #2 - Displays the number of seconds the RSL threshold #2 value was exceeded during the current interval. Min TSL – Indicates the minimum transmitted level measured during the interval. Max TSL – Indicates the maximum transmitted level measured during the interval. TSL Exceed - Displays the number of seconds the TSL threshold value was exceeded during the current interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 355 of 577 22.5.2 Displaying Aggregate Radio PMs The Aggregate PM report page displays tributary values measured for the previous 24 hours in 15 min intervals, or for the past month in daily intervals. To view aggregate radio performance: 1 Select PM & Counters > Radio > Aggregate. The Aggregate PM report opens. In the Aggregate PM report: ES – Indicates the number of seconds during which errors occurred. SES – Indicates the number of seconds during which severe errors occurred. UAS – Indicates the Unavailable Seconds value of the current interval. The value can be between 0 and 900 seconds (15 minutes). BBE – Indicates the number of background block errors. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 356 of 577 22.5.3 Displaying Radio MRMC PMs The MRMC PM report displays Multi-Rate Multi-Constellation performance for the previous 24 hours in 15 min intervals, or for the past month in daily intervals. To view MRMC PM: 1 Select PM & Counters > Radio > MRMC. The MRMC PM report opens. In the MRMC PM report: Min Profile - Indicates the minimum radio profile during the last interval. Max Profile - Indicates the maximum radio profile during the last interval. Min BitRate (Mbps) - Indicates the minimum total radio throughput (Mbps), delivered during the last interval. Max BitRate (Mbps) - Indicates the maximum total radio throughput (Mbps), delivered during the last interval. Min number of allocated TDM VCs - Indicates the minimum number of TDM voice channels (E1/T1) delivered over the radio during the last interval. Max number of allocated TDM VCs - Indicates the maximum number of TDM channels (E1/T1) delivered over the radio during the last interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 357 of 577 22.5.4 Displaying Radio MSE PMs The MSE PM report displays the modem’s Minimum Square Error performance statistics for the previous 24 hours in 15 min intervals, or for the past month in daily intervals. To view MSE PM: 1 Select PM & Counters > Radio > MSE. The MSE PM report opens. In the MSE PM report: Min MSE - Indicates the minimum MSE in dB, measured during the last interval. Max MSE - Indicates the maximum MSE in dB, measured during the last interval. MSE Exceed - Indicates the number of seconds the MSE exceeded the threshold (configured in the field below the table) during the last interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 358 of 577 22.5.5 Displaying Radio XPI PMs The XPI PM report displays the Cross Polarization Interference value for the previous 24 hours in 15 min intervals, or for the past month in daily intervals. To view cross polarization interference performance: 1 Select PM & Counters > Radio > XPI. The XPI PM report opens. In the XPI PM report: Min XPI - Indicates the minimum XPI in dB, measured during the last interval. Max XPI - Indicates the maximum XPI in dB, measured during the last interval. XPI Exceed - Indicates the number of seconds the XPI exceeded the threshold (configured in the field below the table) during the last interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 359 of 577 22.6 Viewing Radio Status This section includes: Viewing RFU Status Viewing MRMC Status Viewing Current Tx Status Viewing Current Rx Status Viewing Remote Radio Parameters Viewing XPIC Status FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 360 of 577 22.6.1 Viewing RFU Status To view the RFU status parameters: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. In the Status Parameters section: RFU type – Indicates the type of RFU used in the system. Tx/Rx frequency separation – Displays Tx/Rx separation values. Tx/Rx level – Displays current Tx/Rx level values. MSE – Displays Mean Square Error value, which quantifies the performance of the receiver. XPI level – Displays the current cross polarization interference value. Note: This field only appears if XPIC is enabled. Defective blocks – Indicates the number of blocks in which errors were detected. The larger the amount, the poorer the radio link quality. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 361 of 577 22.6.2 Viewing MRMC Status To view MRMC status: 1 Select Configuration > Radio > MRMC. The MRMC page opens. In the MRMC configuration section: MRMC script – Displays the current selected radio script. Occupied bandwidth (MHz) – Displays the actual bandwidth occupied by the radio signal. This should not be confused with Channel Spacing, which indicates the allocated bandwidth for the RF channel. If an asymmetrical script is enabled, this field will be replaced with separate Rx and Tx occupied bandwidth status. Operational mode – Displays the ACM mode: ACM Adaptive, ACM Fixed, or Regular (non ACM radio script). Min adaptive ACM profile – Indicates the minimum configured profile that will never be exceeded when ACM is active. Max adaptive ACM profile – Indicates the maximum configured profile that will never be exceeded when ACM is active. Adaptive Tx power admin – Indicates whether power admin is enabled. When enabled, the radio power is adjusted to the current profile that is being used. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 362 of 577 22.6.3 Viewing Current Tx Status The Current TX section displays ACM transmission settings To view current Tx settings: 1 Select Configuration > Radio > MRMC. The MRMC page opens. In the Current TX section: Profile – Indicates the current ACM profile used for transmission. QAM – Indicates the current modulation used for transmission. Bitrate – Indicates the current transmitted bit rate, in Mbps. Number of TDM channels – Indicates the number of TDM channels. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 363 of 577 22.6.4 Viewing Current Rx Status The Current Rx section displays ACM received settings To view current RX settings: 1 Select Configuration > Radio > MRMC. The MRMC page opens. In the Current Rx section: Profile – Indicates the current ACM profile used by the receiver. QAM – Indicates the current modulation used by the receiver. Bitrate – Indicates the current receiving bit rate, in Mbps. Number of TDM channels – Indicates the number of TDM channels. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 364 of 577 22.6.5 Viewing Remote Radio Parameters To view the current remote Rx level: 1 Select Configuration > Radio > Remote Radio. The Remote Radio page opens. In the Remote radio parameters section: Remote communication – Indicates the current communication status of the remote unit. Remote Rx level – Indicates the current Rx level of the remote unit. 22.6.6 Viewing XPIC Status XPIC enables two radio carriers to use the same frequency with a polarity separation between them by adaptively subtracting from each carrier the interfering cross carrier at the proper phase and level, with the ability to detect both streams even under the worst levels of cross polar discrimination interference such as 10 dB. To view XPIC status: 1 Select Configuration > Radio > Radio Parameters. The Radio Parameters page opens. In the XPIC parameters section: XPI enabled – Indicates whether XPIC is enabled. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 365 of 577 22.7 Viewing Ethernet Interface Status The Ethernet ports table displays the configuration settings for each port. To view Ethernet port status: 1 Select Configuration > Interfaces > Ethernet Ports. The Ethernet Ports page opens. In the Ethernet ports table: Operational status – Indicates whether the port is Up or Down. Enabled – Indicates whether the port is enabled. A check mark indicates that this port is enabled. An X indicates that the port is disabled. Interface – Displays the port number. Connector type – Displays whether this port is using copper (RJ-45) cable or optical fiber. Speed & duplex – Displays available parameters regarding rate and duplex: Auto negotiation – Indicates whether auto-negotiation is enabled for the port. Rate – Indicates the configured rate for the port. Actual rate – Indicates the actual rate for the port. Actual duplex – Indicates whether actual duplex is Half or Full. Function – Displays whether the port is being used for Trunk, Access, or Management. For Metro switches – Indicates whether the port is being used for C/N, P/N, or Management. VLAN ID – Displays all allowed VIDs for this port. Learning – A check mark indicates that Port learning is enabled. An X indicates that Port learning is disabled. Flow control – Displays whether Flow control is On or Off. Service type – Displays whether this port is a network or access point. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 366 of 577 22.8 Viewing RSTP Status Related topics: Configuring RSTP The RSTP and Ring RSTP windows enable you to view status information and to configure RSTP parameters. The configurations of RSTP and Ring RSTP parameters are identical. To view RSTP status: 1 Select Configuration > Ethernet Switch> (Ring) RSTP. The RSTP page opens. The (Ring) RSTP Status section displays the current RSTP status information: Bridge ID – Displays the ID of the bridge in the current monitored IDU. Root ID – Displays the ID of the root bridge. Root Path Cost – Displays the cost of the path from the current monitored IDU to the root bridge. Bridge Role – Displays the role of the bridge: Root or Designated. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 367 of 577 22.9 Viewing Enhanced Traffic Management Statistics This feature requires: Enhanced QoS license You can view a PM report for the Enhanced traffic manager of each queue. The report contains data from the most recent report interval. Each PM is measured per queue in Max/Avg format. Green traffic refers to frames that comply with the configured Committed Information Rate (CIR). Yellow traffic refers to frames that exceed the configured CIR but are below the configured Excess Information Rate (EIR). In addition to the Enhanced Traffic Manager (Enhanced QoS) statistics available in earlier versions, hardware version R3 and software version i6.9 provide additional counters, as shown in the following table: Per-Queue Counters Availability Software Version i6.7 Green bytes passed Green frames dropped Yellow bytes passed Yellow frames dropped i6.9 Same as i6.7, with the addition of: L1 support for green and yellow bytes passed (i6.7 supports L2 only) Green frames passed Yellow frames passed FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 368 of 577 To view traffic statistics for a managed Ethernet queue: 1 Select PM & Counters > Enhanced Traffic Manager > Queue#. In the Bytes section: Avg. Green Passed – Displays the average green traffic in bytes per seconds (Bps) during the report interval. Max Green Passed - Displays the peak green traffic for one second during the report interval. Avg. Yellow Passed – Displays the average yellow traffic in Bps during the report interval. Max Yellow Passed - Displays the peak yellow traffic for one second during the report interval. Avg. Red Dropped – Displays the average red dropped traffic in Bps during the report interval. Max Red Dropped - Displays the peak red dropped traffic for one second during the report interval. Integrity - Indicates whether the values received at that time and date are reliable. An x in the column indicates that the values are not reliable due to a possible power surge or power failure that occurred at that time. In the Frames section: Avg. Green Dropped – Displays the average number of dropped green frames during the report interval. Max Green Dropped – Displays the maximum number of dropped green frames during the report interval. Avg. Yellow Dropped – Displays the average number of dropped yellow frames during the report interval. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 369 of 577 Max Yellow Dropped – Displays the maximum number of dropped yellow frames during the report interval. Avg. Green Passed – Displays the average number of green frames dropped during the report interval. Max Green Passed - Displays the maximum number of green frames dropped during the report interval. Avg. Yellow Passed – Displays the average number of yellow frames dropped during the report interval. Max Yellow Passed - Displays the maximum number of yellow frames dropped during the report interval. Avg. Red Dropped – Displays the average number of dropped red frames during the report interval. Max Red Dropped – Displays the maximum number of dropped red frames during the report interval. The RMON counters page displays values relating to the bridge performance. The counters are designed to support: RFC 2819, RMON MIB RFC 2665, Ethernet-like MIB RFC 2233, MIB II RFC 1493, Bridge MIB The statistic counters are divided into ingress statistics and egress statistics. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 370 of 577 23. Fault Management This chapter includes: Overview of Fault Management LED Indicators Configuring External Alarms Configuring Traps Configuring Power Supply Alarms Viewing Current Alarms Viewing the Event Log Monitoring the IDU-RFU Interface Loopback Troubleshooting Protection Activating the All-ODU Enclosure FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 371 of 577 23.1 Overview of Fault Management FibeAir IDUs are designed to be highly reliable and relatively maintenance free. In the event of a system failure, the system will provide detailed indications to assist troubleshooting and fault isolation. This chapter explains the alarm indications in a FibeAir system, and contains procedures for troubleshooting and fault isolation. To ensure simple and efficient system maintenance, the on-site technician will only replace IDU or RFU modules, and not repair them. Under no circumstance will the technician be permitted to open the equipment in order to repair a module or circuit board. Opening equipment will terminate the Ceragon warranty. Maintenance procedures the technician can perform include visual inspection, cleaning, cable/connector repair, link alignment/adjustment, and retorquing antenna mount bolts. The following table lists the suggested preventive maintenance procedures, which include visual inspection of the equipment and verification of operational parameters. It is recommended to perform the procedures as often as local environmental conditions require. It is recommended to notify the end customer prior to performing any preventive maintenance procedures that could affect service on the circuit. What to check Check for… Comments IDU alarm LEDs All green If not, perform troubleshooting Coax cable connection Tight, no corrosion or moisture Clean/repair as required Coax cable No cracks or kinks Replace as required All equipment Dust or dirt Clean as required Receive level (voltage in IDU/ODU/RFU, or using management) Per installation records Align/adjust as required Torque on antenna mount bolts Tight mount Adjust as required FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 372 of 577 Corrective maintenance consists of the steps described below. The steps provide a logical, sequential method for diagnosing and resolving system problems. Step 1: Define the Symptom This step is generally performed by the customer's field technician or supervisor. Examples of symptoms include “IDU alarm is red”, “complete loss of service”, and “excessive errors”. Symptoms may be constant or intermittent. Constant symptoms require immediate troubleshooting attention. Intermittent symptoms may require circuit monitoring or robust test procedures prior to troubleshooting. Step 2: Isolate the Problem After you have a clear definition of the symptom, the malfunction can be isolated using diagnostics, loopback testing, fault isolation tables/flow charts, test equipment, and manual procedures. This step will identify the specific piece of equipment that is failing. Although it may be difficult at times to immediately determine which part of a radio link is causing the fault, the initial suspicion should be focused on one of the following near-end or far-end issues: Power supplies Fading (due to heavy rain, new obstacle in path, antenna misalignment) External equipment (SDH/SONET, ATM, Fast Ethernet, etc.) Indoor Unit (IDU) Radio Frequency Unit (RFU) RF cable between the RFU and IDU Exposure of equipment to severe conditions (high temperature, etc.) System configuration Step 3: Understand the Problem Once the fault has been isolated, you will need to understand why the fault occurred and what is required to correct it. Use the tables provided in the following sections to understand the problem, and for suggestions of possible solutions. Step 4: Solve the Problem Use the troubleshooting information in this chapter to help solve the problem. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 373 of 577 23.2 LED Indicators The following LEDs are located beneath the external alarms on the front panel: LINK – Indicates status of the radio link. IDU – Indicates status of the Ethernet interface. RFU – Indicates status of the RF module. PROT – Indicates the main and standby unit alarm and protection status. RMT – Indicates status of the remote unit. These LEDs indicate the following: LINK Green – Radio link is operational Orange – Minor BER alarm on the radio Red – Loss of signal, major BER alarm on the radio IDU Green – IDU is functioning normally Orange – Fan failure Red – Alarm on IDU (all severities) RFU Green – RFU is functioning normally Orange – Loss of communication between the IDU and the RFU Red – RFU failure PROT Main Unit – Green – No alarms Standby Unit – Yellow – No alarms Orange – Forced switch, protection lock Red –Physical errors (no cable, cable failure) Off – Protection is disabled, or not supported on the device RMT Green – Remote IDU is functioning normally Orange – Minor alarm on the remote IDU Red – Major alarm on the remote IDU FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 374 of 577 23.3 Configuring External Alarms IP-10G and IP-10E include a DB9 dry contact external alarms interface. The external alarms interface supports five input alarms and a single output alarm. The input alarms are configurable according to: 1 Intermediate 2 Critical 3 Major 4 Minor 5 Warning The output alarm is configured according to predefined categories. To configure external alarms: 1 Select Configuration > General > External Alarms. The External Alarms page opens. 2 In the Alarm Input section: i Click + to expand the alarm you want to configure. ii In the Admin field, select Enable or Disable to activate or disable he alarm input. iii In the Text field, specify a string to use as the alarm description. When an alarm input is raised, this text will appear as the alarm description text. iv In the Severity field, specify the alarm input severity. 3 In the Alarm Output section: i In the Admin field, select Enable or Disable to activate or disable he alarm output. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 375 of 577 ii In the Group field, specify the group of alarms that will trigger an alarm output: Communication - Alarms related to traffic: radio, Ethernet line, TDM line Quality of Service - Alarms related to QoS. Processing - Alarms related to software: configuration, resets, corrupted files Equipment - Alarms related to hardware, fan, RFU mute, power supply, and inventory. Environmental - Alarms relating to temperature. All groups - All of the above groups. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 376 of 577 23.4 Configuring Traps The Trap manager page is used to configure trap forwarding parameters. Each line in the Trap Managers table displays the setup for a manager defined in the system. To configure a trap manager: 1 Select Configuration > General > Traps Configuration. The Traps Configuration page opens. 2 Click the + at the beginning of the line to expand a trap manager. 3 From the Traps admin drop down list, select Enable or Disable to enable or disable the selected trap manager. 4 In the Trap manager field, enter the destination IP address. Traps will be sent to this IP address. 5 In the Manager name field, enter the trap manager’s name. 6 In the Trap port field, enter the number of the port through which traps will be sent. 7 In the SNMP trap Community field, enter the SNMP community name. 8 In the Heartbeat period field, specify the number of minutes between generating heartbeat traps. 9 Optionally, in the Trap CLLI field, enter free text that will be sent with the trap. 10 In the Trap status change filter field, select On if you want a trap to be sent to the manager you defined only when the most-severe alarm of the unit changes. For example, if the most severe status in the system is warning, and a new warning alarm is raised, no trap will be sent (if you selected On for this option). On the other hand, if the new alarm has the severity major, a trap will be sent to the manager you defined. 11 In the Send traps for alarms with severity field, select which severity levels of alarms will be forwarded. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 377 of 577 23.5 Configuring Power Supply Alarms Some IP-10G/E systems are equipped with a dual-power input. In dual-power IDUs, the system indicates whether received voltage in each connector is above or below the threshold power (approximately 40.5v). This is shown in two ways: The LED (and its Web EMS representation) is only on if the voltage is above the threshold. If voltage is below the threshold, a low-input-voltage alarm is raised You can configure the system not to raise an alarm in case of under-voltage for either power input. If the alarm is not disabled, a permanent alarm will exist for a power input that is not in use. To disable a power supply alarm: 1 Select Configuration > General > Dual Power Supply. The Dual Power Supply page opens. 2 For a power supply input that is not in use, select Disable. 3 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 378 of 577 23.6 Viewing Current Alarms To view current alarms: 1 Select Faults > Current Alarms. The Current Alarms page opens. In the Current Alarms table: Date & Time - The date and time the alarm was triggered appear in the column. Severity - The color of the icon indicates the severity of the alarm. Module - The module that generated the alarm. Description - A description of the alarm. To view details of a specific alarm: 1 In the Current Alarms table, click + in the left column to open the alarm details. Probable Cause – Displays the most likely cause of the alarm. Corrective Actions – Displays recommended actions to clear the alarm. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 379 of 577 23.7 Viewing the Event Log The Event log displays a list of historical events and alarm information. The log shows the last 200 events and alarms that occurred. If the number of events/alarms exceeds 200, the oldest events/alarms will be removed. To view the event log: 1 Select Faults > Event Log. The Event Log page opens. In the Event Log table: # - Indicates the number of the event/alarm. Date & Time - Indicates the date and time the event/alarm was triggered. Severity - Indicates the alarm severity. Module - Indicates the module that generated the event/alarm. State - Indicates the event/alarm status [Raised or Cleared]. Description – Provides a description of the event/alarm. To clear the event log, click Clear. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 380 of 577 23.8 Monitoring the IDU-RFU Interface In the IDU-RFU Interface Monitoring page, you can monitor the IDU-RFU traffic. To view communication errors: 1 Select Diagnostics & Maintenance > IDU-RFU Interface Monitoring. The IDU-RFU Interface Monitoring page opens. In the IDU-RFU Communication errors section: RFU receiver errors – Indicates the number of RFU interface errors. IDU receiver errors – Indicates the number of IDU interface errors. To clear IDU error counters, click Clear IDU Errors. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 381 of 577 23.9 Loopback This section includes: Radio Loopback E1/DS1 Line Loopback STM-1/OC-3 Line Loopback Pseudowire Line Loopback FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 382 of 577 23.9.1 Radio Loopback In the Radio loopback page, you can set the parameters for a radio loopback test. To configure radio loopback: 1 Select Diagnostics & Maintenance > Loopback > Radio. The Radio page opens. 2 In the Timeout field, specify the number of minutes before timing out a loopback operation. 3 From the IF loopback drop down list, select On or Off to activate or deactivate IF loopback. 4 From the RFU RF loopback drop down list, select On or Off to activate or deactivate RFU RF loopback. 5 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 383 of 577 23.9.2 E1/DS1 Line Loopback In the PDH line loopback page, you can set the parameters for a loopback test of the E1/DS1 lines. To configure an E1/DS1 line loopback: 1 Select Diagnostics & Maintenance > Loopback > PDH Line. The PDH Line page opens. 2 In the Timeout field, specify the number of minutes before timing out a loopback operation. 3 For each interface, select Loopback towards radio or Off from the State drop down list to specify which ports to include in the loopback operation. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 384 of 577 23.9.3 STM-1/OC-3 Line Loopback In the SDH line loopback page, you can set the parameters for an STM-1/OC-3 loopback test. To configure loopback for an STM-1/OC-3 line: 1 Select Diagnostics & Maintenance> Loopback > SONET Line. The SONET Line page opens. 2 In the Timeout field, specify the number of minutes before timing out a loopback operation. 3 In the STM-1/OC-3 line loopback field, select On if you want to perform a loopback test or Off if you do not want to perform a test. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 385 of 577 23.9.4 Pseudowire Line Loopback In the PDH line loopback page, you can set the parameters for a loopback test of the E1/DS1 lines. To configure an E1/DS1 line loopback: 1 Select Diagnostics & Maintenance > Loopback > Pseudowire TDM Ports. The Pseudowire TDM Ports page opens. 2 In the Pw tdm timeout field, specify the number of minutes before timing out a loopback operation. 3 For each interface, select Loopback towards radio or Off from the State drop down list to specify which ports to include in the loopback operation. 4 Click Apply. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 386 of 577 23.10 Troubleshooting Protection This section includes: Switchover Triggers Copy-to-Mate Mismatch Mechanism FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 387 of 577 23.10.1 Switchover Triggers Switchover triggers are described in the following table, according to their priority, with the highest priority triggers on top. Priority Fault Remark 1 Mate Power OFF - 2 Lockout Does not persist after cold-reset. 3 Force Switch Does not persist after cold-reset. 4 Local Radio LOF - 5 TDM Line LOS / SFP LOS / GBE LOC Electrical GBE LOC is configurable. Only active unit is monitored in this case This fault is only relevant for IP-10G. 6 Change Remote request due to "Radio LOF" - 7 Local Radio Excessive BER Configurable. Irrelevant in „ACM adaptive‟ mode 8 Change Remote due to Radio Excessive BER Irrelevant in ACM adaptive mode 9 Manual Switch - 23.10.2 Copy-to-Mate In order to synchronize the configurations of both local and mate units, a "copy-to-mate" command must be issued by the user on the Active unit. The copy-to-mate command is required whenever a "Configuration Mismatch" alarm is raised. When issuing a copy-to-mate command on the Active unit, all configuration data and files are copied from the Active (local) unit to the Standby (mate) unit, and a cold-reset is automatically performed on the Standby unit. Once the configuration of the units has been synchronized, all radio parameters are automatically copied from the Active unit to the Standby unit upon any user configuration. If the configuration is set via CLI, a write command must be used in order to save the new configuration to the disk. Only if the configuration is saved can it be copied to the mate IDU. In the CLI, adding the argument “—showDiff” to the copy-to-mate command displays extra details about the progress of the process. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 388 of 577 23.10.3 Mismatch Mechanism This mechanism is responsible for detecting if there is a mismatch between the configurations of the local and mate units. This mechanism is activated by the system periodically and independently of other protection mechanisms, at fixed intervals. It is activated asynchronously in both the Active and the Standby units. Once the mismatch mechanism detects a configuration mismatch, it raises a "Mate Configuration Mismatch" alarm. Once the Active and Standby configurations are identical, the mechanism clears the "Mate Configuration Mismatch" alarm. In order to determine which parameters do not match between the units, the user can use the CLI to query the details of the mismatch using the “cfg- mismatch-details” command. If the configuration is adjusting using the CLI, the user must enter a "write" command in order to save the new configuration to the disk. The mismatch mechanism only checks mismatches that have been saved to configuration files. The mismatch mechanism does not display the specific parameters that caused the mismatch. Note: It is important to enter a “copy-to-mate” command whenever a "Mate Configuration Mismatch" alarm has been raised, and to avoid configuring specific parameters in attempting to clear this alarm. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 389 of 577 23.11 XPIC Recovery Mechanism Related topics: Configuring XPIC XPIC and 2+2 Protection The XPIC recovery mechanism is based on signal cancellation and assumes that both of the transmitted signals are received (with a degree of polarity separation). If for some reason, such as hardware failure, one of the carriers stops receiving a signal, the working carrier may be negatively affected by the received signals, which cannot be canceled in this condition. The purpose of the XPIC recovery mechanism is to save the working link while attempting to recover the faulty polarization. The mechanism works as follows: The indication that the recovery mechanism has been activated is a loss of modem preamble lock, which takes place at SNR~10dB. The first action taken by the recovery mechanism is to cause the remote transmitter of the faulty carrier to mute, thus eliminating the disturbing signal and saving the working link. Following this, the mechanism attempts at intervals to recover the failed link. In order to do so, it takes the following actions: The remote transmitter is un-muted for a brief period. The recovery mechanism probes the link to find out if it has recovered. If not, it again mutes the remote transmitter. This action is repeated in exponentially larger intervals. This is meant to quickly bring up both channels in case of a brief channel fade, without seriously affecting the working link if the problem has been caused by a hardware failure. The number of recovery attempts is user-configurable Note: Every such recovery attempt will cause a brief traffic hit in the working link. All the time intervals mentioned above (recovery attempt time, initial time between attempts, multiplication factor for attempt time, number of retries) can be configured by the user, but it is recommended to use the default values. The XPIC recovery mechanism is enabled by default, but can be disabled by the user. 23.11.1 XPIC Events The XPIC events are meant to make system debugging in the field easier, and provide the user with a detailed description of the various steps and actions taken during the XPIC recovery process. However, in a recovery scenario, so many events could be raised that they will fill the alarms log; they can be disabled by the user. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 390 of 577 The following is a list of events that can be raised by the XPIC mechanism: Condition for XPIC not met: This event will include a bitmap error code indicating precisely which condition was not met. The list of conditions and codes is as follows: Bitmask Code Meaning 0x1 Local user configuration is not valid with XPIC 0x2 Mate user configuration is not valid with XPIC 0x4 Local IDU does not support XPIC 0x8 Mate IDU does not support XPIC 0x10 XPIC is not enabled in mate 0x20 Local and Mate scripts are different 0x40 Local RFU does not support XPIC 0x80 Mate RFU does not support XPIC 0x100 Local and Mate RFU type are different 0x200 Local and Mate Tx freq are different 0x400 Local and Mate Rx freq are different Note: Depending on the precise timing, these conditions may be listed in a single event (with the bitmask summing up all the conditions) or in several events, each with a different condition. XPIC state machine events: The following events indicate changes in the XPIC state: Remote TX Mute (try # n) was Set by XPIC Recovery on Slot # n Remote TX Un-mute (try # n ) was Set by XPIC Recovery on Slot # n XPIC Recovery Started on Slot # n XPIC Recovery Finished Successfully on Slot # n XPIC Recovery Finished Unsuccessfully on Slot # n. Remote Mute was Set XPIC Recovery on Slot # n Stopped Due to an External Event XPIC Recovery (XRSM) was disabled XPIC Recovery (XRSM) was enabled FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 391 of 577 23.12 Activating the All-ODU Enclosure The All ODU page allows you to activate support for the All ODU enclosure. When enabled, the enclosure controller can then be powered to monitor fan failure alarms. External Alarm Input #1 becomes an output, which together with 3.3V is used to drive the enclosure’s electronic board. External Alarm Input #2 is set with a specific text & severity, and is used to monitor any enclosure fan failure, and to raise an alarm for it (polarity change was required to adapt it to the enclosure behavior). To enable All ODU support: 1 Select Configuration > General > All ODU. The All ODU page opens. 2 In the All ODU section, select Enable or Disable to enable or disable the All ODU interface. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 392 of 577 24. Appendix A – CLI Reference This appendix includes: Using the CLI CLI Commands and Parameters Basic System Configuration Using CLI FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 393 of 577 24.1 Using the CLI This section explains how to work with the Command Line Interface (CLI). The CLI is used to perform configuration and obtain system statistical and performance information. Using the CLI, you can perform configuration operations for single units, as well as configure several units with a single batch command. In a stacked configuration, all commands are available both in the main and extension units unless otherwise stated. 24.1.1 Access rights CLI access is granted for the following user groups: Viewer - This user only has read-only access. The user can only view parameters and their values, not modify them. Operator - This user has read-write access. The user can read parameters and their values, and modify them. However, this user cannot add or remove other users. Admin - This user has read-write access. The user can read parameters and their values, modify them, and add/remove other users. Technician - This user has read-write access to the OS CLI. User access is controlled by the system Administrator and configured via the Management command group. 24.1.2 Getting started To log in to the CLI: 1 Power on your PC. 2 Make sure that your PC is connected to the management port on the front panel of the IDU. 3 Open the telnet application. Type telnet <IP address of the unit> and press Enter. For a first-time login, login using: User: Admin Password: Admin When using the Hyper Terminal, you should set the terminal speed (in your PC terminal configuration) to 155200 kbps. In addition, it is recommended to select the VT-100 terminal type and set the terminal size to 24 rows, 80 columns. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 394 of 577 24.1.3 Getting help Once you are logged in, you can go to a main command group and its subgroups, type the command you want, and press Tab twice for a list of possible parameter values. In addition, you can type a command and then type a question mark (?) for location-specific information for the command. For example, for the set command, typing set ? and pressing Enter will display a list of optional parameters and a help line. Wherever you are in the command tree, you can obtain a list of available commands by typing Help or (?). Available commands vary according to location in the CLI tree and the type of user. 24.1.4 Basic commands The following basic commands are available when you first log in, if you belong to the Operator user group: Command Function ls List entities get Get parameter set Set parameter help Help cd Change directory exit Exit CLI logout Log out from CLI cli-ver CLI version cls Clear screen shell Enter secondary shell write Write the current switch configuration to the configuration file show-tree Show entity tree find Search for a string in the parameter name and information fields lsp List entity parameters and commands echo Echoing free text to the console In addition, you can use the up/down arrow keys, or the “q” key, when the word “END” appears at the end of the screen. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 395 of 577 24.1.5 Finding commands At any point in the CLI tree, a quick way to find a command is to type find string, and press Enter. For string you can type any word that you think is relevant for a command. For example, if you type find user, and press Enter, you would get a list of commands relating to "user": 1) management/mng-services /users /add-user Add user <name> <group> 2) management/mng-services /users /delete-user Delete user <name> 3) management/mng-services /users /show-users Show users 24.1.6 Command example This example shows how to find a command within a subgroup, and then execute the command. The example starts with the lsp (list parameters) command, and ends with the activation of an interface loopback test. ----------------------------------------------- IP10:/> cd diagnostics/loopback/radio-loopback/ IP10:/diagnostics/loopback/radio-loopback> lsp *********** configuration ******** timeout rw Loopback timeout in minutes *********** statuses ************* counter ro Loopback time left if-loopback rw IF loopback activation rfu-rf-loopback rw RFU RF Loopback Enable Command IP10:/diagnostics/loopback/radio-loopback> set timeout 2 IP10:/diagnostics/loopback/radio-loopback> set if-loopback off on IP10:/diagnostics/loopback/radio-loopback> set if-loopback on Caution: This action affects traffic. This may cause permanent loss of Ethernet traffic & wayside. Consider disabling or physically disconnecting the Ethernet ports of the IDM and Wayside before the loopback activation. Are you sure? (yes/no):yes IP10:/diagnostics/loopback/radio-loopback> ----------------------------------------------- Note: Bridge-related commands need to be followed by a “write” command to be saved. Otherwise, the commands will not be saved following a reset in the system. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 396 of 577 24.1.7 Viewing the command tree At any location within the command group structure, you can type show-tree and press Enter for a list of all the commands in the group you are currently in. The following list appears when you type show-tree. IP-10-SLOT-1:/>show-tree management mng-services cfg-service event-service event-log alarm-service alarm-current alarm-external log-srv security-log pm-service time-service ntp mng-software users radius networking ip-address mng-protocols snmp platform inventory daughter-board license idc-board fpga mate-idu FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 397 of 577 all-odu shelf-manager multi-radio radio-diversity remote-idu remote-co remote-cl radio xpic remote-cl framer mrmc tdm-radio-pm[1-84] modem rfu rfu-sw-upload rfu-co rfu-cl rfic enhanced-hc interfaces auxiliary user-channel eow wayside sync ethernet bridge eth-port[1-8] pdh port-group e1t1-port[1-16] FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 398 of 577 lag-port trails pw-tdm pwc tdm-ports clock-1588 ds0-bundles tunnels pw-profiles pws eth-port service-oam diagnostics rmon loopback line-loopback radio-loopback FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 399 of 577 24.2 CLI Commands and Parameters The following tables list the commands you can use in each command group and sub group. Note: When you enter a group or sub group, you can type a command and then press the Tab key twice (or type a question mark) for a list of values relevant to that command. Group Command Type Description Privilege Access IP-10G echo Command Display a line of text. Operator IP-10G find Command Search for a string in the parameter's entity name and information fields. Viewer IP-10G Lsp Command List entity name and information fields. Viewer IP-10G show-tree Command Show entity tree. Viewer IP-10G write Command Write the current switch configuration into configuration file. Operator 24.2.1 management 24.2.1.1 mng-services Group Command Type Description Privilege Access mng-services Ping Command Ping utility. Operator mng-services telnet Command Telnet utility. Operator 24.2.1.2 cfg-service Group Command Type Description Privilege Access cfg-service set-to-default Command Reset to factory default configuration. Operator Read-write 24.2.1.3 event-service event-log Group Command Type Description Privilege Access event-log clear Command Clear event log. Operator Read-write event-log event-to-syslog Parameter Add event to system log. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 400 of 577 Group Command Type Description Privilege Access event-log show Command Show the event log. Viewer Read-only 24.2.1.4 alarm-service Group Command Type Description Privilege Access alarm-service alarms-set-to-default Command Set all user defined configurations to default. Operator alarm-service alarms-user-defined- fields Parameter Enable or disable user defined alarm fields. Operator Read-write alarm-service edit-alarm Command Edit the alarm severity or description. Operator alarm-service show-alarm Command Show alarm information. Operator alarm-current Group Command Type Description Privilege Access alarm-current most-severe Parameter Indicates the most severe alarm in the system. Viewer Read-write alarm-current show Command Show current alarms. Viewer Read-write alarm-external Group Command Type Description Privilege Access alarm-external external-input[5] Parameter Indicates the current status of the external alarm input. Viewer Read-only alarm-external external- input.admin[5] Parameter Enables or disables external alarm input. Operator Read-write alarm-external external- input.severity[5] Parameter Configures the external input alarm severity. Operator Read-write alarm-external external-input.text[5] Parameter Configures the input alarm description. Operator Read-write alarm-external external-output Parameter Indicates the current status of the external alarm output. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 401 of 577 Group Command Type Description Privilege Access alarm-external external-output.admin Parameter Enables / disables the external output alarm. When Enabled If no alarms are raised, the normally open (N.O.) contact will be opened, while the normally closed (N.C.) contact will be connected to the COM contact. When an alarm is raised, or the system power is OFF, the N.O. will be connected to the COM contact, while the N.C. contact will remain opened. When Test option is selected, the dry contacts behave as an alarm is raised in the system. Operator Read-write alarm-external external-output.group Parameter Configures the external alarm output groups. Operator Read-write 24.2.1.5 pm-service Group Command Type Description Privilege Access pm-service clear-entire-pm Command Clear all PMs. Operator 24.2.1.6 time-service Group Command Type Description Privilege Access time-service dst-end-day Parameter The end day of daylight saving time. Operator Read-write time-service dst-end-month Parameter The end month of daylight saving time. Operator Read-write time-service dst-offset Parameter Daylight saving offset. For a value different then 0, at the starting date of daylight saving time the time will jump forward in this value. At the end date of the daylight saving time, the time will jump backwards in this value. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 402 of 577 Group Command Type Description Privilege Access time-service dst-start-day Parameter The start day of daylight saving time. Operator Read-write time-service dst-start-month Parameter The start month of daylight saving time. Operator Read-write time-service gmt-offset-hours Parameter Daylight saving offset hours. Operator Read-write time-service gmt-offset-minutes Parameter Daylight saving offset minutes. Operator Read-write time-service time-and-date Parameter Current time and date. Time and date format: day-month-year, hours:mins:secs Operator Read-write ntp Group Command Type Description Privilege Access ntp admin Parameter Enable / disable the Network Time Protocol (NTP) administrator. Operator Read-write ntp poll-interval Parameter Polling interval of the network time protocol, in minutes. Viewer Read-only ntp server Parameter Indicates the network time protocol server. Operator Read-write ntp status Parameter Service status of the Network Time Protocol (NTP) administrator. Viewer Read-only ntp sync-server Parameter Identifies the IP address of the NTP server with which the system is currently synchronized. Returned strings: The IP address of the reference NTP server, according to IPv4/v6 format. LOCAL if synchronized on local clock. N/A if not synchronized. Valid only when admin is disabled. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 403 of 577 24.2.1.7 mng-software Group Command Type Description Privilege Access mng-software abort-timer Command Aborts a timed installation process. Note that this command will not stop an installation that is already in progress. Admin mng-software change-server- password Command Change the remote server password. Admin mng-software cleanup Command Remove old or duplicated (kernel) packages, repackaged files, and downgrade files. Operator mng-software common-version-idu Parameter Identifies which application package software version is installed on the IDU. Viewer mng-software common-version-rfu Parameter Identifies which application package software version is installed on the RFU. Viewer mng-software common-version-rfu- downgrade Parameter Indicates the software version of the downgrade package on the RFU. Viewer mng-software common-version-rfu- upgrade Parameter Indicates the software version of the upgrade package on the RFU. Viewer mng-software downgrade Command Downgrade application packages to an older version (downloaded to special downgrade directory). Admin mng-software download Command Download updated software packages from a remote server. Note that software installation is performed locally. Software cannot be installed directly from a remote server. Operator mng-software download-status Parameter Status of the software download. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 404 of 577 Group Command Type Description Privilege Access mng-software installation-timer Parameter The number of minutes for timed software installation operations to this unit. Operator Read-only mng-software install-status Parameter Status of the software installation. Viewer Read-only mng-software kernel-reinstall Command Re-install last installed Linux kernel package. Recommended for corrupt kernel restoration. Admin mng-software package-download Command Download a new software package. Note: specify the package name without the version number. For example, 'abc', not 'abc- 0.0.1'. Admin mng-software package-install Command Specify the software package to install. Note: specify the package name without the version number. For example, 'abc', not 'abc- 0.0.1'. Admin mng-software package-uninstall Command Uninstall a software package. Admin mng-software rollback Command Rollback to the previous software version. Note that any software upgrades to the IDU that were installed after upgrading to the newer version will also be rolled back. Note also that a rollback will not revert a downgrade operation. To “rollback” a downgrade, use the upgrade command instead! Admin mng-software running-version-idu Parameter The running IDU software version identified at the last cold restart. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 405 of 577 Group Command Type Description Privilege Access mng-software server-login Parameter User name for logging in to the remote server. Operator Read-write mng-software server-url Parameter URL of the remote software update server where software updates are located. Operator Read-write mng-software show-packages Command Show available software packages. Operator mng-software timer-downgrade Command Starts the installation timer for downgrading to an older software version (which has already been downloaded). Admin mng-software timer-rollback Command Starts the installation timer for rolling back to the previous software version. Note that any software upgrades to the IDU that were installed after upgrading to the newer version will also be rolled back. Note also that a rollback will not revert a downgrade operation. To “rollback” a downgrade, use the upgrade command instead! Admin mng-software timer-upgrade Command Starts the installation timer for upgrading to a downloaded software version. Operator mng-software time-to-install Parameter The number of minutes left before starting a scheduled software installation operation on this unit. Viewer Read-only mng-software upgrade Command Upgrade installed or requested software from available downloaded software packages. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 406 of 577 Group Command Type Description Privilege Access mng-software verify-packages Command Verify the version of the installed software packages. Note that some packages may be installed but not running (for example, on an IP10-G without a daughter-board). Operator mng-software version-package- name Parameter Common (version holder) package name Viewer Read-only mng-software versions-idu Command Indicates the application version of the installed software package on the IDU. Operator mng-software versions-rfu Command Indicates the application version of the installed software package on the RFU. Operator 24.2.1.8 users Group Command Type Description Privilege Access users add-user Command Add a user to the system. Syntax: add-user <user> <privilege> <number of days for password aging> [account expired YYYY- MM-DD] Admin users blocking-fail-login- time Parameter The number of minutes for blocking access to the system after exceeding the configured threshold for consecutive failed logins. Optional values: 1-1440 Admin Read-write users change-password Command Change a user's password. Syntax: change-password <username> <old- password> <new- password> (separated with spaces) Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 407 of 577 Group Command Type Description Privilege Access users delete-user Command Delete a user from the system. Syntax: delete-user <user> Admin users idle-login-time Parameter Define the number of days before deleting an idle user account. Optional values: [0-90] 0 disables automatic deletion of idle accounts. Admin Read-write users login-fail-threshold Parameter Specify the number of consecutive failed logins before blocking a user from attempting to login again. Optional values: [0-10] Zero (0) disables blocking users after failed login attempts. Admin Read-write users password-first-login- change Parameter Specifies whether a user will be required to change the password when logging in for the first time. Admin users show-users Command Show existing user accounts. Admin 24.2.1.9 log-srv security-log Group Command Type Description Privilege Access security-log view-security-log Command View the security log entries. Admin 24.2.1.10 networking Group Command Type Description Privilege Access Networking auto-negotiation Parameter Enables or disables the Auto Negotiation option, on all management ports. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 408 of 577 Group Command Type Description Privilege Access networking block-management- towards-line Parameter Enable / disable blocking in-band management frames in a Smart Pipe application from egressing via the Ethernet line interface. Operator Read-write networking capacity Parameter Configures the management port‟s range of capacity. Operator Read-write networking duplex Parameter Configures half or full port duplex value on all management ports. Operator Read-write networking ethernet-rate Parameter Configures the Ethernet rate on all management ports. (Mbps) Operator Read-write networking number-of-ports Parameter Configures the number of management ports. Operator Read-write networking type Parameter Configures the port management type. (in-band or out-of-band) Operator Read-write networking vlan Parameter In-Band management VLAN ID [1-4090] Operator Read-write 24.2.1.11 ip-address Group Command Type Description Privilege Access ip-address default-gateway Parameter Configures the local default gateway. Operator Read-write ip-address hw-address Parameter Indicates the MAC address used for management (related to the management IP address of the system). Viewer Read-only ip-address ip-address Parameter Configures the local IP address. Operator Read-write ip-address subnet-mask Parameter Configures the local subnet mask. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 409 of 577 24.2.1.12 floating-ip-address Group Command Type Description Privilege Access floating-ip- address floating-ip Parameter Indicates the floating IP used when the system is in protection mode. The floating IP address must differ from both the system's management IP address and the mate unit's address. Additionally, both units must be in the same subnet. Using 0.0.0.0 disables the active unit from using a floating IP address. Operator Read-write floating-ip- address floating-ip-garp-retries Parameter Specify the floating IP garp number of retries. Admin Read-write floating-ip- address set-fip-lock-timer Command Set the floating IP lock timer. Operator 24.2.1.13 mng-protocols Group Command Type Description Privilege Access mng-protocols communication- inactivity-timeout Parameter Define the communication inactivity timeout period for the management interfaces. Admin mng-protocols status-show Command Show management protocol status. Operator mng-protocols telnet-admin Parameter Enables or disables the Telnet server on the network element. Admin Read-write mng-protocols telnet-status Parameter Indicates the Telnet service status. Viewer Read-only mng-protocols web-admin Parameter Enables / disables secure (HTTP/S) web access protocol. Admin Read-write mng-protocols web-ca-certificate- admin Parameter Enables / disables the Web Certificate Authority (CA) digital certificate. Admin Read-write mng-protocols web-inactivity-timeout Parameter Configures the number of minutes of allowed Web inactivity before automatically logging out. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 410 of 577 Group Command Type Description Privilege Access mng-protocols web-protocol Parameter Specify secure or standard web protocol. HTTP and HTTPS Admin Read-write mng-protocols web-restart Command Restart the web server. Admin mng-protocols web-status Parameter Indicates the web service status. Viewer Read-only 24.2.1.14 snmp Group Command Type Description Privilege Access snmp admin Parameter Enable / disable SNMP access. Admin Read-write snmp change-user-settings Command Modify the SNMPv3 user security level, username, and password settings. SNMPv3 passwords must be at least eight characters long. Admin snmp mib-version Parameter Indicates which private MIB version is required for managing the unit. Viewer Read-only snmp read-community Parameter Configures the password string for the SNMP read community. Operator Read-write snmp status Parameter Indicates the SNMP service status. Viewer Read-only snmp status-show Command Indicates the SNMP service status. Operator snmp trap-admin[4] Parameter Enables / disables a specific manager. The unit will not send traps to a disabled trap manager. Operator Read-write snmp trap-clli[4] Parameter Configures the Common Language Location Identifier (CLLI), a configurable string specifying the type and location of the unit, that is added to forwarded traps. Operator Read-write snmp trap-community[4] Parameter Configures the trap manager community. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 411 of 577 Group Command Type Description Privilege Access snmp trap-heartbeat[4] Parameter Specify the number of minutes for the heartbeat trap interval. Zero (0) disables sending heartbeat traps to the specified trap manager. Operator Read-write snmp trap-manager[4] Parameter Configures the IP address of the target trap manager. Operator Read-write snmp trap-name[4] Parameter Configures the name of the target trap manager. Operator Read-write snmp trap-port[4] Parameter Configures the trap manager's port number. Default: port 162 Operator Read-write snmp trap-severity-filter[4] Parameter Bit mask value for masking traps according to its severity. There is a bit for each severity: Bit 1 – Indeterminate Bit 2 – Critical Bit 3 – Major Bit 4 – Minor Bit 5 – Warning Bit 6 – Cleared Operator Read-write snmp trap-status-change- filter[4] Parameter Enables or disables filtering alarms according to a change in the trap severity filter. Operator Read-write snmp v3-auth-algorithm Parameter Configures the SNMPv3 authentication algorithm. SNMPv3 authentication options: MDS or SHA. This parameter will not be available if the security mode is set to No security. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 412 of 577 Group Command Type Description Privilege Access snmp v3-security-mode Parameter Configures the SNMPv3 security mode. SNMPv3 security modes: No security Authentication Authentication privacy Default: Authentication Viewer Read-only snmp v3-username Parameter SNMPv3 username. Viewer Read-only snmp version Parameter SNMP version. Options: V1, V2c, or V3 Admin Read-write snmp write-community Parameter Configures the password string for the SNMP write community. Operator Read-write 24.2.1.15 platform Group Command Type Description Privilege Access platform fan-unit-type Parameter Indicates the fan type: SuckingAir15mm SuckingAir28mm ThrustingAir28mm Other Operator Read-only platform lan-id Parameter Configures the LAN segment ID. Operator Read-write platform latitude Parameter Configures the unit's latitude coordinates. Operator Read-write platform longitude Parameter Configures the unit's longitude coordinates. Operator Read-write platform max-physical-ports Parameter Configures the maximum number of physical PDS ports. Viewer Read-only platform max-physical-sdh- ports Parameter Configures the maximum number of physical SDH ports Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 413 of 577 Group Command Type Description Privilege Access platform power-supply-1- alarm-admin Parameter Enable or disable the power supply alarm on one of the power supply units. This parameter is relevant only for IDU with more than one power supply units. Operator Read-write platform power-supply-2- alarm-admin Parameter power-supply-2-alarm- admin Operator Read-write platform ps1-led Parameter ps1-led Viewer platform ps2-led Parameter ps2-led Viewer platform slot-label Parameter Configures the slot label, a user defined description for the module in the slot. Operator Read-write platform system-contact- person Parameter Enter the name of the person to be contacted when a problem with the system occurs. Operator Read-write platform system-description Parameter Configures additional identification details about the system. Viewer Read-only platform system-location Parameter Specify the physical location of the node. Operator Read-write platform system-location-bay Parameter System location bay Operator Read-write platform system-location-shelf Parameter System location shelf Operator Read-write platform system-name Parameter Configures a name for the node. By convention, this is the node‟s fully qualified domain name. Operator Read-write platform system-services Parameter Number of services provided by the system according to the rfc3418. Viewer Read-only 24.2.1.16 Inventory Group Command Type Description Privilege Access inventory board-modules Parameter Board modules Viewer Read-only inventory board-sub-type Parameter Board sub-type Viewer Read-only inventory board-type Parameter Board type Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 414 of 577 Group Command Type Description Privilege Access inventory chain-firmware Parameter Chain firmware Viewer Read-only inventory chain-hardware- features Parameter Chain hardware features Viewer Read-only inventory chain-sub-type Parameter Chain sub-type Viewer Read-only inventory chain-type Parameter Chain type Viewer Read-only inventory comments Parameter Text description of the board Operator Read-write inventory company-name Parameter Company name Admin Read-write inventory date-code Parameter Date of board testing (number of seconds from 1/1/1970) Viewer Read-only inventory firmware Parameter Firmware Viewer Read-only inventory hardware Parameter Hardware Viewer Read-only inventory hass-number Parameter Number of hass testing Viewer Read-only inventory hw-feature Parameter HW features Viewer Read-only inventory hw-inventory-version Parameter The hw inventory version Viewer Read-only inventory hw-supported-bit-bate Parameter HW supported bit rate Viewer Read-only inventory idc-firmware Parameter IDC firmware Viewer Read-only inventory idc-hardware-features Parameter The hardware features of the IDC Viewer Read-only inventory idc-sub-type Parameter The sub-type of the IDC Viewer Read-only inventory idc-type Parameter The type of IDC Viewer Read-only inventory license-demo-timer Parameter Indicates the number of remaining hours for demo mode. The demo license is limited to 60 days. An event will be raised 10 days before expiration. Viewer Read-only inventory license-register Parameter System license features Viewer Read-only inventory logo Parameter Company logo Admin Read-write inventory main-view Parameter Company main logo Admin Read-write inventory modem-firmware Parameter The firmware of the modem Viewer Read-only inventory modem-hardware- features Parameter The hardware features of the modem Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 415 of 577 Group Command Type Description Privilege Access inventory modem-sub-type Parameter The sub-type of the modem Viewer Read-only inventory modem-system-rate Parameter The frequency of the clock for the PVG Viewer Read-only inventory modem-type Parameter The type of modem Viewer Read-only inventory mux-firmware Parameter The firmware of the MUX Viewer Read-only inventory mux-hardware- features Parameter The hardware features of the MUX Viewer Read-only inventory mux-sub-type Parameter The sub-type of the MUX Viewer Read-only inventory mux-type Parameter The type of MUX Viewer Read-only inventory num-of-10-100-1000- interfaces Parameter Number of 10/100/1000 interfaces Viewer Read-only inventory num-of-fe-interfaces Parameter Number of fast Ethernet interfaces Viewer Read-only inventory num-of-radio- interfaces Parameter Number of Radio interfaces Viewer Read-only inventory num-of-sfp-interfaces Parameter Number of SFP interfaces Viewer Read-only inventory num-of-tdm-interfaces Parameter Number of TDM interfaces Viewer Read-only inventory num-of-working-hours Parameter Counter of working hours of the board Viewer Read-only inventory part-number Parameter Part number of the application in the board Viewer Read-only inventory pic-version Parameter The version of the pic Viewer Read-only inventory production-inventory- version Parameter The production inventory version Viewer Read-only inventory product-name Parameter Product name Admin Read-write inventory rx-master-iq-delay Parameter RX IQ delay - Rx Master delay Viewer Read-only inventory rx-master-iq-delay- index-in-fdf-table Parameter RX IQ Delay - Rx Master index in fdf table Viewer Read-only inventory rx-slave-iq-delay Parameter RX IQ delay - Rx slave delay Viewer Read-only inventory rx-slave-iq-delay- index-in-fdf-table Parameter RX IQ delay - Rx slave index in fdf table Viewer Read-only inventory serial-number Parameter The serial number of the board Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 416 of 577 Group Command Type Description Privilege Access inventory signature Parameter The signature of the board Viewer Read-only inventory spare1 Parameter Spare 1 Viewer Read-only inventory spare2 Parameter Spare 2 Viewer Read-only inventory spare3 Parameter Spare 3 Viewer Read-only inventory total-num-of- interfaces Parameter Total number of interfaces Viewer Read-only inventory tx-iq-delay Parameter TX IQ delay - TX delay Viewer Read-only inventory tx-iq-delay-index-in- fdf-table Parameter TX IQ Delay - Tx index in fdf table Viewer Read-only inventory type-of-tdm-interfaces Parameter Type of TDM interfaces Viewer Read-only inventory xc-firmware Parameter The firmware of the XC Viewer Read-only inventory xc-hardware-features Parameter The hardware features of the XC Viewer Read-only inventory xc-sub-type Parameter The sub-type of the XC Viewer Read-only inventory xc-type Parameter The type of XC Viewer Read-only 24.2.1.17 daughter-board Group Command Type Description Privilege Access daughter-board board-sub-type Parameter Viewer Read-only daughter-board board-type Parameter Viewer Read-only daughter-board comments Parameter Text description about the daughter board Viewer Read-only daughter-board date-code Parameter Date of daughter board testing (number of seconds from 1/1/1970) Viewer Read-only daughter-board firmware Parameter Viewer Read-only daughter-board hardware Parameter Viewer Read-only daughter-board hass-number Parameter Number of hass DB testing Viewer Read-only daughter-board num-of-interfaces Parameter Viewer Read-only daughter-board num-of-working-hours Parameter Counter of working hours of the Daughter board Viewer Read-only daughter-board part-number Parameter Part number of the application in the daughter board Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 417 of 577 Group Command Type Description Privilege Access daughter-board running-firmware- version Parameter Viewer Read-only daughter-board serial-number Parameter The serial number of the daughter board Viewer Read-only 24.2.1.18 license Group Command Type Description Privilege Access license acm-license Parameter Indicates whether user of use of dynamic ACM radio scripts is allowed. Viewer Read-only license asymmetrical-scripts- license Parameter Indicates whether asymmetrical scripts are licensed for use. This license helps to optimize bandwidth usage, by diverting available capacity from the uplink to the downlink. Viewer Read-only license capacity-name Parameter Configures the radio bandwidth capacity. Viewer Read-only license current-license-code Parameter Indicates the license code that determines the unit‟s license rights. Operator license date-code Parameter Indicates the license date code. Viewer license demo-admin Parameter Enables or disables the demo license. This is a temporary license that allows access to maximum capacity and all features. Operator Read-write license demo-timer Parameter Indicates the number of remaining hours for demo mode. The demo license is limited to 60 days. An event will be raised 10 days before expiration. Viewer Read-only license enhanced- compression-license Parameter Indicates whether header compression is allowed. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 418 of 577 Group Command Type Description Privilege Access license license-code Parameter Configures the license code that determines the unit‟s license rights. Operator Read-write license license-type Parameter Configures the unit‟s license type: Default, Normal, or Demo. The license type determines the availability of system features. Viewer Read-only license network-resiliency- license Parameter Indicates whether the network resiliency license is allowed. This license allows configuration of features that make use of loop network topologies such as ring RSTP and SNCP (TDM trails protection). Note that for systems in which these features were enabled in previous versions, the features will be allowed even if no resiliency alarm is purchased. Viewer Read-only license per-usage-license Parameter Indicates whether the per- usage license is allowed. This license allows unlimited usage of all features in the system. Users are billed according to actual use. The system alerts users when a chargeable feature is activated. Viewer Read-only license signature Parameter license signature Viewer Read-only license switch-application- license Parameter Allows use of Managed and Metro switch Ethernet applications. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 419 of 577 Group Command Type Description Privilege Access license syncu-license Parameter Indicates whether the synchronization unit license is allowed. This license allows configuration of external source as a clock source for synchronous Ethernet output, provided that the IDU‟s hardware supports synchronization). If this license is not installed, the Ethernet clock source can only be a local (internal) clock. Viewer Read-only license tdm-capacity-license Parameter Limits the bandwidth of the radio script that can be loaded. Applies only if the TDM- only license is disabled. Viewer Read-only license tdm-capacity-value Parameter Indicates the number of TDM trails per radio allowed by the current license. The TDM capacity value is relevant only if the TDM Capacity license is enabled. Viewer Read-only license tm-license Parameter Indicates whether Enhanced QoS is allowed. Viewer Read-only license validation-number Parameter Indicates the license validation number. Viewer 24.2.1.19 idc-board Group Command Type Description Privilege Access idc-board change-user- password Command Change the user password for the current FTP session. When using default user name (anonymous), login with PC (host) as the password. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 420 of 577 Group Command Type Description Privilege Access idc-board cli-script Command Execute, show or delete a CLI configuration script. Operator idc-board cli-script-file-name Parameter Specifies the file name of the CLI script to be downloaded to the NE. Operator Read-write idc-board config-creation-status Parameter Indicates the status of the unit information archive creation operation. Viewer Read-only idc-board config-download- status Parameter Indicates the status of the configuration backup file transfer from an external FTP site to the IDU. Viewer Read-only idc-board config-install-status Parameter Indicates the status of the configuration settings restore operation. Viewer Read-only idc-board config-upload-status Parameter Indicates the status of the archive storage operation. Viewer Read-only idc-board create-archive Command Creates a configuration archive file. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 421 of 577 Group Command Type Description Privilege Access idc-board create-csr-file Command Create a Certificate Signing Request (CSR) file, with optional identification fields. Common name The identify name of the element in the network (e.g. IP address). Organization The legal name of the organization. Organizational Unit The division of the organization handling the certificate. City/Locality The city where the organization is located. State/County/Region The state/region where the organization is located. Country The two-letter ISO code for the country where the organization is location. Email address An email address used to contact your organization. The common name could be network IP or the FQDN of the element. If the identifier is IP address, then the creation tool should support this option. Admin Read-write idc-board download-archive Command Get an archive file from the PC (host) onto the target. Before activating this command, make sure to set host-ip, host-path, user-name and user- password. Operator Read-write idc-board download-cli-script- status Parameter Indicates the download status of a CLI script. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 422 of 577 Group Command Type Description Privilege Access idc-board download-security- status Parameter Indicates the download status of the specified security file. Viewer Read-only idc-board file-transfer-protocol Parameter Specify the FTP protocol: SFTP or FTP. Admin Read-write idc-board host-ip Parameter Specify the IP address of an upload or download operation. Admin Read-write idc-board host-path Parameter Relative path (under the ftp directory) on the host where the archive is to be stored. Default ftp path: set // for Windows or set / for Linux. Admin Read-write idc-board hw-mode Parameter Hardware Mode (standalone or xc) Viewer Read-only idc-board idc-clli Parameter General CLLI field Operator Read-write idc-board idu-led Parameter IDU LED Viewer Read-only idc-board install-archive Command Install the requested archive file on target Admin Read-write idc-board kernel-modules- version Parameter Identifies current kernel- modules package set version Viewer Read-only idc-board measurement-system Parameter Measurement system Operator Read-write idc-board protection-led Parameter Protection LED Viewer Read-only idc-board radio-led Parameter Radio LED Viewer Read-only idc-board remote-led Parameter Remote LED Viewer Read-only idc-board reset-idc-hw Command Reset the IDC - cold (HW) reset Operator idc-board rfu-led Parameter RFU LED Viewer Read-only idc-board security-file-format Parameter The certificate format to use for authentication. Admin Read-write idc-board security-file-name Parameter The security filename (for upload/download purpose) Admin Read-write idc-board show-csr-file Command Show Certificate Signing Request (CSR) file. Admin idc-board slot-id Parameter Slot ID (within the XC node) Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 423 of 577 Group Command Type Description Privilege Access idc-board status-text- indication[2] Parameter Internal status text indication array Viewer Read-only idc-board system-up-time Parameter System up time (in hundredths of seconds) Viewer Read-only idc-board temperature Parameter IDU temperature Viewer Read-only idc-board unit-info-creation- status Parameter Status of the unit-info creation action Viewer Read-only idc-board unit-info-upload- status Parameter Status of the archive storage action Viewer Read-only idc-board upload-archive Command Upload the archive file to the PC (host). Before activating this command, make sure to set host-ip, host-path, user-name and user-password Operator idc-board upload-csr-file-status Parameter Indicates the upload status of the CSR file. Viewer Read-only idc-board upload-pub-key- status Parameter Status of the public key uploading Viewer Read-only idc-board user-name Parameter User name for the ftp session Admin Read-write idc-board version Parameter IDC version Viewer Read-only idc-board voltage-input Parameter Voltage input Viewer Read-only idc-board warning-banner- download-status Parameter Operational status of a warning banner download. Viewer Read-only idc-board warning-banner-file- name Parameter Specify the warning banner file name to be downloaded to the NE. Admin Read-write idc-board xc-role Parameter XC Role (Main or Extension) Viewer Read-only 24.2.1.20 fpga Group Command Type Description Privilege Access fpga main-fpga-running-fw- version Parameter Main FPGA running FW Version Viewer Read-only fpga secondary-fpga- running-fw-version Parameter Secondary FPGA running FW Version Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 424 of 577 24.2.1.21 mate-idu Group Command Type Description Privilege Access mate-idu cfg-mismatch-details Command Show configuration mismatch details. Operator mate-idu copy-to-mate-cmd Command Copies configured parameters from the active to the standby unit. Operator mate-idu copy-to-mate-status Parameter Indicates the status of the Copy-to-Mate operation when protection is enabled. Viewer Read-only mate-idu excessive-ber-switch- admin Parameter Enables or disables using the excessive bit error rate (BER) alarm threshold as protection switch criteria. When enabled, crossing the excessive BER threshold will cause a protection switch. Operator Read-write mate-idu manual-switch-cmd Command Allows a manual protection mode switch. Operator mate-idu mate-communication- status Parameter Indicates the mate unit‟s communication status with protecting IDU. Viewer Read-only mate-idu mate-ip-address Parameter Configures the mate IP address. For 1+1 protection, it is the mate IP address of the protected card. For 2+2 protection, it is the mate IP address of the protected unit. Viewer Read-only mate-idu mate-mac-address Parameter Configures the mate MAC address. For 1+1 protection, it is the mate MAC address of the protected card. For 2+2 protection, it is the mate MAC address of the protected unit. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 425 of 577 Group Command Type Description Privilege Access mate-idu multi-unit-lag-admin Command Enables the Multi Unit LAG feature. It can only be activated in Smart Pipe configuration, and only when protection is active (either 1+1 or 2+2). Operator Read-write mate-idu protection-admin Parameter Activates or deactivates protection. For 2Plus2Hsb, this parameter should be configured in both the main and extension slots. Operator Read-write mate-idu protection-force- switch Parameter Allows forcing a particular card to switch protection mode. Operator Read-write mate-idu protection-lockout Parameter Locks the mode of each card in the protection, to ensure that a protection switch will not occur. Operator Read-write mate-idu protection-mode Parameter Indicates whether the card is in active or standby protection mode. Viewer Read-only mate-idu switchover-on- copper-loc Parameter Switchover on Copper LOC Admin 24.2.1.22 all-odu Group Command Type Description Privilege Access all-odu admin Parameter Enable / disable configuring the unit as an all outdoor unit. Operator Read-write 24.2.1.23 shelf-manager Group Command Type Description Privilege Access shelf-manager alive-slot- population[6] Parameter Indicates if the specified slot is occupied or not. Viewer Read-only shelf-manager archive-operating- units Parameter Number of units still being processed by the last archive operation command. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 426 of 577 Group Command Type Description Privilege Access shelf-manager archives-operation- status Parameter Shelf-wide configuration archive operation status. Used when creating or restoring a unit information archive. Viewer Read-only shelf-manager cfg-backup-show Command Show extension unit configuration backup information. Viewer shelf-manager config-backup Command Backup extension unit configuration archives on the main unit's storage device. Operator shelf-manager config-restore Command Restore extension unit configuration archives from the main unit's storage device. Admin shelf-manager extension-units- protection-admin[6] Parameter Activate or deactivate protection for extension units in the shelf. Viewer shelf-manager logon-unit Command Login to an extension unit in the shelf. Viewer shelf-manager radio-interfaces[6] Parameter Indicates the number of available radio interfaces in the specified slot. Viewer Read-only shelf-manager reset-extensions Command Allow resets for extension units in the shelf. Operator shelf-manager reset-shelf Command Reset the entire shelf. Operator shelf-manager reset-unit Command Reset a specific unit in the shelf. Operator shelf-manager sdh-interfaces[6] Parameter Indicates the number of available SDH interfaces in the specified slot. Viewer Read-only shelf-manager shelf-info-create Command Create unit information archive for units in the shelf. Operator Read-write shelf-manager shelf-most-severe- alarm[6] Parameter Indicates the severity level of the most severe alarm for the module on this slot. Viewer Read-only shelf-manager shelf-versions Command Show SW version information for all units in a shelf. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 427 of 577 Group Command Type Description Privilege Access shelf-manager slot-population[6] Parameter Indicates availability of the specified slot. Viewer Read-only shelf-manager TDM-interfaces[6] Parameter Indicates the number of available TDM interfaces in the specified slot. Viewer Read-only shelf-manager unit-config-backup Parameter Create configuration archives for all units in a shelf. Operator Read-write 24.2.1.24 remote-idu Group Command Type Description Privilege Access remote-idu force-unmute Command Unmute a remote radio. Operator Read-write remote-idu remote-atpc-admin Parameter Remote IDU ATPC enable/disable configuration Operator Read-write remote-idu remote-atpc-ref-rx- level Parameter Remote ATPC reference Rx level configuration Operator Read-write remote-idu remote- communication Parameter Remote communication status Viewer Read-only remote-idu remote-default- gateway Parameter Remote IDU default gateway Operator Read-write remote-idu remote-floating-ip- address Parameter Remote shelf floating IP address Operator Read-write remote-idu remote-force-max-tx- level Parameter Force remote Max transmit level configuration Operator Read-write remote-idu remote-force-mute-tx Parameter Force remote Mute transmit configuration Operator Read-write remote-idu remote-green-mode- admin Parameter Remote IDU green mode enable/disable configuration Operator Read-write remote-idu remote-ip-address Parameter Remote IDU IP address Operator Read-write remote-idu remote-link-id Parameter Remote IDU link ID Operator Read-write remote-idu remote-management- type Parameter Remote Management type status Operator Read-write remote-idu remote-management- vlan Parameter Remote Management VLAN ID configuration Operator Read-write remote-idu remote-most-severe- alarm Parameter Remote most severe alarm status Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 428 of 577 Group Command Type Description Privilege Access remote-idu remote-reset-idc-hw Command Reset the remote IDC - cold (HW) reset Operator remote-idu remote-rx-level Parameter Remote Rx level status Viewer Read-only remote-idu remote-slot-id Parameter Remote slot id Viewer Read-only remote-idu remote-subnet-mask Parameter Remote IDU subnet mask Operator Read-write remote-idu remote-web-protocol Parameter Remote IDU web protocol type Viewer Read-only 24.2.1.25 remote-cl Group Command Type Description Privilege Access remote-cl clear-device-error Command clear device error counter Operator Read-write remote-cl device-error Parameter Device errors Viewer Read-only 24.2.1.26 remote-co Group Command Type Description Privilege Access remote-co clear-device-error Command clear device error counter Operator Read-write remote-co device-error Parameter Device errors Viewer Read-only 24.2.1.27 radio-diversity Group Command Type Description Privilege Access radio-diversity clear-switch-counter Command Clears the switch counter. Operator Read-write radio-diversity force-to-radio Parameter Defines which radio to use for incoming traffic. Should only be used for testing purposes. Operator Read-write radio-diversity operation-mode Parameter parameters to indicate whether the diversity mechanism is in operational mode ON/OFF Viewer Read-only radio-diversity primary-radio Parameter Configures which IDU to use as the primary radio channel. Operator Read-write radio-diversity radio-diversity-type Parameter Configures the type of hitless diversity to be used. Relevant only when protection is enabled. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 429 of 577 Group Command Type Description Privilege Access radio-diversity receive-radio-traffic Parameter Indicates which radio is in use for incoming traffic. Viewer Read-only radio-diversity revertive-mode Parameter Determines whether hitless switches are revertive in the event that the primary radio channel does not have any errors. Operator Read-write radio-diversity revertive-timer Parameter Configures the minimum amount of seconds without a failure in the primary radio, before performing a revertive switch. Operator Read-write radio-diversity switch-counter Parameter Indicates the number of diversity switches performed since last time counter was cleared. Viewer Read-only radio-diversity switch-request Command Switch primary diversity radio. Operator Read-write 24.2.1.28 multi-radio Group Command Type Description Privilege Access multi-radio admin Parameter Enables/disables the Multi-Radio feature for this radio. Notice that for the feature to work it must be configured in two adjacent radios (odd and even slots). Operator Read-write multi-radio block-radio Parameter Allows stopping distribution of data to different radios in Multi- Radio mode for debugging purposes. Operator multi-radio excessive-ber-admin Parameter Configures whether in Multi-Radio mode data stops being distributed to the radio when there is an excessive BER condition. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 430 of 577 Group Command Type Description Privilege Access multi-radio shutdown-link-on- radio-fault Parameter Enables / disables initiation of automatic state propagation upon a failure in each one of the radios. Admin multi-radio signal-degrade-admin Parameter Configures whether in Multi-Radio mode data stops being distributed to the radio when there a signal degraded condition. Operator multi-radio unit-role Parameter Configures the role of the current unit(master or slave). Viewer 24.2.1.29 radio Group Command Type Description Privilege Access radio current-available- capacity Parameter Indicates the available capacity available for Ethernet bandwidth. Viewer Read-only radio compression-mode Command Configures the type of compression mode: legacy or enhanced. Operator Read-write radio high-priority-ethernet- bw Parameter Configures the amount of bandwidth reserved for high-priority Ethernet. (in Kbps) Operator Read-write radio interface-alias Parameter Free text used to describe the interface. This description can contain up to 64 characters. Operator Read-write radio max-available-tdm- cap Parameter Indicates the maximum number of radio TDM channels. Viewer Read-only radio mhc-admin Parameter Enable or disable MAC header compression. Operator Read-write radio radio-if-interface Parameter Enable / disable the radio. Operator Read-write radio radio-if-interface- operational-status Parameter Indicates the radio‟s operational status. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 431 of 577 Group Command Type Description Privilege Access radio radio-port-discarded- oversize-frames Parameter Shows the oversize discarded frames counter. This counter will be reset upon RMON reset. Operator Read-only radio sync-clock-source- channel Parameter VC number to be used when source is VC. Operator Read-write radio traffic-priority-scheme Parameter Configures the relative priority of different traffic streams. High-tdm-over-high- ethernet priorities: (1) TDM high priority (2) Ethernet high priority (3) TDM low priority (4) Ethernet low priority. High-Ethernet-over-tdm priorities: (1) Ethernet high priority (2) TDM high priority (3) TDM low priority (4) Ethernet low priority. Tdm-over-ethernet priorities: (1) TDM high priority (2) TDM low priority (3) Ethernet Operator Read-write radio xpic-mr-mate-position Parameter Configures the multi-radio mate position: Horizontal or Vertical. Operator Read-write 24.2.1.30 xpic Group Command Type Description Privilege Access xpic debug-current-config- status Parameter Current XPIC configuration status flag. Viewer Read-only xpic events-enable Parameter Enable logging of XPIC events. Operator Read-write xpic slave-if-loopback Parameter Allows slave to update master of IF loopback event. Viewer Read-only xpic slave-mute- transmitter Parameter Allows slave to update master of RFU mute event. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 432 of 577 Group Command Type Description Privilege Access xpic slave-rfu-comm- status Parameter Allows slave to update master of RFU comm status event. Viewer Read-only xpic slave-xpic-enable Parameter Allows slave to update master of XPIC enable event. Viewer Read-only xpic slave-xpic-lop Parameter Allows master to request slave XPIC LOP status. Viewer Read-only xpic slave-xpi-mute Parameter Allows master to set slave XPIC MUTE. Viewer Read-only xpic user-rfu-mute Parameter Allows master to read current status if RFU mute on disk. Viewer Read-only xpic xpic-status Parameter XPIC script has been loaded. Viewer Read-only xpic xrsm-cfg-delay- between-retries Parameter Delay duration between XRSM retries to re- establish XPIC communications. Operator Read-write xpic xrsm-cfg-duration-of- retry Parameter Delay duration of XRSM retry to re-establish XPIC communications. Operator Read-write xpic xrsm-cfg-enable Parameter Enables the operation of XRSM when LOP is detected. Operator Read-write xpic xrsm-cfg-num-of- retries Parameter Number or XRSM attempts to re-establish XPIC communications. Operator Read-write xpic xrsm-cfg-retry-length- mul-factor Parameter Multiplication factor of time between XRSM retries. Operator Read-write 24.2.1.31 framer Group Command Type Description Privilege Access framer link-id Parameter Link ID Operator Read-write framer oper-status Parameter Indicates the radio‟s operational status. Viewer Read-only framer radio-ber Parameter Current radio bit rate error (BER). Viewer Read-only framer radio-excessive-ber- threshold Parameter Configures the radio's Excessive BER threshold. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 433 of 577 Group Command Type Description Privilege Access framer radio-pm-15min- interval[96] Parameter Radio 15 minute interval performance monitor. Viewer Read-only framer radio-pm-24hour- interval[30] Parameter Radio 24 hour interval performance monitor. Viewer Read-only framer radio-signal-degrade- threshold Parameter Configures the radio's Signal Degrade threshold. Operator Read-write 24.2.1.32 mrmc Group Command Type Description Privilege Access mrmc acm-profile-degrade- threshold Parameter Threshold for MRMC profile degrade alarm generation. If enabled,, when an ACM interrupt is received, the software will initiate timer when current profile is below user defined threshold. If the profile changes but remains above the threshold, timer will be stopped and no alarm will be generated. Operator Read-write mrmc adaptive-tx-power- admin Parameter Enables/ disables the Tx adaptive power option. Viewer Read-write mrmc adaptive-tx-power- reference-class Parameter Indicates the Tx adaptive power reference class. Viewer Read-only mrmc change-script-cmd Command Change the modem script. Operator Read-write mrmc connected-rfu-grade Parameter Indicates the grade of the RFU connection. Viewer Read-only mrmc current-acm-adaptive- rx-profile Parameter Indicates the current ACM receiving profile. Viewer Read-only mrmc current-acm-adaptive- tx-profile Parameter Indicates the current ACM transmitting profile. Viewer Read-only mrmc current-acm-mode Parameter Indicates the current ACM mode. Viewer Read-only mrmc current-asymmetrical- script-mode Parameter Indicates the current asymmetrical script mode. Viewer Read-only mrmc current-rx-bitrate Parameter Indicates the current Rx bit rate. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 434 of 577 Group Command Type Description Privilege Access mrmc current-rx-profile Parameter Indicates the modem's current receiving profile. Viewer Read-only mrmc current-rx-qam Parameter Indicates the current modulation by the receiver. Viewer Read-only mrmc current-rx-vc Parameter Indicates the current number of TDM Rx channels. Viewer Read-only mrmc current-script-capacity Parameter current-script-capacity Viewer Read-only mrmc current-tx-bitrate Parameter Indicates the current Tx bit rate. Viewer Read-only mrmc current-tx-profile Parameter Indicates the current ACM transmitting profile. Viewer Read-only mrmc current-tx-qam Parameter Indicates the current modulation for transmission. Viewer Read-only mrmc current-tx-vc Parameter Indicates the current number of TDM Tx channels. Viewer Read-only mrmc en-alarm-on-acm- profile-degrade Parameter Enable / disable event and trap generation on ACM profile degrade. When enabled and if current radio script supports Adaptive Code Modulation (ACM) event and trap will be generated upon TX ACM profile degradation below the user-defined threshold. An alarm will be generated only if the ACM profile stays below the threshold for at least 5 subsequent seconds. The alarm will be cleared after ACM profile returns to be above the threshold again. Operator Read-write mrmc eth-shutdown- threshold-profile Parameter Enables / disables initiation of automatic state propagation upon a failure in each one of the radios. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 435 of 577 Group Command Type Description Privilege Access mrmc loaded-script- description Parameter Loaded script description Viewer Read-only mrmc loaded-script-version Parameter Indicates the version of the loaded modem script. Viewer Read-only mrmc max-adaptive-acm-rx- profile Parameter Indicates the maximum adaptive ACM Rx profile. Viewer Read-only mrmc max-radio-vc Parameter Indicates the maximum script capacity. Viewer Read-only mrmc max-rx-vc Parameter Indicates the maximum Rx VC profile. Viewer Read-only mrmc min-acm-profile Parameter Restricts the modem to a minimal threshold. Viewer Read-only mrmc min-adaptive-acm-rx- profile Parameter Restricts the modem to a minimal receiving threshold. Viewer Read-write mrmc min-rx-vc Parameter Restricts the modem to a minimum number of TDM receiving channels. Viewer Read-only mrmc mrmc-pm-15min- interval[96] Parameter MRMC 15 minute interval performance monitor. Viewer Read-only mrmc mrmc-pm-24hour- interval[30] Parameter MRMC 24 hour interval performance monitor. Viewer Read-only mrmc mrmc-script Parameter Radio scheme (Bit Rate, Occupied BW, Modulation and Grade). Occupied BW Vs Channel Separation are listed in pairs: (Occupied BW Range[MHz], Channel Separation [MHz]): (5-7,7) (8-10,10) (12-14,13.75-15) (25-29,27.5-30) (33-38,40) (50-55,55-56) Viewer Read-only mrmc occupied-bandwidth Parameter Indicates the actual bandwidth occupied by the radio signal. (MHz) Viewer Read-only mrmc operation-mode Parameter Indicates the current ACM mode. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 436 of 577 Group Command Type Description Privilege Access mrmc rfu-chosen-grade Parameter Indicates the chosen RFU grade. Viewer Read-only mrmc rx-max-chosen-bitrate Parameter Indicates the maximum bit for the Rx profile. Viewer mrmc rx-occupied-bw Parameter Indicates the actual occupied Rx bandwidth. Viewer mrmc script-package- version Parameter Indicates the version of the modem script package. Viewer Read-only mrmc tx-max-chosen-bitrate Parameter Indicates the maximum bit for the Tx profile. Viewer mrmc tx-occupied-bw Parameter Indicates the actual occupied Tx bandwidth. Viewer 24.2.1.33 tdm-radio-pm Group Command Type Description Privilege Access tdm-radio-pm tdm-radio-pm-15min- interval[96] Parameter TDM radio UAS PM 15 minutes monitoring. Viewer Read-only tdm-radio-pm tdm-radio-pm-24hour- interval[30] Parameter TDM radio UAS PM 24 hours monitoring. Viewer Read-only 24.2.1.34 modem Group Command Type Description Privilege Access modem clear-counters Command Clear accumulated counters. Operator Read-write modem defected-blocks Parameter Indicates the number of defective radio blocks. Viewer Read-only modem ldpc-decoder-stress Parameter LDPC decoder stress Viewer Read-only modem mse Parameter Mean Square Error (MSE) of the Rx signal. Viewer Read-only modem mse-threshold Parameter The threshold above which MSE exceeded seconds will be counted as errored seconds. Operator Read-write modem pm-15min-interval[96] Parameter Modem 15 minute interval performance monitor. Viewer Read-only modem pm-24hour- interval[30] Parameter Modem 24 hour interval performance monitor. Viewer Read-only modem slicer-input-scaling Parameter Slicer input scaling information. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 437 of 577 Group Command Type Description Privilege Access modem xpi Parameter Indicates the current XPI level. Viewer Read-only modem xpi-threshold Parameter The threshold below which Cross Polar Interface (XPI) exceeded seconds will be counted as errored seconds. Operator Read-write 24.2.1.35 rfu Group Command Type Description Privilege Access rfu atpc-admin Parameter Enable / disable Automatic Transmit Power Control (ATPC) mode. Operator Read-write rfu atpc-override-state Parameter Indicates the ATPC override state. Viewer rfu atpc-override-tx-level Parameter Configures the default ATPC override transmission signal level. Operator Read-write rfu atpc-ref-rx-level Parameter Configures the ATPC RSL reference level. Operator Read-write rfu atpc-timeout Parameter Configures the ATPC override timer. When this timer expires, the system transmits at the defined default level. Operator Read-write rfu atpc-timer-counter Parameter Indicates the number of seconds passed since ATPC mode started. ATPC override mode is initiated when this counter reaches the configured ATPC timeout. Viewer rfu atpc-timer-override- cancel Command Cancels ATPC override mode. Operator Read-write rfu automatic-delay- calibration Command Automatic IF combining delay calibration. Operator Read-write rfu automatic-delay- calibration-status Parameter Automatic delay calibration status (inbound frequency combining parameter). Viewer Read-only rfu band Parameter RFU band status. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 438 of 577 Group Command Type Description Privilege Access rfu cable-tilt Parameter RFU cable tilt status. Viewer Read-only rfu clear-com-device- error Command Clear RFU communication device error. Operator Read-write rfu communication-status Parameter Indicates the communication status of the RFU with the remote unit. Viewer Read-only rfu data-sci-errors Parameter Number of data SCI errors. Viewer Read-only rfu delay-calibration Parameter IF combining delay calibration. Operator Read-write rfu en-alarm-gen-on-rsl- degrade Parameter Enable/Disable alarm generation on RSL degradation. If enabled, an alarm will be generated when the current RSL level degrades below the user defined threshold for 5 subsequent seconds. Alarm will be cleared once the RSL level stays above the threshold for at least another 5 seconds. Operator Read-write rfu fpga-version-number Parameter Indicates the version of the firmware running on the RFU. Viewer Read-only rfu green-mode-admin Parameter Enables/disables RFU green mode. This mode minimizes power consumption while ensuring the highest transmission power possible to get an RSL not higher than the defined Rx reference level. Operator Read-write rfu green-mode-ref-rx- level Parameter Configures the green mode RSL reference level. Operator Read-write rfu ifc-support Parameter RFU IFC support status. Viewer Read-only rfu if-loopback-support Parameter RFU IF loopback support status. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 439 of 577 Group Command Type Description Privilege Access rfu internal-download- counter Parameter RFU internal download counter. Viewer Read-only rfu internal-download- status Parameter RFU internal download status. Viewer Read-only rfu log-admin Parameter Enables or disables the RFU internal log file. Operator Read-write rfu log-interval Parameter Specifies the number of seconds for RFU log file polling interval. Operator Read-write rfu lo-sense Parameter RFU lo sense status Viewer Read-only rfu max-bandwidth Parameter Indicates the RFU‟s maximum bandwidth. Viewer Read-only rfu max-rx-freq Parameter Indicates the maximum Rx frequency allowed by the RFU. Viewer Read-only rfu max-tx-freq Parameter Indicates the maximum Tx frequency allowed by the RFU. Viewer Read-only rfu max-tx-level Parameter Configures the RFU‟s maximum transmit level. Operator Read-write rfu min-bandwidth Parameter RFU minimum bandwidth status Viewer rfu min-rx-freq Parameter The minimum Rx frequency allowed by the RFU. Viewer rfu min-tx-freq Parameter The minimum Tx frequency allowed by the RFU. Viewer rfu mse-forward Parameter RFU MSE forward command Operator Read-write rfu mute-tx Parameter Mute the RFU‟s Tx output. Operator Read-write rfu part-number Parameter Indicates the RFU‟s part number. Viewer rfu pm-15min-interval[96] Parameter Performance monitoring data for a specific 15 minute interval. Viewer rfu pm-15min-interval- combined[96] Parameter Aggregate performance monitoring data for a specific 15 minute interval. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 440 of 577 Group Command Type Description Privilege Access rfu pm-15min-interval- diversity[96] Parameter Diversity performance monitoring data for a specific 15 minute interval. Viewer rfu pm-24hour- interval[30] Parameter Performance monitoring data for a specific 24 hour interval. Viewer rfu pm-24hour-interval- combined[30] Parameter Aggregate performance monitoring data for a specific 24 hour interval. Viewer rfu pm-24hour-interval- diversity[30] Parameter Diversity performance monitoring data for a specific 24 hour interval. Viewer rfu pmax Parameter RFU Pmax status Viewer rfu pmin Parameter RFU Pmin status Viewer rfu pm-rx-level-threshold- 1 Parameter The threshold above which Radio Signal Level (RSL) 1 exceeded seconds will be counted as errored seconds. Operator Read-write rfu pm-rx-level-threshold- 2 Parameter The threshold above which Radio Signal Level (RSL) 2 exceeded seconds will be counted as errored seconds. Operator Read-write rfu pm-tx-level-threshold Parameter The threshold above which Transmitted Signal Level (TSL) exceeded seconds will be counted as errored seconds. Operator Read-write rfu power-supply-status Parameter Indicates the status of the RFU power supply. Viewer rfu predistortion-support Parameter Indicates the status of RFU pre-distortion support. Viewer rfu rf-loopback-support Parameter Indicates the status of RFU RF loopback support. Viewer rfu rfu-address Parameter RFU address status Viewer rfu rfu-d-copartner-carrier Parameter RFU-D copartner carrier Viewer rfu rfu-installation Parameter RFU installation status Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 441 of 577 Group Command Type Description Privilege Access rfu rfu-mode Parameter Configures the RFU inbound frequency combining mode. Operator Read-write rfu rfu-rf-loopback Parameter Enables / disables RFU RF loopback. Operator Read-write rfu rfu-temp Parameter Indicates the RFU temperature according to the chosen measurement system. Viewer Read-only rfu rfu-type Parameter Indicates the type of the connected RFU. Viewer Read-only rfu rfu-xpic-support Parameter Enables / disables XPIC support for the current script. Viewer Read-only rfu rsl-connector-source Parameter Configures the RFU‟s inbound frequency combining RSL connector source. Operator Read-write rfu rsl-degrade-alarm- gen-degradation- margin Parameter Configures the degradation margin [in dB] for RSL degradation alarm and event generation. Operator Read-write rfu rsl-degrade-alarm- gen-nominal-level Parameter Configures the nominal level [in dBm] for RSL degradation alarm and event generation. Operator Read-write rfu rx-freq Parameter Configures the RFU‟s Rx frequency. Operator Read-write rfu rx-freq-local-remote Parameter Configures the remote Rx frequency. Operator Read-write rfu rx-level Parameter Indicates the RFU receive level status. Viewer Read-only rfu rx-level-combined Parameter Indicates the Rx combined inbound frequency level. Viewer Read-only rfu rx-level-diversity Parameter Indicates the Rx diversity frequency level. Viewer Read-only rfu serial-number Parameter Indicates the RFU's serial number. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 442 of 577 Group Command Type Description Privilege Access rfu software-version- number Parameter Indicates the RFU‟s running software version number. Viewer Read-only rfu standard-organization Parameter RFU standard organization Viewer Read-only rfu synthesizer-status Parameter RFU synthesizer Viewer Read-only rfu temp-in-celsius Parameter Indicates the RFU temperature in Celsius. Viewer Read-only rfu temp-in-fahrenheit Parameter Indicates the RFU temperature, in Fahrenheit. Viewer Read-only rfu tx-freq Parameter Configures the Tx frequency level. Operator Read-write rfu tx-freq-local-remote Parameter Configures the remote Tx frequency. Operator Read-write rfu tx-level-status Parameter Indicates the RFU transmit level. Viewer Read-only rfu tx-rx-freq-separation Parameter For RFUs where the user cannot set the Tx and Rx frequencies separately, configures the Tx to Rx frequency separation. Viewer Read-only rfu unfaded-rsl Parameter Configures the RFU Unfaded Rx level. Operator Read-write 24.2.1.36 rfu-sw-upload Group Command Type Description Privilege Access rfu-sw-upload internal-sw-download- action Command Initiates the software download to the RFU. Operator Read-write rfu-sw-upload internal-download- counter Parameter RFU internal download counter. Viewer Read-only rfu-sw-upload internal-download- status Parameter RFU internal download status. Viewer Read-only 24.2.1.37 rfu-fw-upload Group Command Type Description Privilege Access rfu-fw-upload internal-fw-download- action Command Initiates a firmware download operation. Operator Read-write rfu-fw-upload internal-fw-download- cancel Command Cancel a firmware download operation. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 443 of 577 Group Command Type Description Privilege Access rfu-fw-upload internal-fw-download- counter Parameter Firmware download counter. Viewer Read-only rfu-fw-upload internal-fw-download- status Parameter Indicates the firmware download status. Viewer Read-only 24.2.1.38 rfu-co Group Command Type Description Privilege Access rfu-co clear-device-error Command Clear RFU device error counters. Operator Read-only rfu-co device-error Parameter RFU device error counters. Viewer Read-only 24.2.1.39 rfu-cl Group Command Type Description Privilege Access rfu-cl clear-device-error Command Clear RFU device error counters. Operator Read-only rfu-cl device-error Parameter View RFU device errors. Viewer Read-only 24.2.1.40 rfic Group Command Type Description Privilege Access rfic if-loopback Parameter Activates IF loopback. Operator Read-write 24.2.1.41 enhanced-hc Group command Type Description Privilege Access enhanced-hc clear-enhanced-hc- counters Command Clears enhanced header compression counters. Operator Read-write enhanced-hc clear-excluding-rules- table Command Clears the excluding rules table. Operator Read-write enhanced-hc del-excluding-rule-by- entry Command Deletes the specified excluding rule (by table entry). Operator Read-write enhanced-hc del-excluding-rule-by- name Command Deletes the specified excluding rule (by table name). Operator Read-write enhanced-hc enhanced-hc-admin Parameter Enable / disable enhanced header compression. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 444 of 577 Group command Type Description Privilege Access enhanced-hc enhanced-hc-input- bytes Parameter Indicates the accumulated number of bytes that ingress the block. Viewer Read-only enhanced-hc enhanced-hc-mode Parameter Specifies the compression depth for enhanced header compression. Operator Read-write enhanced-hc enhanced-hc-num- compressed-frames Parameter Indicates the number of compressed frames. Viewer Read-only enhanced-hc enhanced-hc-num- learning-frames Parameter Indicates the number of learning frames. Viewer Read-only enhanced-hc enhanced-hc-num- occupied-entries Parameter Indicates the of currently occupied entries in the Enhanced Header Compression learning table. Viewer Read-only enhanced-hc enhanced-hc-num- uncompressed- frames-excl-rules Parameter Indicates the number of uncompressed frames due to excluding rules. Viewer Read-only enhanced-hc enhanced-hc-num- uncompressed- frames-intern-res Parameter Indicates the number of uncompressed frames due to internal reasons. Viewer Read-only enhanced-hc enhanced-hc-output- bytes Parameter Indicates the number of accumulated bytes that egress the block. Viewer Read-only enhanced-hc enhanced-hc-rx- bytes-in Parameter Indicates the number of accumulated Rx bytes before de-compression. Viewer Read-only enhanced-hc enhanced-hc-rx- bytes-out Parameter Indicates the number of accumulated Rx bytes after de-compression. Viewer Read-only enhanced-hc show-enhanced-hc- counters Command Show enhanced header compression counters. Operator Read-only enhanced-hc show-excluding-rules- table Command Show the excluding rules table. Operator Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 445 of 577 24.2.1.42 interfaces Group Command Type Description Privilege Access interfaces ais-line-detection- admin Parameter Enable or disable detection of AIS on the interfaces. Upon enabling, monitoring is done for all relevant interfaces, both on the main board and the inserted T-card, if present. Operator Read-write interfaces available-radio- interfaces Parameter Indicates the number of available radio interfaces. Viewer Read-only interfaces available-sync-clk- radio-interfaces Parameter Indicates the number of radio interfaces available as synchronization clocks. Viewer Read-only interfaces available-sync-src- radio-interfaces Parameter Indicates the number of radio interfaces available as synchronization sources. Viewer Read-only interfaces available-sdh- interfaces Parameter Indicates the number of available SDH interfaces. Viewer Read-only interfaces available-sync-clk- sdh-interfaces Parameter Indicates the number of SDH interfaces available as synchronization clocks. Viewer Read-only interfaces available-sync-src- sdh-interfaces Parameter Indicates the number of SDH interfaces available as synchronization sources. Viewer Read-only interfaces available-sync-clk- tdm-interfaces Parameter Indicates the number of TDM interfaces available as synchronization clocks. Viewer Read-only interfaces available-sync-src- tdm-interfaces Parameter Indicates the number of TDM interfaces available as synchronization sources. Viewer Read-only interfaces available-tdm- interfaces Parameter Indicates the number of available TDM interfaces. Viewer Read-only interfaces sync-trail-radio- interfaces Parameter Indicates the number of trail interfaces available as synchronization interfaces. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 446 of 577 Group Command Type Description Privilege Access interfaces sync-trail-sdh- interfaces Parameter Indicates the number of available SDH trail synchronization interfaces. Viewer Read-only interfaces sync-trail-tdm- interfaces Parameter Indicates the number of available TDM trail synchronization interfaces. Viewer Read-only 24.2.1.43 user-channel Group Command Type Description Privilege Access user-channel admin Parameter Enables / disables the user channel. Operator Read-write user-channel type Parameter Configures the user channel type. The asynchronous modes allow two channels, one in each port. The twin asynchronous mode uses port 1 for v.11 and port 2 for RS-232. The synchronous modes use two ports each. Operator Read-write 24.2.1.44 eow Group Command Type Description Privilege Access eow admin Parameter Enables / disables the Engineering Order Wire (EoW) channel. Viewer Read-write 24.2.1.45 wayside Group Command Type Description Privilege Access wayside admin Parameter Enables / disables the Ethernet port as a Wayside port. Disabling this option will cause the port to behave as a normal traffic Ethernet port. Operator Read-write wayside auto-negotiation Parameter Activates wayside port auto negotiation. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 447 of 577 Group Command Type Description Privilege Access wayside capacity Parameter Configures the wayside Ethernet port capacity. Operator Read-write wayside duplex Parameter Configures the wayside port duplex. Operator Read-write wayside ethernet-rate Parameter Configures the wayside interface port rate. Operator Read-write 24.2.1.46 sync Group Command Type Description Privilege Access sync active-sync-source Parameter Indicates the interface currently being used as the system‟s active sync source. Viewer Read-only sync local-sync-ssm-tx Parameter Indicates the value of the received SSM. Viewer Read-only sync set-clock-source Command Determines which interface to use as the system‟s frequency reference source. Operator Read-write sync set-sync-mode Command Configures the synchronization mode to automatic or force. Operator Read-write sync set-sync-source Command Enable the interface as a synchronization source. Operator Read-write sync show-sync-clock- quality Command Assign a quality level to a synchronization source. This enables the system to select the source with the highest quality as the current synchronization source. Operator sync show-sync-ssm-value Command Indicates the value of the received SSM. Operator Read-write sync show-system-clock- quality Command Indicates the quality of the current clock source. Operator Read-only sync sync-electrical-gbe- direction Parameter Sets the direction in which the frequency signal is transported for electrical GBE interfaces. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 448 of 577 Group Command Type Description Privilege Access sync sync-pw-ref-clock- export Determines whether the system reference clock is exported toward the PWE3 T-Card. This reference can be exported towards front panel. Notice that either this or any single one of the PW T-card TDM interfaces can export the reference clock, but not both at the same time. Operator Read-write sync sync-source- regenerator-admin Parameter Enables/disables PRC regenerator pipe mode. Enabling sets the IDU to point-to-point PRC quality frequency distribution mode. Operator Read-write sync sync-source- regenerator-ssm- admin Enables/disables PRC regenerator SSM Operator Read-write sync sync-source- revertive-timer Parameter Sets the number of seconds to timeout an interface after it recovers from a failure. After this timeout the interface will be considered stable and can be used as a synchronization source. Operator Read-write sync view-clock-source Command View the clock sources of all the interfaces in the slot. Viewer Read-only sync view-sync-source Command View the synchronization sources of all the interfaces in the slot. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 449 of 577 24.2.1.47 ethernet Group Command Type Description Privilege Access ethernet acm-ethernet- threshold Parameter Select which profile enables propagation if the radio ACM profile degrades below a defined profile. Relevant only for non- protected single-pipe switch mode, and only when ACM radio script is running. Viewer Read-only ethernet clock-source Parameter Configures the Ethernet port as the system‟s frequency reference clock source. Operator Read-write ethernet set-gbe-mute- override Command Set GbE mute override. Operator Read-write ethernet show-gbe-mute- override Command Show GbE mute override. Viewer Read-only 24.2.1.48 bridge Group Command Type Description Privilege Access bridge ageing-time Parameter Learned MAC address is removed from the forwarding table after this amount of time from the last time this MAC appeared in an ingressing frame's source address. Operator Read-write bridge bridge-id Parameter Indicates the RSTP bridge ID. Viewer Read-only bridge bridge-role Parameter Indicates the RSTP bridge role. Viewer Read-only bridge clear-all-peer-info Command Clear all peer information. Operator Read-write bridge ethernet-application Parameter Specifies the mode of the Ethernet switch application. Operator Read-write bridge jumbo-mode-admin Enables / disables jumbo mode. Operator Read-write bridge lag-load-balance Parameter Configures the LAG distribution function. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 450 of 577 Group Command Type Description Privilege Access bridge lldp-management- address Parameter IP address that identifies the management address component associated with the local system. Viewer bridge lldp-msg-tx-interval Parameter Interval in seconds between the transmission of successive LLDP frames. Operator Read-write bridge lldp-tx-delay Parameter Minimal interval between the transmission of successive LLDP frames initiated by value of status changes. Operator Read-write bridge management-type Parameter Configures the port management type. Viewer Read-only bridge max-hops Parameter Maximum hops the BPDU will be valid. Operator Read-write bridge msti-bridge-priority Parameter Bridge priority for each defined MST instance. Operator Read-write bridge priority Parameter Configures the RSTP bridge priority. Operator Read-write bridge provider-port- ethertype Parameter Configures the Ethertype of the Marvell switch provider VLANS (S-tag). It applies to all Ethernet ports. Operator Read-write bridge pw-interface-port Parameter Indicates which port number will be connected to the PW card. Operator bridge qos-copy-rate- limiting-configurations Command Copy QoS rate limiting configuration from one port to another. Operator Read-write bridge qos-ip-tos-tc-pbits- option Parameter Configures the IP priority options. Operator Read-write bridge qos-policer Command Add / remove a policer. Operator Read-write bridge qos-policer-class Command Add / remove a policer class. Operator Read-write bridge qos-set-ip-pbit-val Command Set IP P-bits to queue allocation. Operator Read-write bridge qos-set-scheduler-q- weight Command Set scheduler queue's weight. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 451 of 577 Group Command Type Description Privilege Access bridge qos-set-vlan-tag-pbit- val Command Set VLAN tag P-bits to queue allocation. Operator Read-write bridge qos-show-ip-pbit-val Command Show IP P-bits to queue allocation. Viewer Read-only bridge qos-show-policers Command Show QoS policers. Viewer Read-only bridge qos-show-scheduler- q-weight Command Show scheduler queue weights. Viewer Read-only bridge qos-show-static-mac- priorities Command Show static MAC priorities. Viewer Read-only bridge qos-show-vlan-tag- pbit-val Command Show VLAN tag P-bits to queue allocation. Viewer Read-only bridge qos-show-vlan-to- queue Command Show QoS VLAN to queue priorities. Viewer Read-only bridge qos-static-mac-priority Command Set static MAC priorities. Operator Read-write bridge qos-vlan-to-queue Command QoS VLAN to queue priority. Operator Read-write bridge root-id Parameter Indicates the RSTP root ID. Viewer Read-only bridge root-path-cost Parameter Indicates the RSTP root path cost. Viewer Read-only bridge show-all-traffic- statistics Command Show Ethernet statistics for all ports. Viewer Read-only bridge show-bridge-status Command Show the bridge status. Viewer Read-only bridge show-eth-statistics Command Show Ethernet statistics. Viewer Read-only bridge show-forwarding-table Command Show the forwarding table for a specific VLAN/ Viewer Read-only bridge show-ports-status Command Show the status of all ports/ Viewer Read-only bridge show-running-config Command Show the .current switch operating configuration Viewer Read-only bridge show-vlan-info Command Show the VLAN database. Viewer Read-only bridge stp-protocol Parameter Specifies the STP protocol. Operator Read-write bridge vlan Command Add, remove, or modify values associated with a single VLAN. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 452 of 577 Group Command Type Description Privilege Access bridge vlan-range Command Add, remove, or modify values associated with a range of VLANs. Operator Read-write 24.2.1.49 port-group Group Command Type Description Privilege Access port-group disable-all-ports Command Disable all E1/DS1 ports. Operator Read-write port-group enable-all-ports Command Enable all E1/DS1 ports. Operator Read-write port-group exber-threshold Parameter Configures the bit error rate alarm threshold for the group of E1s/T1s. Operator Read-write port-group line-code Parameter Configures the PDH line coding. B8ZS is for T1. HDB3 is for E1. AMI is only for T1. Operator Read-write port-group line-code-1-8 Parameter Line coding for T1 interfaces 1-8. Operator Read-write port-group line-code-9-16 Parameter Line coding for T1 interfaces 9-16. Operator Read-write port-group line-code-17-24 Parameter Line coding for T1 interfaces 17-24. Operator Read-write port-group line-code-25-32 Parameter Line coding for T1 interfaces 25-32. Operator Read-write port-group pdh-led[2] Parameter PDH LED color. Viewer Read-only port-group sd-threshold Parameter Configures the Signal degrade alarm threshold for the group of E1s/T1s. Operator Read-write 24.2.1.50 eth-port Group Command Type Description Privilege Access eth-port admin Parameter Enable / disable the port. Operator Read-write eth-port auto-negotiation Parameter Enables or disables the Auto Negotiation option on the Ethernet port. Operator Read-write eth-port bad-octets-rcv Parameter The sum of lengths of all bad Ethernet frames received. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 453 of 577 Group Command Type Description Privilege Access eth-port brdc-pkts-rcv Parameter The number of good frames received that have broadcast destination MAC address. Viewer eth-port brdc-pkts-sent Parameter The number of good frames sent that have a broadcast destination MAC address. Viewer eth-port capacity-threshold Parameter Configures the Ethernet capacity threshold (in Mbps). Operator eth-port clear-peer-info Command Clear all peer information. Operator eth-port clear-rmon Command Clear RMON statistics. Operator eth-port collisions Parameter The number of collision events seen by the MAC not including those counted in 'Single', 'Multiple', 'Excessive', or 'Late'. This counter is applicable in half-duplex only. Viewer eth-port connector-type Parameter The physical interface type. For port 8 the only valid value is radio. For ports 3 to 7 the only valid value is RJ45. In IP10 port 1 is RJ45 and port 2 is optical SFP. In IP10G/E ports 1 and 2 can be either RJ45 or optical SFP. Operator eth-port deferred Parameter The total number of successfully transmitted frames that experienced no collisions but are delayed because the medium was busy during the first attempt. This counter is applicable in half-duplex only. Viewer eth-port designated-path-cost Parameter Indicates the RSTP path cost. Viewer eth-port duplex Parameter Configures half or full duplex for the Ethernet port. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 454 of 577 Group Command Type Description Privilege Access eth-port edge-port Parameter Enables the port as an edge port. Operator eth-port ethernet-rate Parameter Configures the duplex rate: 10, 100 or 1000 Mbps. Operator eth-port evc-name Parameter Defines a name for the Ethernet service running over this VLAN. Operator eth-port excess-collision-drop Parameter The number of frames dropped in the transmit MAC because the frame experienced 16 consecutive collisions. This counter is applicable in half-duplex only. Viewer eth-port flow-control Parameter Configures flow control for the port. Operator eth-port fragments-pkts Parameter Indicates the total number of frames received with a length of less than 64 octets but with an invalid FCS. Viewer eth-port functionality-led Parameter Functionality LED Viewer eth-port good-octets-rcv Parameter Indicates the sum of the lengths of all good Ethernet frames received. Viewer eth-port good-octets-sent Parameter Indicates the sum of the lengths of all Ethernet frames sent from this MAC. Viewer eth-port if-table-indiscards Parameter The number of inbound packets which were chosen to be discarded, even though no errors had been detected, to prevent their being deliverable to a higher-layer protocol. Viewer eth-port if-table-inerrors Parameter The number of inbound packets that contained errors preventing them from being delivered to a higher- layer protocol. Viewer eth-port if-table-innucastpkts Parameter The number of non-unicast packets delivered to a higher-layer protocol. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 455 of 577 Group Command Type Description Privilege Access eth-port if-table-inoctets Parameter The total number of octets received on the interface, including framing characters. Viewer eth-port if-table-inucastpkts Parameter The number of subnetwork- unicast packets delivered to a higher-layer protocol. Viewer eth-port if-table- inunknownprotos Parameter The number of packets received via the interface which were discarded because of an unknown or unsupported protocol. Viewer eth-port if-table-outdiscards Parameter The number of outbound packets which were chosen to be discarded, even though no errors had been detected, to prevent them from being transmitted. Viewer eth-port if-table-outerrors Parameter The number of outbound packets that could not be transmitted because of errors. Viewer eth-port if-table-outnucastpkts Parameter The total number of packets that higher-level protocols requested be transmitted to a non-unicast address, including those that were discarded or not sent. Viewer eth-port if-table-outoctets Parameter The total number of octets transmitted out of the interface, including framing characters. Viewer eth-port if-table-outucastpkts Parameter The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 456 of 577 Group Command Type Description Privilege Access eth-port in-discards Parameter A 32 bit counter that counts the number of good, non- filtered frames that normally would have been forwarded, but could not be due to a lack of buffer space. Viewer eth-port in-fcs-err Parameter Total frames received with a CRC error not counted in 'Fragments frames received', 'Jabber frames received' or 'Rx error frames received'. Viewer eth-port in-filtered Parameter A 16 bit counter that counts the number of good frames that were filtered due to ingress policy rules. The rules include frames that are dropped due to 802.1Q security checks. Viewer eth-port in-pause Parameter The number of good frames received that have Pause destination MAC address. Viewer eth-port in-rx-err Parameter Total frames received with error signal from PHY. Viewer eth-port interface-alias Parameter Free text used to describe the Ethernet port. This description can contain up to 64 characters. Operator eth-port interface-index Parameter Interface index Viewer eth-port interface-type Parameter Configures the port type. Viewer eth-port internal-connection Parameter Indicates whether the peer is placed in the same chassis (internal) or another chassis (external). Viewer eth-port in-uni-casts Parameter The number of good frames received that have Unicast destination MAC address. Viewer eth-port jabber-pkts Parameter Total frames received with a length of more than 1632 octets but with an invalid FCS. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 457 of 577 Group Command Type Description Privilege Access eth-port lag-port Parameter Configures the port group as a LAG port. Operator I6.6ga eth-port late-collision-detect Parameter The number of times a collision is detected later than 512 bit-times into the transmission of a frame. This counter is applicable in half-duplex only. Viewer eth-port learning Parameter Enables or disables the MAC address learning option on the selected port. Operator eth-port lldp-admin Parameter Configures the status of the local LLDP agent. txOnly [1] LLDP agent will transmit LLDP frames on this port and it will not store any information about the remote systems connected. rxOnly [2] LLDP agent will receive, but it will not transmit LLDP frames on this port. txAndRx [3] LLDP agent will transmit and receive LLDP frames on this port. disabled [4] LLDP agent will not transmit or receive LLDP frames on this port. Operator eth-port lldp-port-description Parameter Local port description that will be advertised to the peer by LLDP protocol. Viewer eth-port lldp-system- capabilities Parameter Local system capabilities that will be advertised to the peer by LLDP protocol. Operator eth-port mac-address Parameter Indicates the management port MAC address. Viewer eth-port management-auto- negotiation Parameter Indicates the management port auto negotiation status. Viewer eth-port management- capacity Parameter Indicates the management port capacity limit. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 458 of 577 Group Command Type Description Privilege Access eth-port management-duplex Parameter Indicates the management port duplex value. Viewer eth-port management- ethernet-rate Parameter Indicates the management port Ethernet rate. Viewer eth-port management-only Parameter Management only Viewer eth-port management-port- admin Parameter Indicates the management port capacity limit. Viewer eth-port management-vlan Parameter Indicates the management port VLAN ID. Viewer eth-port mc-pkts-rcv Parameter Indicates the number of good frames received that have Multicast destination MAC address. This does not include frames counted in 'Pause frames received' or frames counted in 'Broadcast frames received'. Viewer eth-port mc-pkts-sent Parameter Indicates the number of good frames sent that have a Multicast destination MAC address. This does not include frames counted in 'Pause frames sent' or frames counted in 'Broadcast frames sent'. Viewer eth-port mep Command Add / remove a MEP. Operator eth-port mip Command Add / remove a MIP. Operator eth-port msti-port-path-cost Parameter Path cost for each defined MST instance. Operator eth-port msti-port-priority Parameter Interface priority for each defined MST instance. Operator eth-port multiple-collision- frame Parameter The total number of frames that have been successfully transmitted and have also experienced more than one collision. . This counter is applicable in half-duplex only. Viewer eth-port oper-status Parameter Indicates the port‟s operational status. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 459 of 577 Group Command Type Description Privilege Access eth-port out-fcs-err Parameter The number of frames transmitted with an invalid FCS. Viewer eth-port out-filtered Parameter A 16 bit counter that counts the number of good frames that were filtered due to egress policy rules. The rules include frames that passed the ingress port's policy but are dropped due to the egress policy of this port, including 802.1Q security checks. Viewer eth-port out-pause Parameter Indicates the number of flow control frames sent. Viewer eth-port out-uni-casts Parameter The number of frames sent that have a Unicast destination MAC address. Viewer eth-port oversize-pkts Parameter The total number of frames received with a length of more than 1632 octets but with a valid FCS. Viewer eth-port path-cost Parameter Configures the RSTP path cost. Operator eth-port peer-description Parameter User defined description for the peer port. Operator eth-port peer-ip-address Parameter Configures the IP address of the peer port connected on the local Ethernet port. Operator eth-port peer-mac-address Parameter Configures the MAC address of the peer port connected on the local Ethernet port. Operator eth-port peer-name Parameter Peer port name. Operator eth-port peer-port-description Parameter User defined description for the peer port. Operator eth-port peer-port-number Parameter Configures the port number of the peer port connected on the local Ethernet port. The port number is sequential starting with 1. Zero [0] indicates not connected. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 460 of 577 Group Command Type Description Privilege Access eth-port peer-slot-id Parameter Configures the slot ID of the peer port connected on the local Ethernet port. Zero [0] indicates a standalone unit. Operator eth-port peer-system- capabilities Parameter Configures the peer port system capabilities. Operator eth-port pkts-1024-max-octets Parameter Total frames received with length of above 1024 octets inclusive, including those with errors. Viewer eth-port pkts-128-255-octets Parameter Total frames received with length of between 128 and 255 octets inclusive, including those with errors. Viewer eth-port pkts-256-511-octets Parameter Total frames received with length of between 255 and 511 octets inclusive, including those with errors. Viewer eth-port pkts-512-1023-octets Parameter Total frames received with length of between 512 and 1023 octets inclusive, including those with errors. Viewer eth-port pkts-64-octets Parameter Total frames received with length of exactly 64 octets, including those with errors. Viewer eth-port pkts-65-127-octets Parameter Total frames received with length of between 65 and 127 octets inclusive, including those with errors. Viewer eth-port pm-15 Parameter 15 minute interval PMs. Viewer eth-port pm-24 Parameter 24 hour interval PMs. Viewer eth-port port-connection Parameter Configures the physical interface type. For port 8 the only valid value is radio. For ports 3 to 7 the only valid value is RJ45. In IP10, port 1 is RJ45 and port 2 is optical SFP. In IP10-G and IP10-E, ports 1 and 2 can be either RJ45 or optical SFP. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 461 of 577 Group Command Type Description Privilege Access eth-port port-service-type Parameter Configures whether the port is being used as a Service Access Point (SAP) or as a Service Network Point (SNP) in a network-wide Ethernet service. Used by the NMS for Ethernet service configuration. Operator eth-port priority Parameter Configures the port priority. Operator eth-port protection-only Parameter Protection only Viewer eth-port protection-port-admin Parameter Activates or deactivates protection for the Ethernet port. Viewer eth-port qos-classify-default Parameter Configures default criteria for frame classification. Operator eth-port qos-classify-initial Parameter Configures initial criteria for frame classification. Operator eth-port qos-classify-mac-da- override Parameter Configures MAC DA based frame classification, the first level of classification criteria for evaluating incoming frames. Allows classification of frames according to their static MAC destination addresses, and overwrites their VLAN P-bits. Disable No MAC DA classification or VLAN P-bits will be overwritten. Queue Decision Causes classification by defined static MAC address, without overwriting VLAN P-bits. Pbit Override VLAN P-bits will be overwritten without classification to queue. Queue and Pbit Override Classification by both defined static MAC address and VLAN P-bits overwrite. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 462 of 577 Group Command Type Description Privilege Access eth-port qos-classify-vid- override Parameter If the first criteria is not fulfilled, classifies frames according to VLAN ID, the second level of classification criteria for evaluating incoming frames. Queue Decision Causes classification by defined VLAN to queue mapping. Pbit Override Causes classification by P-bits. Queue and Pbit Override] Overrides classification by defined VLAN to queue mapping, and changes the P-bits accordingly. Operator eth-port qos-detach-policer Command Detach a policer from the port. Operator eth-port qos-egress-shaper Parameter Enables or disables egress shaping. Operator eth-port qos-egress-shaper- rate Parameter Configures the egress shaper rate. The value should be in steps of 64K for values less than 1 Mbps. 1M steps for values between 1 Mbps and 100 Mbps. 10M steps for values between 100 Mbps and 1000 Mbps (GbE ports only). Operator eth-port qos-policer-name Parameter Configures the name for the policer associated with this port. Operator eth-port qos-scheduling- scheme Parameter Configures Egress scheduler options. Operator eth-port qos-set-vlan-pbits- prio-remap Command Allows you to remap VLAN- priority bit values 0-7, to any other preferable value in the range of 0-7. Operator eth-port qos-show-policer- classes Command Show policer classes. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 463 of 577 Group Command Type Description Privilege Access eth-port qos-show-vlan-pbits- prio-remap Command Show VLAN P-bits priority remap. Viewer eth-port role Parameter Indicates the role of the RSTP port. Viewer eth-port set-allowed-vlans Command Configures in which ports this VLAN is allowed. Operator eth-port show-allowed-vlans Command Indicates in which ports this VLAN is allowed. Viewer eth-port show-if-table- counters Command Show IF table counters. Operator eth-port show-meps-list Command Show MEPs list. Operator eth-port show-mips-list Command Show MIPs list. Operator eth-port show-port-status Command Indicates the port status. Viewer eth-port single-collision-frame Parameter The total number of successfully transmitted frames that experienced exactly one collision. This counter is applicable in half-duplex only. Viewer eth-port state Parameter Indicates the state of the RSTP port. Viewer eth-port throughput-threshold Parameter Configures the Ethernet throughput threshold. Operator eth-port tx-mute-upon-rx-loc Parameter Mute Tx upon Rx loss of carrier. Operator eth-port type Parameter Configures the port type. Operator eth-port undersize-pkts Parameter Total frames received with a length of less than 64 octets but with a valid FCS. Viewer eth-port utilization-threshold Parameter Configures the Ethernet utilization threshold (as a percentage). Operator eth-port vlan Parameter Configures the port‟s default VLAN ID. Operator eth-port wayside-auto- negotiation Parameter Indicates if auto negotiation is enabled on the wayside port (On or Off). Viewer eth-port wayside-capacity Parameter Indicates the wayside port Ethernet capacity (Narrow or Wide). Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 464 of 577 Group Command Type Description Privilege Access eth-port wayside-duplex Parameter Indicates the wayside port's duplex value (Half or Full). Viewer eth-port wayside-ethernet-rate Parameter Indicates the wayside port Ethernet port rate (Mbps) Viewer eth-port wayside-only Parameter Wayside only Viewer eth-port wayside-port-admin Parameter Indicates whether wayside is activated for this port. Viewer 24.2.1.51 enhanced-tm Group Command Type Description Privilege Access enhanced-tm admin Parameter Enable/ disable the Enhanced traffic manager. Operator Read-write enhanced-tm class-hier1-qos-by- known-pdu-table- admin Parameter Enable/Disable CoS and color classification by known PDU MAC addresses. Operator Read-write enhanced-tm class-hier1-qos-by- mac-table-admin Parameter Enable / disable classification by destination MAC addresses. Operator Read-write enhanced-tm class-hier1-qos-by- udp-ports-table-admin Parameter Enable / disable CoS and color classification by UDP source and/or destination ports. Operator Read-write enhanced-tm class-hier2-inband- mgmt-vlan-table- admin Parameter Enable / disable classification by in-band management. Operator Read-write enhanced-tm class-hier3-reg-prio- by-dscp-admin Parameter Enable/Disable Cos and color classification by DSCP/TOS bits. Operator Read-write enhanced-tm class-hier3-reg-prio- by-mpls-admin Parameter Enable /Disable CoS and color classification by MPLS experimental bits. Operator Read-write enhanced-tm class-hier3-reg-prio- by-vlan-pbits-admin Parameter Enable /Disable CoS and color classification by VLAN P-bits and CFI/DEI bit. Operator Read-write enhanced-tm classifier-cos-to- queue-tbl Command CoS to queue mapping table. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 465 of 577 Group Command Type Description Privilege Access enhanced-tm classifier-hier1-qos- by-known-pdus-tbl Command CoS and color classification by known PDU MAC addresses table. Operator Read-write enhanced-tm classifier-hier1-qos- by-mac-tbl Command CoS and color classification by destination MAC address table. Operator Read-write enhanced-tm classifier-hier1-qos- by-udp-ports-tbl Command CoS and color classification by UDP source / destination ports table. Operator Read-write enhanced-tm classifier-hier2- inband-management- vlan-tbl Command Classification by inband management VLAN table. Operator Read-write enhanced-tm classifier-hier3-reg- prio-by-def-port-tbl Command Classification by default CoS and color table. Operator Read-write enhanced-tm classifier-hier3-reg- prio-by-dscp-tbl Command CoS and color classification by DSCP/TOS bits table. Operator Read-write enhanced-tm classifier-hier3-reg- prio-by-mpls-tbl Command CoS and color classification by MPLS experimental bits table. Operator Read-write enhanced-tm classifier-hier3-reg- prio-by-vlan-pbits-tbl Command CoS and color classification by VLAN S- tag P-bits and DEI bit table. Operator Read-write enhanced-tm clear-all-counters Command Clear all Enhanced TM counters. Operator Read-write enhanced-tm pm-queue-15min- interval Parameter Performance monitoring - queue counters 15 minutes interval. Viewer Read-only enhanced-tm pm-queue-24hr- interval Parameter Performance monitoring - queue counters 24 hours interval. Viewer Read-only enhanced-tm ptp-optimized- transport-admin Parameter Enable / disable Precision Time Protocol. Upon enabling all the packets classified to the 8th queue will bypass the scheduler and will be sent directly to the radio frame. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 466 of 577 Group Command Type Description Privilege Access enhanced-tm ptp-optimized- transport-mode Parameter Configures the PTP transport mode In High-CoS-Queue-8 mode all the frames that will be classified to the 8th queue in the traffic manager will be send to the PTP optimized transport channel. In IEEE-1588 mode IEEE 1588 frames will be identified automatically based on UDP ports and/or ethertypes . Options: h-cos-queue-8 eee-1588 Default value: h-cos-queue-8 Operator Read-write enhanced-tm queues-queue-size- tbl Command Configures the queue sizes table. Operator Read-write enhanced-tm scheduler- configuration-tbl Command Configures the priority and weight schedule table. Operator Read-write enhanced-tm shaper-configuration- tbl Command Configures the shaper features for each queue. Operator Read-write enhanced-tm shaper-global-admin Parameter Enables/disables shaping globally. Operator Read-write enhanced-tm show-classifier-cos- to-queue-tbl Command Show the CoS to queue mapping table. Operator Read-write enhanced-tm show-classifier-hier1- qos-by-known-pdus- tbl Command Show the CoS and color classification by known PDU MAC addresses table. Viewer Read-only enhanced-tm show-classifier-hier1- qos-by-mac-tbl Command Show the CoS and color classification by destination MAC address table. Viewer Read-only enhanced-tm show-classifier-hier1- qos-by-udp-ports-tbl Command Show the CoS and color classification by UDP source / destination ports table. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 467 of 577 Group Command Type Description Privilege Access enhanced-tm show-classifier-hier2- inband-management- vlan-tbl Command Show the classification by inband management VLAN table. Viewer Read-only enhanced-tm show-classifier-hier3- reg-prio-by-def-port- tbl Command Show the Classification by default CoS and color table. Viewer Read-only enhanced-tm show-classifier-hier3- reg-prio-by-dscp-tbl Command Show the CoS and color classification by DSCP/TOS bits table. Viewer Read-only enhanced-tm show-classifier-hier3- reg-prio-by-mpls-tbl Command Show the CoS and color classification by MPLS experimental bits table. Viewer Read-only enhanced-tm show-classifier-hier3- reg-prio-by-vlan-pbits- tbl Command Show the CoS and color classification by VLAN S- tag P-bits and DEI bit table. Viewer Read-only enhanced-tm show-queues-queue- size-tbl Command Show the queue sizes table. Viewer Read-only enhanced-tm show-scheduler- configuration-tbl Command Show the priority and weight schedule table. Viewer Read-only enhanced-tm show-shaper- configuration-tbl Command Show the shaper configuration table. Viewer Read-only enhanced-tm show-wred- thresholds-tbl Command Show the WRED thresholds configuration table. Viewer Read-only enhanced-tm stats-port-counter- 1024-max-oct-frames- tx Parameter Indicates the number of frames transmitted via the port with a length of 1024 to max octets. Viewer Read-only enhanced-tm stats-port-counter- 128-255-oct-frames-tx Parameter Indicates the number of frames transmitted via the port with a length of 128- 255 octets. Viewer Read-only enhanced-tm stats-port-counter- 256-511-oct-frames-tx Parameter Indicates the number of frames transmitted via the port with a length of 256- 511 octets. Viewer Read-only enhanced-tm stats-port-counter- 512-1023-oct-frames- tx Parameter Indicates the number of frames transmitted via the port with a length of 512- 1023 octets. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 468 of 577 Group Command Type Description Privilege Access enhanced-tm stats-port-counter-64- oct-frames-tx Parameter Indicates the number of frames transmitted via the port with a length of 64 octets. Viewer Read-only enhanced-tm stats-port-counter-65- 127-oct-frames-tx Parameter Indicates the number of frames transmitted via the port with a length of 65- 127 octets. Viewer Read-only enhanced-tm stats-port-counter- bcast-frames-tx Parameter Indicates the number of broadcast frames transmitted via the port. Viewer Read-only enhanced-tm stats-port-counter- bytes-tx Parameter Indicates the number of bytes transmitted via the port. Viewer Read-only enhanced-tm stats-port-counter- mcast-frames-tx Parameter Indicates the number of multicast frames transmitted via the port. Viewer Read-only enhanced-tm stats-port-counter- ucast-frames-tx Parameter Indicates the number of unicast frames transmitted via the port. Viewer Read-only enhanced-tm stats-print-port- counters Command Print all port counters. Operator Read-write enhanced-tm stats-queue-green- bytes-passed Parameter Indicates the number of green bytes passed through the queue. Viewer Read-only enhanced-tm stats-queue-green- packets-dropped Parameter Indicates the number of green packets dropped by the queue. Viewer Read-only enhanced-tm stats-queue-yellow- bytes-passed Parameter Indicates the number of yellow bytes passed through the queue. Viewer Read-only enhanced-tm stats-queue-yellow- packets-dropped Parameter Indicates the number of yellow packets dropped by the queue. Viewer Read-only enhanced-tm wred-global-admin Parameter Enable / disable WRED. Operator Read-write enhanced-tm wred-thresholds-tbl Command Configures the WRED thresholds per queue table. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 469 of 577 24.2.1.52 service-oam Group Command Type Description Privilege Access service-oam association Command Add / modify / remove a maintenance association. Operator Read-write service-oam auto-linktrace Command Add / remove a remote MEP to the automatic linktrace list. Operator Read-write service-oam auto-linktrace-interval Parameter Configures the number of seconds for the automatic linktrace interval. Operator Read-write service-oam ccm-admin Command Modify the continuity check admin state. Operator Read-write service-oam ccm-interval Command Modify the continuity check interval. Operator Read-write service-oam domain Command Add / modify / remove a maintenance domain. Operator Read-write service-oam linktrace Command Trace a message to a remote MEP or MIP. Viewer Read-write service-oam ping Command Ping a message to a remote MEP or MIP. Viewer Read-write service-oam remote-mep Command Add / remove a remote MEP. Operator Read-write service-oam remote-meps- learning-time Parameter Configure the number of seconds for the remote MEPs learning time. Operator Read-write service-oam show-auto-linktrace- list Command Show the remote MEPs configured in the automatic linktrace list. Viewer Read-only service-oam show-auto-linktrace- maid-status Command Show the last auto linktrace result for all MAID remote MEPs. Viewer Read-only service-oam show-auto-linktrace- mep-status Command Show the last auto linktrace result for a remote MEP. Viewer Read-only service-oam show-configured- local-meps Command Show all local MEPs info. Viewer Read-only service-oam show-configured- remote-meps Command Show all remote MEPs info. Viewer Read-only service-oam show-domain-interval Command Show the domain & VLAN CCM interval. Viewer Read-only service-oam show-domain-list Command Show the maintenance domain list. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 470 of 577 Group Command Type Description Privilege Access service-oam show-local-meps-list Command Show the local MEPs list. Viewer Read-only service-oam show-maid-list Command Show the MAID list. Viewer Read-only service-oam show-mips-list Command Show the domain & VLAN MIPs list. Viewer Read-only service-oam show-remote-meps- list Command Show the remote MEPs list. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 471 of 577 24.2.2 pdh 24.2.2.1 e1t1-port Group Command Type Description Privilege Access e1t1-port admin Parameter Enable / disable the E1 / T1 port. Operator Read-write e1t1-port ais-detection-status Parameter Indicates the status of the AIS detection. Supported only if AIS detection is activated. Viewer Read-only e1t1-port cable-length Parameter Determines the cable length range. Valid only for T1 interfaces. Operator Read-write e1t1-port clock-source Parameter Configures which clock to use as the system‟s frequency reference. local-clock Indicates that the outgoing signal takes its clock from an independent local clock. system-clock-source indicates that the clock is from the system reference clock, as taken from the synchronization source interface. Operator Read-write e1t1-port e1t1-priority Parameter Indicates the ACM priority of the E1/T1. Relevant only for stand- alone configurations. In a shelf, this parameter is defined in the trail configuration. Operator Read-write e1t1-port interface-alias Parameter Free text used to describe the E1/T1 port. This description can contain up to 64 characters. Operator Read-write e1t1-port interface-type Parameter Indicates the type of interface. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 472 of 577 Group Command Type Description Privilege Access e1t1-port line-loopback Parameter Configures the loopback test on the E1/T1. Operator Read-write e1t1-port line-pm-15[96] Parameter Shows 15 minute interval line performance monitoring data. Viewer Read-only e1t1-port line-pm-24[30] Parameter Shows 24 hour interval line performance monitoring data. Viewer Read-only e1t1-port oper-status Parameter Indicates the operational status of the E1/T1 port. Viewer Read-only e1t1-port port-curr-ber Parameter Indicates the bit error rate alarm threshold for the E1/T1. Viewer Read-only 24.2.2.2 lag-port lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port auto-negotiation Parameter Enables / disables auto negotiation option on the LAG port. Operator Read-write lag-port designated-path-cost Parameter Indicates the LAG port‟s designated path cost. Viewer Read-only lag-port duplex Parameter Configures the LAG port‟s duplex value (Half or Full). Operator Read-write lag-port edge-port Parameter Enables the LAG port to function as an edge port. Operator Read-write lag-port ethernet-rate Parameter Configures the LAG port‟s Ethernet rate (Mbps). Operator Read-write lag-port if-table-indiscards Parameter Indicates the number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher- layer protocol. Viewer Read-only lag-port if-table-inerrors Parameter Indicates the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 473 of 577 lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port if-table-innucastpkts Parameter Indicates the number of non-unicast packets delivered to a higher-layer protocol. Viewer Read-only lag-port if-table-inoctets Parameter Indicates the total number of octets received on the interface, including framing characters. Viewer Read-only lag-port if-table-inucastpkts Parameter Indicates the number of sub-network unicast packets delivered to a higher-layer protocol. Viewer Read-only lag-port if-table- inunknownprotos Parameter Indicates the number of packets received via the interface which were discarded because of an unknown or unsupported protocol. Viewer Read-only lag-port if-table-outdiscards Parameter Indicates the number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being transmitted. Viewer Read-only lag-port if-table-outerrors Parameter Indicates the number of outbound packets that could not be transmitted because of errors. Viewer Read-only lag-port if-table-outnucastpkts Parameter Indicates the total number of packets that higher- level protocols requested be transmitted to a non- unicast address, including those that were discarded or not sent. Viewer Read-only lag-port if-table-outoctets Parameter Indicates the total number of octets transmitted out of the interface, including framing characters. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 474 of 577 lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port if-table-outucastpkts Parameter Indicates the total number of packets that higher- level protocols requested be transmitted to a sub- network unicast address, including those that were discarded or not sent. Viewer Read-only lag-port interface-alias Parameter Free text used to describe the LAG port. This description can contain up to 64 characters. Operator Read-write lag-port interface-index Parameter Interface index Viewer Read-only lag-port interface-type Parameter LAG port interface type Viewer Read-only lag-port lag-clear-rmon Command Clears a LAG port‟s RMON statistics. Operator Read-write lag-port lag-member Command Add or remove an Ethernet port to/from an aggregation group. Operator Read-write lag-port lag-members-list Parameter Shows the list of members associated with the LAG port. Viewer Read-only lag-port lag-port-remove Command Remove an aggregation group. Operator Read-write lag-port learning Parameter Enables or disables the MAC address learning option on the selected LAG port. Operator Read-write lag-port mac-address Parameter Indicates the LAG port's MAC address. Viewer Read-only lag-port management-only Parameter Management only Viewer Read-only lag-port mep Command Add or remove a MEP. Operator Read-write lag-port mip Command Add or remove a MIP. Operator Read-write lag-port msti-port-path-cost Parameter Configures the path cost for each defined MST instance. Operator Read-write lag-port msti-port-priority Parameter Configures the interface priority for each defined MST instance. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 475 of 577 lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port oper-status Parameter Indicates the LAG port‟s operational status. Viewer Read-only lag-port path-cost Parameter Configures the cost of the path from the LAG port to the root bridge. Operator Read-write lag-port port-service-type Parameter Service type to which the port is associated. Used by the NMS for Ethernet service configuration Operator Read-write lag-port priority Parameter Configures the port priority. Operator Read-write lag-port protection-only Parameter Protection only Viewer Read-only lag-port qos-classify-default Parameter Configures default criteria for frame classification. Operator Read-write lag-port qos-classify-initial Parameter Configures initial criteria for frame classification. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 476 of 577 lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port qos-classify-mac-da- override Parameter Configures MAC DA based frame classification, the first level of classification criteria for evaluating incoming frames. Allows classification of frames according to their static MAC destination addresses, and overwrites their VLAN P- bits. Disable No MAC DA classification or VLAN P-bits will be overwritten. Queue Decision Causes classification by defined static MAC address, without overwriting VLAN P-bits. Pbit Override VLAN P-bits will be overwritten without classification to queue. Queue and Pbit Override Classification by both defined static MAC address and VLAN P-bits overwrite. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 477 of 577 lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port qos-classify-vid- override Parameter If the first criteria is not fulfilled, classifies frames according to VLAN ID, the second level of classification criteria for evaluating incoming frames. Queue Decision Causes classification by defined VLAN to queue mapping. Pbit Override Causes classification by P-bits. Queue and Pbit Override] Overrides classification by defined VLAN to queue mapping, and changes the P-bits accordingly. Operator Read-write lag-port qos-scheduling- scheme Parameter Configures Egress scheduler options. Operator Read-write lag-port qos-set-vlan-pbits- prio-remap Command Allows you to remap VLAN-priority bit values 0-7, to any other preferable value in the range of 0-7. Operator Read-write lag-port qos-show-vlan-pbits- prio-remap Command Show VLAN P-bits priority remap. Viewer Read-only lag-port role Parameter Indicates the LAG port‟s role. Viewer Read-only lag-port set-allowed-vlans Command Set allowed VLANs. Operator Read-write lag-port show-allowed-vlans Command Show allowed VLANs. Viewer Read-only lag-port show-if-table-counters Command Show IF table counters. Operator lag-port show-meps-list Command Show the MEPs list. Operator lag-port show-mips-list Command Show the MIPs list. Operator lag-port show-port-status Command Show the port status. Viewer Read-only lag-port state Parameter Indicates the state of the RSTP port. Viewer Read-only lag-port type Parameter Configures the port type. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 478 of 577 lag-port admin Parameter Enable / disable a LAG port. Operator Read-write lag-port vlan Parameter Configures the LAG port's default VLAN ID. Operator Read-write lag-port wayside-only Parameter Indicates if the LAG port is configured as wayside only. Viewer Read-only 24.2.2.3 trails trails act-all-trails Command Activate or reserve all trails. Operator Read-write trails act-trail-by-id Command Activate or reserve a trail by ID. Operator Read-write trails add-def-trails Command Add default trails (use on standalone units with an empty database). Operator Read-write trails add-trail Command Add a trail. Operator Read-write trails del-all-trails Command Delete all trails. Operator Read-write trails del-trail-by-id Command Delete a trail by ID. Operator Read-write trails del-trail-by-src Command Delete a trail by source. Operator Read-write trails dump-hw-table- configuration Command Dump the HW table configurations for a device. Admin Read-write trails dump-revertive- timers-array Command Dump the list of revertive timers. Admin Read-write trails dump-trails-db Command Dump the trail DB for [local|global] database with options. Admin Read-write trails perform-local-trail- consistency-check Command Verify that the local DB configuration, including HW, is valid. Admin Read-write trails protected-trail-force- active Command Forces a protected trail to a selected configuration (Primary, Secondary, None, or Idle). Operator Read-write trails protected-trail-force- active-by-id Command Forces a specific protected trail to a selected configuration (Primary, Secondary, None, or Idle). Operator Read-write trails protected-trail-switch- reset Command Reset the switch counter for all protected trails. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 479 of 577 trails act-all-trails Command Activate or reserve all trails. Operator Read-write trails protected-trail-switch- reset-by-id Command Reset the switch counter for the specified trail. Operator Read-write trails show-all-trail-alarms Command Show all trails alarms. Operator trails show-all-trail-pms Command Show all trails PMs. Operator trails show-all-trails Command Show all trails. Viewer Read-only trails show-local-trails- statistics Command Show local trails statistics. Admin trails show-trail-by-id Command Show a trail by trail ID. Viewer Read-only trails show-trail-by-src Command Show a trail by source edge. Operator trails show-trail-pms-by-id Command Show trail PM's using a trail ID. Operator trails show-trails-statistics Command Show trails statistics. Operator trails trail-revertive-switch- timeout Parameter Configures the revertive switch timeout in seconds for revertive protected trails. Operator Read-write trails trails-level-trail-trap- admin Parameter Enables / disables trail level traps. Admin Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 480 of 577 24.2.3 sdh 24.2.3.1 stm1 Group Command Type Description Privilege Access stm1 admin Parameter Enable / disable receiving and transmitting traffic through the STM-1 interface. Operator stm1 ais-detection-status- on-vc[63] Parameter Indicates whether incoming AIS is currently detected in the VC's payload. Viewer stm1 ais-vc-signaling- admin Parameter Enable or disable AIS signaling at the V5 byte on the STM-1, OC-3 interface. Operator stm1 clock-source Parameter Configures the clock source used as a reference for the outgoing STM-1 signal. Operator stm1 clock-source-status Parameter Indicates the actual source of the clock for the outgoing STM-1 signal. It may differ from the desired source if the source signal is missing or corrupt. Viewer stm1 concat-config-admin Parameter Controls concatenation configuration. Admin stm1 ds1-standard-klm- mapping Parameter Allows choosing between standard and proprietary KLM mapping. Operator stm1 excessive-ber- threshold Parameter Configures the excessive bit error rate alarm threshold on the STM- 1/OC-3 interface. Operator stm1 expected-trace- identifier Parameter Configures the J0 trace identifier signal that is expected to be received on the STM-1/OC-3 interface. Operator stm1 force-mute Parameter Enables or disables the mute Tx option on the interface. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 481 of 577 Group Command Type Description Privilege Access stm1 interface-type Parameter Indicates the interface type. Viewer stm1 line-loopback Parameter Configures the type of loopback to run. Operator stm1 line-tx-protection- mode Parameter Configures the behavior of the transmitting line in a 1+1 HSB configuration. In normal mode the stand-by signal is silenced. In uni-directional MSP mode, both units are transmitting. Operator stm1 loopback-counter Parameter Shows the STM-1/OC-3 line loopback counter. Viewer stm1 loopback-timeout Parameter STM-1/OC-3 line loopback timeout, in minutes. 0 means no timer. Operator stm1 max-num-of-vc Parameter Indicates the maximum number of low-order path VC (VC-11/12) in the SDH interface. Viewer stm1 node-to-node- connection Parameter Enable / disable connecting the STM- 1/OC-3 port with an additional NE. Operator stm1 oper-status Parameter Indicates the operational status of the STM-1 interface. Viewer stm1 peer-description Parameter Adds a description of the remote STM1 element. Operator stm1 peer-ip-address Parameter Configures the IP address of the remote STM-1/OC- 3 interface. Operator stm1 peer-port-number Parameter Configures the port number of the remote STM-1/OC-3 interface. Operator stm1 peer-slot-id Parameter Configures the slot ID of the remote STM-1/OC-3 port. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 482 of 577 Group Command Type Description Privilege Access stm1 pm-15[96] Parameter Shows 15 minute interval line performance monitoring data. Viewer stm1 pm-24[30] Parameter Shows 24 hour interval line performance monitoring data. Viewer stm1 rdi-v-signaling-admin Parameter Disables sending VC- level RDI in the STM- 1/OC-3 interface. Operator stm1 received-trace- identifier Parameter Indicates the J0 trace identifier signal that was received on the on the STM-1/OC-3 interface. Viewer stm1 signal-degrade- threshold Parameter Configures the signal degrade alarm threshold for the STM-1/OC-3. Operator stm1 stm1-clear-peer-info Command Clears all peer information. Operator Read-write stm1 stm1-led Parameter STM-1 SFP led. Viewer stm1 sync-clock-source-vc Parameter Configures the outgoing VC signal to be taken as the STM-1/OC-3 synchronization source, if used as a sync source. Use [0] if the clock source is local. Operator stm1 sync-vc Parameter Configures the VC channel used to synchronize the STM-1 interface. Operator stm1 trace-identifier-string- length Parameter Configures the length of the STM-1/OC-3 signal J0 trace identifier. Operator stm1 transmit-trace- identifier Parameter Configures the string used as the transmitted STM-1/OC-3 signal J0 trace identifier. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 483 of 577 24.2.4 pw 24.2.4.1 pw-tdm Group command Type Description Privilege Access pw-tdm ais-detection-status Parameter Indicates the status of AIS detection on the port. Viewer 24.2.4.2 pwc Group command Type Description Privilege Access pwc card-up-time Parameter Time elapsed since last reset of this PWC card. Viewer pwc export-clk-front-panel Parameter Configure which clock the PWC card exports to the front panel clock. Operator pwc export-clk-front-panel- cr-port Parameter TDM port serving as clock recovery reference if export-clk-front-panel is set to clock-recovery, 0 - otherwise Operator pwc export-clk-sys-ref Parameter Configure which clock the PWC card exports to the system reference clock. Operator pwc export-clk-sys-ref-cr- port Parameter TDM port serving as clock recovery reference if export-clk-sys-ref is set to clock-recovery, 0 - otherwise Operator pwc front-panel-clock- admin Parameter Indicates whether the front panel clock is enabled. Operator pwc front-panel-clock-led Parameter External clock input LED Viewer pwc front-panel-clock- signal-input Parameter Configure the type of input clock signal of the front panel port. Operator pwc front-panel-clock- signal-outp Parameter Configure the type of output clock signal of the front panel port. Operator pwc ip-addr-udpip-traffic Parameter IP Address for outbound UDP/IP traffic Operator pwc ip-subnet-udpip-traffic Parameter IP Subnet for outbound UDP/IP traffic Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 484 of 577 Group command Type Description Privilege Access pwc protection Parameter HSB Protection status as known on this PWC card. Viewer pwc pw-sw-version Parameter Software version of the application running on this PWC card. Viewer pwc show-card- configuration Command Show the PWC board configuration Operator Read-only pwc tdm-interface-type Parameter TDM interface type (E1/T1) of this PWC card Viewer 24.2.4.3 tdm-ports Group command Type Description Privilege Access tdm-ports admin Parameter Admin status of the TDM port Operator tdm-ports assigned Parameter Indication whether the TDM port is assigned to a trail Viewer tdm-ports channelization Parameter Indication whether TDM port is dedicated for CESoP or SAToP. Operator tdm-ports clock-source- reference Parameter Clock source reference: "sys-ref-clk" or "front- panel" for absolute, "none" for loop or clock- recovery timing modes Operator tdm-ports clock-source-ref-port Parameter TDM port serving as a clock reference for loop or clock-recovery timing modes Operator tdm-ports counter Parameter Loopback time left (in seconds) Viewer tdm-ports idle-code Parameter Value transmitted on this TDM port in unused timeslots Operator tdm-ports line-coding Parameter TDM port line coding Operator tdm-ports line-pm-15 Parameter Line PM 15 minute monitoring Viewer tdm-ports line-pm-24 Parameter Line PM 24 hour monitoring Viewer tdm-ports line-status Parameter Indicates the line status of the TDM port Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 485 of 577 Group command Type Description Privilege Access tdm-ports line-type Parameter TDM port line type Operator tdm-ports loopback Parameter Desired loopback configuration on this TDM port Operator tdm-ports oper-status Parameter Operational status of the TDM port Viewer tdm-ports rx-cas-code Parameter CAS pattern received on this TDM port Viewer tdm-ports show-all-channels Parameter Show all DS0 channels: show-all-channels [id] Operator tdm-ports show-assigned- channels Command Show assigned DS0 channels: show-assigned- channels [id] Operator Read-only tdm-ports show-available- channels Command Show available DS0 channels unassigned to any DS0 bundle: show- available-channels [id] Operator Read-only tdm-ports show-channels-cas- codes Command Show received and transmitted CAS code on all DS0 channels of a particular TDM port: show-channels-cas-codes <id> Operator Read-only tdm-ports show-port- configuration Command Show port configuration: show-port-configuration [id] Operator Read-only tdm-ports timeout Parameter Loopback timeout in minutes (0 for unlimited) Operator tdm-ports timing-mode Parameter Timing mode for signal transmission on the TDM port Operator tdm-ports tx-cas-code Parameter CAS pattern transmitted on this TDM port Viewer 24.2.4.4 ds0-bundles Group command Type Description Privilege Access ds0-bundles add-bundle Command Add a bundle: add-bundle <id> <port-num> <chan- start> <chan-end> [desc] Operator Read-write ds0-bundles add-channel Command Add channel to a bundle: add-chanel <id> <port- num> <chan-num>. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 486 of 577 Group command Type Description Privilege Access ds0-bundles admin Parameter Admin status of this DS0 bundle Viewer ds0-bundles bundle-desc Parameter DS0 bundle description Operator ds0-bundles bundle-ds0-list Parameter List of the assigned DS0 channels on a particular TDM port Viewer ds0-bundles bundle-id Parameter DS0 bundle Id Viewer ds0-bundles bundle-tdm-port Parameter TDM port assigned to DS0 bundle Viewer ds0-bundles delete-bundle Command Delete a bundle by Id: delete-bundle <id> Operator Read-write ds0-bundles delete-channel Command Delete channel from a bundle: delete-chanel <id> <port-num> <chan- num> Operator Read-write ds0-bundles disable-bundle-by-id Command Disable a DS0 bundle by its Id: disable-bundle-by- id <id> Operator Read-write ds0-bundles disable-bundle-by- port-chan Command Disable DS0 bundles assigned to a TDM port: disable-bundle-by-port <port-num> [chan-num] Operator Read-write ds0-bundles enable-bundle-by-id Command Enable a DS0 bundle by its Id: enable-bundle-by-id <id> Operator Read-write ds0-bundles enable-bundle-by- port-chan Command Enable DS0 bundles assigned to a TDM port: enable-bundle-by-port <port-num> [chan-num] Operator Read-write ds0-bundles oper-status Parameter Operational status of the DS0 bundle Viewer ds0-bundles show-bundle-by-id Command Show DS0 bundle by Id: show-bundle-by-id [id] Operator Read-only ds0-bundles show-bundle-by-port- chan Command Show DS0 bundle by port/channel: show- bundle-by-port-chan <port-num> [chan-num] Operator Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 487 of 577 24.2.4.5 tunnels Group command Type Description Privilege Access tunnels actual-remote-mac- addr Parameter Actual Remote MAC Address for this PSN tunnel. Viewer tunnels c-vid Parameter PSN Tunnel C-VLAN Id Viewer tunnels dest-ip-addr Parameter Destination IP address for UDP/IP tunnel Viewer tunnels eth-tunnel Command Set/remove an Ethernet PSN tunnel: eth-tunnel <set/remove> <id> <vlan- type> <vlan-id> <p-bits> [remote-mac-addr] Operator Read-write tunnels next-hop-ip Parameter Next hop IP address for UDP/IP tunnel Viewer tunnels p-bits Parameter PSN Tunnel P-bits Viewer tunnels psn-type Parameter Type of this PSN tunnel Viewer tunnels remote-mac-addr Parameter Remote MAC Address for this PSN tunnel Viewer tunnels show-tunnel-by-id Command Show PSN tunnel(s): show-tunnel-by-id [id] Operator Read-only tunnels source-ip-addr Parameter Source IP address for this tunnel Viewer tunnels source-mac-addr Parameter Source MAC Address for this PSN tunnel Viewer tunnels s-vid Parameter PSN Tunnel S-VLAN Id Viewer tunnels tos-dscp Parameter PSN Tunnel ToS (DSCP) Viewer tunnels tunnel-id Parameter PSN Tunnel Id Viewer tunnels udpip-tunnel Command Set/remove a UDP/IP PSN tunnel: udpip-tunnel <set/remove> <id> <dest- ip> <next-hop-ip> <vlan- type> <vlan-id> [tos-dscp] [p-bits] Operator Read-write tunnels vlan-type Parameter VLAN type supported by this PSN tunnel Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 488 of 577 24.2.4.6 pw-profiles Group command Type Description Privilege Access pw-profiles add-pw-profile Command Add a new PW profile with default values: add- pw-profile <id> Operator Read-write pw-profiles alarm-thresh Parameter Delay (in msecs) for persistent alarm setting Operator pw-profiles cas-alarm-pattern Parameter CAS alarm pattern transmitted on E1 interface when packets over/underflow the jitter buffer Operator pw-profiles clear-alarm-thresh Parameter Delay (in msecs) for persistent alarm clearing Operator pw-profiles conseq-miss-pkts-out- sync Parameter Number of consecutive missing packets required to enter LOPS. Operator pw-profiles conseq-packets-in- sync Parameter Number of consecutive packets with sequential sequence numbers required to exit LOPS Operator pw-profiles copy-pw-profile Command Copy PW profile with a given id into a new one: copy-pw-profile <id> <new-id> Operator Read-write pw-profiles delete-pw-profile Command Delete a PW profile: delete-pw-profile <id> Operator Read-write pw-profiles ds0-filler Parameter Byte pattern transmitted on ds0 channels when packets over/underflow the jitter buffer Operator pw-profiles excessive-pkt-loss- thresh Parameter Alarm threshold (in percent) for excessive packet loss Operator pw-profiles jitter-buffer-depth Parameter Jitter buffer depth (in milliseconds) to allow accommodation to the PSN-specific packet delay variation. Operator pw-profiles lops-detection Parameter If enabled, LOPS detection is supported. Operator FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 489 of 577 Group command Type Description Privilege Access pw-profiles missing-pkts-to-ses Parameter Percent of missing packets detected in 1 second window to cause SES to be counted Operator pw-profiles payload-size Parameter Number of times DS0 channels are sampled in order to create one Ethernet packet. Operator pw-profiles payload-suppression Parameter Indicates whether payload suppression is allowed for the PW. Operator pw-profiles payload-type Parameter Payload type. Operator pw-profiles pkt-loss-time-window Parameter Time for computing average packet loss rate to detect excessive packet loss. Operator pw-profiles pw-profile-id Parameter PW Profile Id Viewer pw-profiles rtp-header-used Parameter If set to False: an RTP header is not pre-pended to the TDM packet. Operator pw-profiles rtp-timestamp-abs- factor Parameter Multiplication factor for 8KHz units in absolute mode of RTP timestamping. Operator pw-profiles rtp-timestamp-mode Parameter Indicates which RTP timestamp mode is used by the PW. Operator pw-profiles show-pw-profile Command Show a PW profile: show- pw-profile [id] Operator Read-write 24.2.4.7 pws Group command Type Description Privilege Access pws add-pw Command Add new PW: add-pw <pw-id> <pw-type> <psn- type> <tdm-port-or- ds0bundle> <tdm-profile- id> <psn-tunnel-or-group- id> <src-udp-port-or-ecid> <dst-udp-port-or-ecid> [cr-master] [admin] Operator Read-write pws admin Parameter Admin status Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 490 of 577 Group command Type Description Privilege Access pws clear-pw-stats Command Clear PW statistics: clear- pw-stats <id> Operator Read-write pws cr-master Parameter Clock Reference master PW Viewer pws curr-max-jitter-buff- count Parameter Maximum jitter buffer usage registered for the last second Viewer pws curr-min-jitter-buff- count Parameter Minimum jitter buffer usage registered for the last second Viewer pws delete-pw Command Delete a PW: delete-pw <id> Operator Read-write pws dst-udp-port-or-ecid Parameter Destination UDP Port for UDP IP tunnel or ECID for Ethernet tunnel Viewer pws modify-pw Command Modify admin status of a PW: modify-pw <id> Operator Read-write pws oper-status Parameter Operational status of this PW service Viewer pws psn-type Parameter PSN type that the PW uses over the network Viewer pws pw-id Parameter PW Id Viewer pws pw-jitter-buff-overruns Parameter Number of jitter buffer overruns Viewer pws pw-max-jitter-buff- deviation Parameter Max Jitter Buffer Deviation Viewer pws pw-pm-15 Parameter Line PM 15 minute monitoring Viewer pws pw-pm-24 Parameter Line PM 24 hour monitoring Viewer pws pw-profile-id Parameter TDM profile id for this PW. Viewer pws pw-rcvd-pkts Parameter Number of packets received by this PW Viewer pws pw-transitions-norm- lops Parameter Number of transitions from the normal state to the LOPS Viewer pws pw-tx-pkts Parameter Number of packets transmitted by this PW Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 491 of 577 Group command Type Description Privilege Access pws pw-type Parameter The emulated service to be carried over the PW Viewer pws show-pw-by-id Command Show a PW by Id : show- pw-by-id [id] Operator Read-only pws show-pw-stats Command Show PW statistics: show-pw-stats <id> Operator Read-only pws src-udp-port-or-ecid Parameter Source UDP Port for UDP IP tunnel or ECID for Ethernet tunnel Viewer pws tdm-port-or- ds0bundle Parameter TDM port number for SATOP or DS0 bundle id for CESoPSN PW service. Viewer 24.2.4.8 eth-port-pwc Group command Type Description Privilege Access eth-port-pwc actual-duplex Parameter Actual duplex for Ethernet port. Viewer Read-write eth-port-pwc actual-ethernet-rate Parameter Actual line rate (Mbps) of the Ethernet traffic port Viewer eth-port-pwc admin Parameter Admin status of the Ethernet traffic port Operator eth-port-pwc auto-negotiation Parameter Auto negotiation of the Ethernet traffic port Operator eth-port-pwc clear-rmon Command Clear all RMON statistics on the Ethernet traffic port Operator Read-write eth-port-pwc duplex Parameter Half/Full duplex of the Ethernet traffic port Operator eth-port-pwc ethernet-rate Parameter Line rate (Mbps) of the Ethernet traffic port Operator eth-port-pwc flow-control Parameter Flow control mode of the Ethernet traffic port Operator eth-port-pwc mac-address Parameter MAC Address of the Ethernet traffic port Viewer eth-port-pwc oper-status Parameter Operational status of the Ethernet traffic port Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 492 of 577 Group command Type Description Privilege Access eth-port-pwc rx-broadcast Parameter The number of broadcast good frames of length 64 to 1518 (non VLAN) or 1522 (VLAN) bytes excluding Broadcast frames. Note: This statistic does not take into account frames with range/length errors. Viewer eth-port-pwc rx-bytes Parameter The number of byte count of frames received with 0 to 1518 bytes, including those in bad packets, excluding framing bits but including FCS bytes. Viewer eth-port-pwc rx-dropped Parameter The number of frames received that are streamed to the system but are later dropped due to lack of system resources. Viewer eth-port-pwc rx-err-code Parameter The number of instances where a valid carrier was present and at least one invalid data symbol was detected. Viewer eth-port-pwc rx-err-false-carrier Parameter The number of false carriers detected during idle, as defined by a 1 on RX-ER and an '0xE' on RXD. The event is reported along with the statistics generated on the next received frame. Viewer eth-port-pwc rx-err-fbp-underrun Parameter The number of received Ethernet Interworking frames which were dropped due free buffer pool (FBP) Overrun Viewer eth-port-pwc rx-err-fcs Parameter The number of frames received that have a integral 64 to 1518 byte length and contain a Frame Check Sequence error. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 493 of 577 Group command Type Description Privilege Access eth-port-pwc rx-err-mru Parameter The number of received Ethernet Interworking frames which were dropped due the Maximum Receive Unit frame size being exceeded. Viewer eth-port-pwc rx-err-nonvalid-mac Parameter The number of received Ethernet frames whose MAC-DA is not valid. (Unrecognized by address recognition routine in DPS). Viewer eth-port-pwc rx-err-overrun Parameter The number of received Ethernet frames which were closed (in a middle of a frame) or discarded due to a receive buffer overrun event (no available buffers). Viewer eth-port-pwc rx-err-sdu Parameter The number of Ethernet frames which were closed due the maximum frame size has been exceeded Viewer eth-port-pwc rx-fragments Parameter The number of frames received which are less than 64 bytes in length and contain an invalid FCS, including integral and non-integral lengths. Viewer eth-port-pwc rx-iw-frames Parameter The number of received Ethernet Interworking frames that were received and sent to the L3 Interworking module. Viewer eth-port-pwc rx-jabber Parameter The number of frames received which exceed 1518 (non VLAN) or 1522 (VLAN) bytes in length and contain an invalid FCS, including alignment errors. Viewer eth-port-pwc rx-mac-control Parameter The number of MAC Control frames received (PAUSE & Unsupported). Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 494 of 577 Group command Type Description Privilege Access eth-port-pwc rx-mac-pause Parameter The number of valid PAUSE MAC Control frames received. Viewer eth-port-pwc rx-mac-unknown Parameter The number of MAC Control Frames received that contain an opcode other than a PAUSE. Viewer eth-port-pwc rx-multicast Parameter The number of multicast good frames of length 64 to 1518 (non VLAN) or 1522 (VLAN) bytes excluding Broadcast frames. This statistic does not take into account frames with range/length errors. Viewer eth-port-pwc rx-oversize Parameter The number of frames received that exceeded 1518 (non VLAN) or 1522 (VLAN) bytes in length, contain a valid FCS, and were otherwise well formed. Note: This does not look at Range Length errors. Viewer eth-port-pwc rx-packets Parameter The number of received packets (including bad packets, all Unicast, Broadcast, and Multicast packets). Viewer eth-port-pwc rx-undersize Parameter The number of frames received that are less than 64 bytes in length, contain a valid FCS, and were otherwise well formed. Note: This does not look at Range Length errors. Viewer eth-port-pwc show-port-config Command Show the Ethernet traffic port configuration Operator Read-only eth-port-pwc show-rmon-counters Command Show RMON statistics on the Ethernet traffic port Operator Read-only eth-port-pwc status-led Parameter Status LED Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 495 of 577 Group command Type Description Privilege Access eth-port-pwc tx-broadcast Parameter The number of Broadcast frames transmitted (excluding Multicast frames). Viewer eth-port-pwc tx-bytes Parameter The number of bytes that were put on the wire including fragments of frames that were involved with collisions. This count does not include preamble/SFD or jam bytes. Viewer eth-port-pwc tx-control Parameter The number of valid size frames transmitted with a Type Field signifying a Control frame. Viewer eth-port-pwc tx-defer Parameter The number of frames that were deferred upon first transmission attempt. Does not include frames involved in collisions. Viewer eth-port-pwc tx-dropped Parameter The number of times the input PFH is asserted. Viewer eth-port-pwc tx-err-fcs Parameter The number of valid sized packets transmitted with an incorrect FCS value. Viewer eth-port-pwc tx-err-underrun Parameter The number of times Ethernet transmitter underun occurred. Viewer eth-port-pwc tx-excess-collision Parameter The number of frames that experienced 16 collisions during transmission and were aborted. Viewer eth-port-pwc tx-excess-defer Parameter The number of frames aborted that were deferred for an excessive period of time (3036 byte times). Viewer eth-port-pwc tx-fragments Parameter The number of transmitted frames less than 64 bytes, with an incorrect FCS value. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 496 of 577 Group command Type Description Privilege Access eth-port-pwc tx-frames Parameter The number of complete good frames transmitted. Viewer eth-port-pwc tx-jabber Parameter The number of oversized transmitted frames with an incorrect FCS value. Viewer eth-port-pwc tx-late-collision Parameter The number of frames transmitted that experienced a late collision during a transmission attempt. Late collisions are defined using the LCOL[50] field of the TX Function control register. Viewer eth-port-pwc tx-mac-pause Parameter The number of valid PAUSE MAC Control frames transmitted. Viewer eth-port-pwc tx-mac-pause- honored Parameter The number of times a valid PAUSE MAC Control frame was transmitted and honored. Viewer eth-port-pwc tx-multicast Parameter The number of Multicast valid frames transmitted (excluding Broadcast frames). Viewer eth-port-pwc tx-multi-collision Parameter The number of frames transmitted which experienced 2-15 collisions (including any late collisions) during transmission as defined using the RETRY [3-0] field of the TX function control register. Viewer eth-port-pwc tx-no-collision Parameter The number of frames transmitted that had no collision. Viewer eth-port-pwc tx-oversize Parameter The number of oversized transmitted frames with a correct FCS value. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 497 of 577 Group command Type Description Privilege Access eth-port-pwc tx-packets Parameter The number of transmitted packets (including bad packets, excessive deferred packets, excessive collision packets, late collision packets, all Unicast, Broadcast, and Multicast packets). Viewer eth-port-pwc txrx-frames-1023 Parameter The number of good or bad frames transmitted and received that are 512 to 1023 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer eth-port-pwc txrx-frames-127 Parameter The number of good or bad frames transmitted and received that are 65 to 127 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer eth-port-pwc txrx-frames-1518 Parameter The number of good or bad frames transmitted and received that are 1024 to 1518 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer eth-port-pwc txrx-frames-1522 Parameter The number of good or bad frames transmitted and received that are 1519 to 1522 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer eth-port-pwc txrx-frames-255 Parameter The number of good or bad frames transmitted and received that are 128 to 255 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 498 of 577 Group command Type Description Privilege Access eth-port-pwc txrx-frames-511 Parameter The number of good or bad frames transmitted and received that are 256 to 511 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer eth-port-pwc txrx-frames-64 Parameter The number of good or bad frames transmitted and received that are up to 64 bytes in length inclusive (excluding framing bits but including FCS bytes). Viewer eth-port-pwc tx-single-collision Parameter The number of frames transmitted which experienced exactly one collision during transmission. Viewer eth-port-pwc tx-undersize Parameter The number of transmitted frames less than 64 bytes, with a correct FCS value. Viewer FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 499 of 577 24.2.5 diagnostics Group Command Type Description Privilege Access diagnostics show-files-list Command Show downloadable files, Operator Read-write 24.2.5.1 rmon Group Command Type Description Privilege Access rmon clear-all Command Clears RMON statistics from all ports. Operator Read-write rmon clear-lag-port Command Clears a LAG port's RMON statistics. Operator Read-write rmon clear-port Command Clears RMON statistics from a specific port. Operator Read-write rmon get-statistics Command Get RMON statistics. Operator Read-write 24.2.5.2 loopback line-loopback Group Command Type Description Privilege Access line-loopback counter Parameter Shows the loopback counter. Viewer Read-only line-loopback line-loopback Parameter Configures line loopback. Operator Read-write line-loopback pw-tdm-counter Parameter Shows the PW_TDM loopback counter. Viewer Read-only line-loopback pw-tdm-loopback Parameter Configures the PW_TDM loopback. Operator Read-write line-loopback pw-tdm-timeout Parameter Configures the PW_TDM loopback timeout in minutes. (0 for unlimited) Operator Read-write line-loopback stm1-counter Parameter Shows the STM-1/OC-3 line loopback counter. Viewer Read-only line-loopback stm1-line-loopback Parameter Configures the type of loopback to run. Operator Read-write line-loopback stm1-timeout Parameter STM-1/OC-3 line loopback timeout, in minutes. 0 means no timer. Operator Read-write FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 500 of 577 Group Command Type Description Privilege Access line-loopback timeout Parameter Configures the number of minutes for line loopback timeout. Use [0] to disable loopback timeout. Operator Read-write radio-loopback Group Command Type Description Privilege Access radio-loopback counter Parameter Shows the loopback counter. Viewer Read-only radio-loopback if-loopback[16] Parameter Activates IF loopback. Operator Read-write radio-loopback rfu-rf-loopback Parameter Enables / disables RFU RF loopback. Operator Read-write radio-loopback timeout Parameter Configures the number of minutes for loopback timeout. 0 means no timer. Operator Read-write 24.2.6 xml-interface Group Command Type Description Privilege Access xml-interface inv-gen-time Command Show inventory generation time stamp. Viewer Read-only xml-interface pm-gen-time Command Show PM generation time stamp. Viewer Read-only FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 501 of 577 24.3 Basic System Configuration Using CLI This section includes: Setting IP Addresses Adding users Navigating between stacked units Performing Resets Configuration backup Software version management Using CLI scripts Radio Parameter Configurations NTP SNMP CFM Pseudowire Configuration TDM trail management TDM Protected Trails (SNCP) Showing TDM Trail PMs and Status Configuring the Ethernet Switch Application Configuring the LAG Ports Management Ports VLAN Configuration QoS Configuration Auxiliary Channels Automatic State Propagation, 1+0 Configuration Only Radio script configuration Ring RSTP FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 502 of 577 24.3.1 Setting IP Addresses To define a new IP address: 1 Log in using: User: Admin or Operator Password: Admin 2 Change to the management\networking\ip-address directory. Type: cd management\networking\ip-address\, and press Enter. 3 Get the current IP address. Type: get ip-address, and press Enter. 4 Set the new IP address. Type: set <new_ip_address>, and press Enter. 24.3.2 Adding users To define a new user: 1 Log in. 2 Change to the management/mng-services/users directory. Type: cd management/mng-services/users and press Enter. 3 Type: add-user <name> <group> <password aging days> <expiration date>, and press Enter. 4 Type the password for the new user. 24.3.3 Navigating between stacked units 24.3.3.1 Going from the main unit to a different unit After log-in, prompt is always given at the main unit. To change the prompt to a different unit: 1 Change to the cd /platform/shelf-manager directory. 2 Type: cd /platform/shelf-manager and press Enter. 3 Type: logon-unit <slot number>, and press Enter. The prompt will change according to the relevant slot ID. For example, the prompt for a unit located in slot 3 will show: IP-10G-SLOT-3:/> 24.3.3.2 Returning to main unit To return to the main unit, change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 503 of 577 24.3.4 Performing Resets 24.3.4.1 In Stacked Configuration To reset a specific unit in the shelf, at the main unit: 1 Change to the cd /platform/shelf-manager directory. Type: cd /platform/shelf-manager, and press Enter. 2 Type: reset-unit <slot ID>, and press Enter. Slot ID – the slot of the IDU to be reset (1–6). To reset all extension units (but not the main unit), at the main unit: 1 Change to the cd /platform/shelf-manager directory. 2 Type: cd /platform/shelf-manager and press Enter. 3 Type: reset-extensions <slot ID>. To reset all units (including the main unit), at the main unit: 1 Change to the cd /platform/shelf-manager directory. 2 Type: cd /platform/shelf-manager and press Enter. 3 Type: reset-shelf <slot ID>. 24.3.4.2 In any IDU (Standalone or Nodal) To reset an IDU locally (standalone or in extension prompt in the shelf): 1 Change to the cd /platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: reset-unit <slot ID>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 504 of 577 24.3.5 Configuration backup The configuration backup file must be transferred between the main unit and an external site by FTP. Configuration files may be transferred between the main and extension units. To specify external FTP client site parameters, at t he main unit: 1 Change to the platform/idc-board directory. Type: /platform/idc-board and press Enter. 2 Type: set host-ip <ip> (the client’s IP address), and press Enter. 3 Type: set host-path <path> (the site to the desired file location at the client) and press Enter. 4 Type: set user-name <user-name> (the user name expected from client) and press Enter. 5 Type: change-user-password and press Enter. 6 When prompted, enter the user password and press Enter. 24.3.5.1 Creating configuration backup files To create the backup file for a specific slot: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: config-backup --unit <slot number> and press Enter. To create the backup file for a all the slots in the shelf: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: config-backup –all and press Enter. 24.3.5.2 Saving configuration files in external site: To upload the file to the FTP client 1 Change to the platform/idc directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: upload-archive configuration, and press Enter. To see the upload status: 1 Change to the platform/idc directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: get config-upload-status, and press Enter. "ready" means "no action was taken, ready to continue" A successful result will give "succeeded" FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 505 of 577 24.3.5.3 Downloading saved configuration files: To download the file from the FTP client: 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: download-archive configuration, and press Enter. To see the download status: 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: get config-download-status, and press Enter. "ready" means "no action was taken, ready to continue" A successful result will give "succeeded" To restore configuration to a specific slot: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: config-restore --unit <slot number>, and press Enter. To restore a configuration to all slots on a shelf: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: config-restore --all, and press Enter. To reset the relevant units: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: reset-extensions reset-shelf reset-unit and press Enter. To reset a specific slot: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: reset-unit <slot number>, and press Enter. To reset all the slots in the shelf, 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: reset-shelf and press Enter. To reset all the extension slots in the shelf: 1 Change to the platform/shelf-manager directory. Type: cd /platform/shelf-manager and press Enter. 2 Type: reset-extensions and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 506 of 577 24.3.6 Software version management The software version files must be transferred between the main unit and an external site by FTP. Software can be deployed to the extension units from the main unit. To define external FTP settings, at the main unit: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. 2 Type: set server-url <ip/path> (the client’s IP address and files path) and press Enter. 3 Type: set server-login <user-name> (the user name expected from client) and press Enter. 4 Type: change-server-password and press Enter. 5 When prompted, specify the user password and press Enter. To upgrade software: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. 2 Type: download and press Enter to download the new package. To install downloaded software to a specific slot: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. 2 Type: upgrade --unit <slot number>, and press Enter. To install downloaded software to all slots on the shelf: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. 2 Type: upgrade –all and press Enter. To downgrade to a previous version: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. 2 Type: download --downgrade, and press Enter to download the downgrade package. To downgrade a specific slot to a previous version: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 507 of 577 2 Type: downgrade --unit <slot number>, and press Enter to install the downloaded software. To downgrade all slots on the shelf to a previous version: 1 Change to the management/mng-service/mng-software directory. Type: cd /management/mng-service/mng-software and press Enter. 2 Type: download --downgrade, and press Enter to download the downgrade package. 3 Type: downgrade --all, and press Enter. To roll back to the previously installed version for a specific slot: 1 Change to the management/mng-service/mng-software directory. Type: /management/mng-service/mng-software and press Enter. 2 Type: rollback --unit <slot number>, and press Enter. To roll back to the previously installed version to all slots on the shelf: 1 Change to the management/mng-service/mng-software directory. Type: /management/mng-service/mng-software and press Enter. 2 Type: rollback --all, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 508 of 577 24.3.7 Using CLI scripts CLI scripts are text files containing CLI commands that can be downloaded and run in the main unit only. 24.3.7.1 Setting external FTP client site parameters To define the FTP settings, at the main unit: 1 Change to the platform/idc-board directory. Type: /platform/idc-board and press Enter. 2 Type: set host-ip <ip> (the client’s IP address), and press Enter. 3 Type: set host-path <path> (the site to the desired file location at the client), and press Enter. 4 Type: set user-name <user-name> and press Enter. 5 Type: change-user-password and press Enter. 6 When prompted, enter the user password and press Enter. To download CLI scripts from an FTP client: 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: set cli-script-file-name<file name> and press Enter. To download the file from the FTP client 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: download-archive cli-script, and press Enter. To see the upload status 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: get download-cli-script-status and press Enter. "ready" means "no action was taken, ready to continue" A successful result will give "succeeded" 24.3.7.2 Managing and Executing scripts To view the contents of the currently loaded script 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: cli-script show, and press Enter. To execute the currently loaded script 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: cli-script execute, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 509 of 577 To delete the currently loaded script 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type: cli-script delete, and press Enter. 24.3.8 CLI Script Limitations User should be aware of the following limitations: CLI scripts can be loaded only to main units and cannot be written to configure extensions units. All configurations performed from a main unit are supported. In order to echo the messages to the console while the script is being executed, use the “echo” command inside the script. The user is responsible for editing the CLI commands in their logical order (e.g., script must configure “Allowed VLANs” on a port only after configuring the port as a trunk port). Any bridge-related commands (L2 switch and protocol commands) require a write operation in order to have them saved. CLI commands that trigger a cold-reset echo the “confirmation message” and then perform a cold-reset to the system if confirmed by the user. The following commands prompt user confirmation: MRMC (radio) configuration Switch application configuration License upgrade Reset IDU Protection “copy-to-mate” command Only a single command of this kind can be used per script, and only at the end of the script! If such a command is used at the end of the script, when this command is the next one to be executed, the script will hold and wait until the user enters confirmation (CQ19326). A user with operator privileges cannot include user commands that require higher privileges in a script. Higher privilege commands will not be executed and will echo “error”. SNMPv3 and Add user commands are not recommended for use via CLI scripts. This is because these commands require user attention. The SNMPv3 commands or FTP password for software configuration or download, for example, require a password from the user, and therefore should not be performed via a CLI script. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 510 of 577 24.3.9 Radio Parameter Configurations To set TX frequency: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set tx-freq <frequency in KHz> and press Enter. To set RX frequency: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set rx-freq <frequency in KHz> and press Enter. To set TX power level: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type max-tx-level <TX level in dBm> and press Enter. To mute/unmute the TX: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set mute-tx <disable/enable> and press Enter. To set ATPC reference level: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set atpc-ref-rx-level <reference level in dBm> and press Enter. To enable ATPC: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set atpc-admin <enable | disable> and press Enter. To set RX level PM threshold1: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set pm-rx-level-threshold-1 <threshold in dBm> and press Enter. To set “RX level” PM threshold2: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type cd /radio/rfu/ set pm-rx-level-threshold-2 <threshold in dBm> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 511 of 577 To set “TX level” PM’s threshold: 1 Change to the radio/rfu directory. Type cd /radio/rfu/ and press Enter. 2 Type set pm-tx-level-threshold <threshold in dBm>, then press Enter. To enable/disable MAC header compression: 1 Change to the radio directory. Type cd /radio/ and press Enter. 2 Type set mhc-admin <enable | disable> and press Enter. To set Link-ID: 1 Change to the radio/framer directory. Type cd /radio/framer/ and press Enter. 2 Type set link-id <Link-ID number> and press Enter. To set radio excessive BER threshold: 1 Change to the radio/framer directory. Type cd /radio/framer/ and press Enter. 2 Type set radio-excessive-ber-threshold <BER: 1e-3, 1e-4, 1e-5> and press Enter. To set radio signal degrade threshold: 1 Change to the radio/framer directory. Type cd /radio/framer/ and press Enter. 2 Type set radio-signal-degrade-threshold <BER: 1e-6, 1e-7, 1e-8, 1e-9> and press Enter. To set “MSE” PM’s threshold: 1 Change to the radio/modem directory. Type cd / radio/modem / and press Enter. 2 Type set mse-threshold <Threshold in dB> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 512 of 577 24.3.10 NTP To enable/disable NTP service: 1 Change to the management/mng-services/time-service/ntp directory. Type: cd /management/mng-services/time-service/ntp and press Enter. 2 Type set server 192.168.1.100 and press Enter. 3 Type set admin <enable | disable> and press Enter. To set NTP offset from GMT: 1 Change to the management/mng-services/time-service directory. Type: cd management/mng-services/time-service and press Enter. 2 Type set gmt-offset-hours 2 and press Enter. 3 Type set gmt-offset-minutes 0 and press Enter. To set Daylight Saving Time: 1 Change to the management/mng-services/time-service directory. Type: cd /management/mng-services/time-service and press Enter. 2 Type set dst-start-month <Apr> and press Enter. 3 Type set dst-start-day <1> and press Enter. 4 Type set dst-end-month <Nov> and press Enter. 5 Type set dst-end-day <1> and press Enter. To set date and time: 1 Change to the management/mng-services/time-service directory. Type cd /management/mng-services/time-service and press Enter. 2 Type set time-and-date <10-3-2009,15:00:00> and press Enter. The time and date format is: day-month-year, hours: mins: secs FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 513 of 577 24.3.11 SNMP To enable/disable SNMP: 1 Change to the management/mng-protocols/snmp directory. Type: cd /management/mng-protocols/snmp and press Enter. 2 Type set admin <enable |disable>, and press Enter. To set the SNMP version: 1 Change to the management/mng-protocols/snmp directory. Type: cd /management/mng-protocols/snmp, and press Enter. 2 Type set version <v1 | v2c | v1> and press Enter. 24.3.11.1 SNMP parameters for SNMP Version 3 To set the security mode: 1 Change to the management/mng-protocols/snmp directory. Type: cd /management/mng-protocols/snmp and press Enter. 2 Type v3-security-mode < no security | authentication | authentication privacy > and press Enter. To set the authentication: 1 Change to the management/mng-protocols/snmp directory. Type: cd /management/mng-protocols/snmp and press Enter. 2 Type v3-auth-algorithm <sha | mds> and press Enter. To specify the SNMPv3 password: 1 Change to the management/mng-protocols/snmp directory. Type: cd /management/mng-protocols/snmp and press Enter. 2 Type v3-password <password> and press Enter. To set the telnet protocol: 1 Change to the management/mng-protocols/snmp directory. Type: cd /management/mng-protocols/snmp and press Enter. 2 Type set telnet-admin <enable | disable>, and press Enter. To set web security protocol: 1 Change to the management/mng-protocols directory. Type: cd /management/mng-protocols, and press Enter. 2 Type set web-admin <enable/disable> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 514 of 577 24.3.11.2 Configuring HTTPS Web Protocol Step 1 Create the NE certificate based on the NE's public key. The public key receives the public key file through upload. 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type upload-archive public-key nd press Enter. You can find your public_key file (for example, 192.168.1.18_pub_key) in your host path directory. Step 2 Download the NE certificate, and copy it to your ftp host path directory. 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board and press Enter. 2 Type set security-file-format <pem }der> and press Enter. 3 Type set security-file-type <target-certificate> and press Enter. 4 Type set security-file-name <MYCERT.crt> (your certificate file name), and press Enter. 5 Type download-archive security-file and press Enter. Step 3 (Optional) Download the NE CA's certificate. 1 Change to the platform/idc-board directory. Type: cd /platform/idc-board, and press Enter. 2 Type set security-file-format <pem |der> and press Enter. 3 Type set security-file-type <target-ca-certificate> and press Enter. 4 Type set security-file-name <EssentialSSLCA_2.crt> (your CA- certificate file name), and press Enter. 5 Type download-archive security-file, and press Enter. Step 4 (Optional) Set the web-ca-certificate-admin parameter to enable. 1 Change to the management/mng-protocols directory. 2 Type: cd /management/mng-protocols and press Enter. 3 Type set web-ca-certificate-admin <enable | disable>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 515 of 577 Step 5: Set the web-protocol parameter to HTTPS. 1 Change to the management/mng-protocols directory. Type: cd /management/mng-protocols and press Enter. 2 Type set web-protocol <https | http>, and press Enter. TIP: Enter the same URL in the web EMS, for example, https://192.168.1.1 to use the HTTPS protocol. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 516 of 577 24.3.12 CFM 24.3.12.1 Domain To add a maintenance domain: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: domain add <Domain name> <Domain level [1-7]> and press Enter. To remove a maintenance domain: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: domain remove <Domain name> <Domain level [1-7]> and press Enter. 24.3.12.2 Domain & association To add a maintenance association: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: domain add <Domain name> <Domain level [1-7]> <Association name> <VLAN ID [1-4090]> and press Enter. To remove a maintenance association: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: domain remove <Domain name> <Domain level [1-7]> <Association name> <VLAN ID [1-4090]> and press Enter. 24.3.12.3 Association To add an association: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: association add <Association name> <Domain name> <VLAN ID [1-4090]> and press Enter. To remove an association: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 517 of 577 Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: association remove <Association name> <Domain name> <VLAN ID [1-4090]> and press Enter. 24.3.12.4 CCM To enable / disable the change continuity check admin state: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ccm-admin <enable | disable> <Domain level [1-7]> <VLAN ID [1- 4090]> and press Enter. 24.3.12.5 CCM Interval To modify the CCM interval: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ccm-interval <interval time: 1-sec, 10-sec, 1-min, 10-min> <Domain level [1-7]> <VLAN ID [1-4090]> and press Enter. 24.3.12.6 Local MEP To add a local MEP according to CCM VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: mep set < MEP ID [1-8191]> < Domain level [1-7]> <VLAN ID [1- 4090]> < Direction [up/down]> <CCM VLAN Pbit priority [0-7]> and press Enter. To add a local MEP according to VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: mep set < MEP ID [1-8191]> < Domain level [1-7]> <VLAN ID [1- 4090]> < Direction [up/down]> and press Enter. To remove a local MEP: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: mep remove < MEP ID [1-8191]> < Domain level [1-7]> <VLAN ID [1-4090]> < Direction [up/down]>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 518 of 577 24.3.12.7 Remote MEP To add a remote MEP according to MAC address: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: remote-mep set <Remote MEP ID [1-8191]> <Domain name> <VLAN ID [1-4090]> <MAC address [xx:xx:xx:xx:xx:xx]> and press Enter. To add a remote MEP: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: remote-mep set <Remote MEP ID [1-8191]> <Domain name> <VLAN ID [1-4090]> and press Enter. To remove a remote MEP: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: remote-mep remove <Remote MEP ID [1-8191]> <Domain name> <VLAN ID [1-4090]> and press Enter. 24.3.12.8 MIP To add a MIP: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: mip add <Domain level [1-7]> and press Enter. To remove a MIP: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: mip remove <Domain level [1-7]> and press Enter. 24.3.12.9 Loopback (Ping) To ping message to a remote MEP or MIP according to MAID name and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mac-address <MAC address [xx:xx:xx:xx:xx:xx]> md-name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 519 of 577 To ping message to a remote MEP or MIP according to MAID name and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mac-address <MAC address [xx:xx:xx:xx:xx:xx]> md-name <Domain name> <VLAN ID[1-4090]> and press Enter. To ping message to a remote MEP or MIP according to MAID level and VLAN P- bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mac-address <MAC address [xx:xx:xx:xx:xx:xx]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To ping a message to a remote MEP or MIP according to MAID level and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mac-address <MAC address [xx:xx:xx:xx:xx:xx]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> and press Enter. To ping according to MAID name and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mep-id <Remote MEP ID[1-8191]> md-name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To ping according to MAID name and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mep-id <Remote MEP ID[1-8191]> md-name <Domain name> <VLAN ID[1-4090]> and press Enter. To ping according to MAID level and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mep-id <Remote MEP ID[1-8191]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 520 of 577 To ping according to MAID level and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: ping mep-id <Remote MEP ID[1-8191]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> and press Enter. 24.3.12.10 Link Trace To traceroute a message to a remote MEP or MIP according to MAID name and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam an press Enter. 2 Type: linktrace mac-address <MAC address [xx:xx:xx:xx:xx:xx]>md- name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To traceroute a message to a remote MEP or MIP according to MAID name and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mac-address <MAC address [xx:xx:xx:xx:xx:xx]>md- name <Domain name> <VLAN ID[1-4090]> and press Enter. To traceroute a message to a remote MEP or MIP according to MAID level and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mac-address <MAC address [xx:xx:xx:xx:xx:xx]> md- level Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To traceroute a message to a remote MEP or MIP according to MAID level and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mac-address <MAC address [xx:xx:xx:xx:xx:xx]> md- level <Domain level[1-7]> <VLAN ID[1-4090]> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 521 of 577 To perform a linktrace according to MEP ID, MAID name, and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mep-id <Remote MEP ID[1-8191]> md-name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To traceroute a message to a remote MEP according to MEP ID, MAID name and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mep-id <Remote MEP ID[1-8191]>md-name <Domain name> <VLAN ID[1-4090]> and press Enter. To perform a linktrace according to MEP ID, MAID level, and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mep-id <Remote MEP ID[1-8191]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To traceroute a message to a remote MEP according to MEP ID, MAID level and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: linktrace mep-id <Remote MEP ID[1-8191]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> and press Enter. 24.3.12.11 Auto link trace To add a remote MEP to the automatic linktrace list according to MAIN name and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: auto-linktrace add <Remote MEP ID [1-8191]> md-name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To add a remote MEP to the automatic linktrace list according to MAID name and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 522 of 577 Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: auto-linktrace add <Remote MEP ID [1-8191]>md-name <Domain name> <VLAN ID[1-4090]> and press Enter. To add an automatic linktrace according to MAID level and VLAN P-bit priority: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: auto-linktrace add <Remote MEP ID [1-8191]>md-level <Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> and press Enter. To add an automatic linktrace according to MAID level and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: auto-linktrace add <Remote MEP ID [1-8191]> md- level<Domain level[1-7]> <VLAN ID[1-4090]> and press Enter. To remove a remote MEP to the automatic linktrace list according to MAID name and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: auto-linktrace remove <Remote MEP ID [1-8191]> md-name <Domain name> <VLAN ID[1-4090]> and press Enter. To remove a remote MEP to the automatic linktrace list according to MAID level and VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: auto-linktrace remove <Remote MEP ID [1-8191]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> and press Enter. 24.3.12.12 Auto Link Trace Interval To modify the auto linktrace interval: 1 Change to the YYY directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: set auto-linktrace-interval [seconds: range 60-3600] and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 523 of 577 24.3.12.13 Remote MEP learning time To modify the remote MEP learning time: 1 Change to the interfaces/ethernet/bridge/eth-port/service-oam directory. Type cd interfaces/ethernet/bridge/eth-port[port no.]/service-oam and press Enter. 2 Type: set remote-meps-learning-time [seconds: range 60-3600] and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 524 of 577 24.3.13 Pseudowire Configuration The following is one example of a sequence for configuring a pseudowire service: 1 Configure a TDM port; 2 Configure a DS0 bundle if needed (for CESoPSN) using add-bundle command. 3 Configure a PSN tunnel 4 Configure a PW profile 5 Configure a PW service 24.3.13.1 PW T-Card Basic Configuration The PW T-Card basic parameters include the common clock and synchronization parameters and the Source IP Address for UDP/IP PSN packets. 1 Change to the interfaces/pwc directory. Type cd interfaces/pwc and press Enter. 2 Enable front panel clock support: Type set front-clock-enabled yes and press Enter. 3 Modify the IP address for UDP/IP traffic. Type set ip-addr-udpip-traffic [ip address] and press Enter. 24.3.13.2 Ethernet Traffic Port Configuration 1 Change to the interfaces/pwc/eth-port directory. Type cd interfaces/pwc/eth-port and press Enter. 2 Verify that the port is set to admin disabled (default value). Type get-admin and press Enter. 3 Modify the Ethernet Port Rate parameter. Type set Ethernet-rate 100 and press Enter. 4 Enable the port. Type set admin enable and press Enter. 5 Modify the port’s duplex setting. Type set duplex half and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 525 of 577 24.3.13.3 Configuring a SAToP UDP/IP Unprotected Service This section provides an example of configuring a pseudowire service from scratch, assuming the basic PW T-Card configurations have been made and the Ethernet port have been configured. Configuring a TDM Port for a SAToP Pseudowire Service A TDM port used with a PW SATOP service should be E1 unframed and unchannelized. 1 Go to the PWC TDM ports directory. Type cd/interfaces/pwc/tdm-ports and press Enter. 2 Set the clock source reference port to loop on itself. Type set clk-source-ref-port[7] 7 and press Enter. 3 Enable the port. Type set admin[7] enable and press Enter. No alarm is expected after activating the port, even though no trail with this port has been assigned. Assigning a TDM Port to a Trail Refer to Defining a TDM Trail on page 528. To check that the port has been properly assigned to a trail: 1 Go to the PWC TDM ports directory. Type cd/interfaces/pwc/tdm-ports and press Enter. 2 Type get assigned[7] and press Enter. Configuring a PSN Tunnel 1 Go to the PWC tunnels directory. Type cd/interfaces/pwc/tunnels and press Enter. 2 Create a new UDP/IP tunnel with id=100, destination IP 192.168.91.100, next-hop 192.168.90.1, C-VLAN 11, DSCP 10, Priority bits 7, and MA 11. Type udpip-tunnel set 100 192.168.91.100 192.168.90.1 c-type 11 10 7 11 and press Enter. Configuring a Pseudowire Profile 1 Go to the PWC profiles directory. Type cd/interfaces/pwc/pw-profiles and press Enter. 2 Add a new profile with the ID 10. Type add-pw-profile 10 and press Enter. 3 Get the internal ID of the new profile. Type show-pw-profile-by-id 10 and press Enter. 4 Set RTP header usage to enabled, using the profile’s internal ID. Type set rtp-header-used[10] true and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 526 of 577 Configure a Pseudowire Service After all components required for a particular pseudowire service have been configured, you can set up the service. 1 Go to the PW services directory. Type cd/interfaces/pwc/pws and press Enter. 2 Create a new service with the ID 1 on TDM port 7, PSN tunnel 100, profile 10, tunnel unprotected, source UDP port 101, destination UDP port 102, not a Clock Recovery master. Type add-pw 1 e1-satop udpip 7 10 disable 100 101 102 disable and press Enter. 3 Enable the service. By default, new services are created disabled. Type modify-pw 1 enable and press Enter. 24.3.13.4 Configuring a CESoPSN UDP/IP Protected Service This section provides a configuration example of a CESoPSN service, using some of the configurations described in the previous section. Configuring a TDM Port TDM ports used in CESoPSN services should be E1 basic or CAS, channelized. 1 Go to the PWC TDM ports directory. Type cd/interfaces/pwc/tdm-ports and press Enter. 2 Set the port line type to E1 multiframe (CAS), channelized, and set the clock source reference port parameters for TDM port 8, which you will use in the service. Type set line-type[8] e1-mf and press Enter. Type set channelization[8] enable and press Enter. Type set clk-source-ref-port[8] 8and press Enter. 3 Enable the port. Type set admin[8] enable and press Enter. After activating the port, an LOF alarm is expected because the port has not been assigned to any trail. Configuring a DS0 Bundle A DS0 bundle is identified by its ID, which is provided by the user. 1 Go to the PWC DS0 bundles directory. Type cd/interfaces/pwc/ds0-bundles and press Enter. 2 Create a new DS0 bundle with an ID of 20, using the first four channels of TDM port 8. Type add-bundle 20 8 1 4 and press Enter. 3 Verify the channel assignment in the TDM port. Type show-assigned-channels 8 and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 527 of 577 Configuring PSN Tunnels 4 Go to the PWC tunnels directory. Type cd/interfaces/pwc/tunnels and press Enter. 5 Create a new UDP/IP tunnel with id=200, destination IP 192.168.91.100, default next-hop 192.168.90.1, C-VLAN 20, MA 12. Type udpip-tunnel set 200 192.168.91.100 192.168.90.1 c- type 11 10 7 12 and press Enter. 6 Create a new UDP/IP tunnel with id=201, destination IP 192.168.91.100, default next-hop 192.168.90.2, C-VLAN 30, MA 13. Type udpip-tunnel set 201 192.168.91.100 192.168.90.2 c- type 30 10 7 13 and press Enter. Configuring a Pseudowire Service After all components required for a particular service have been configured, you can set up the service. 1 Go to the PW services directory. Type cd/interfaces/pwc/pws and press Enter. 2 Create a new service with the ID 2 on TDM port 8, profile 10, src/dest UDP IP ports 1101 and 1102, respectively. Type add-pw 2 cas-cespsn udpip 8 10 enable 1101 1102 and press Enter. 3 Enable the service. By default, new services are created disabled. Type modify-pw 2 enable and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 528 of 577 24.3.14 TDM trail management 24.3.14.1 Defining a TDM Trail To define a TDM trail: 4 Change to the cd /interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 5 Type: add-trail <trail ID> <trail description> <ACM priority> <operational/reserved> <protected/unprotected> <interface 1 slot #> <interface 1 type> <interface 1 number> <interface 2 slot #> <interface 2 type> <interface 2 number> and press Enter. Arguments description: Trail-ID: up to 16 alphanumeric characters Trail description: string up to 32 characters ACM priority: high or low Operational/reserved: reserved trails are introduced in the database and the bandwidth will not be used for TDM traffic (it may be used for Ethernet traffic) but traffic does not flow. For operational trails bandwidth is fully allocated and traffic flows Protected/unprotected: unprotected trails are mappings between two interfaces only. Protected trails are mappings between an end-point interfaces and two other interfaces, the first of which is the primary path and the second of which is the secondary path (see SNCP section below). Interface slot: slot number of the IDU containing the interface (from 1 to 6) Interface type: line (E1/T1) or radio Interface number: the number of the E1/T1 interface or radio VC to be used. For E1/T1 it can be 1 to 32 (1 to 16 if no extra 16 E1 T-card is installed) For radio, the maximum number depends on the radio script being used Unprotected trail example: add-trail id1 desc1 high operational unprotected 1 line 1 1 radio 1. 24.3.14.2 Viewing Trails Defined in the System To show all trails: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: show-all-trails and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 529 of 577 To show a specific trail by its ID: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: show-trail-by-id <trail ID> and press Enter. To show a specific trail by its source interface: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: show-trail-by-src <interface 1 slot #> <interface 1 type> <interface 1 number>, and press Enter. The trails will be shown in a table as follows (this is an example of a trail from E1#1 in slot 2 to radio VC#1 in slot 3: ============================================================ Legend: s/i/n/- 's'=slot-id 'i'=if-type 'n'=if-num '-'=Empty s(0..6) i(l=line/r=radio/s=stm-1/c=chain/s=sync_ethernet) n(1..180) =========================================================== Source Dest1 Dest2 Dest3 Dest4 Dest5 Dest6 Dest7 Dest8 Dest9 ------------------------------------------------------------- IndexInDb = 1, ID = t1, Desc = d1, Prio = high Act = operational, TS = (0) 2/l/ 1 3/r/ 1 - - - - - - - - ------------------------------------------------------------ where 2/l/1 denotes slot 2/line/interface 1. 24.3.14.3 Deleting trails To delete all trails 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: del-all-trails and press Enter. To delete a specific trail by its ID: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: del-trail-by-id <trail ID>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 530 of 577 To delete a specific trail by its source interface: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: del-trail-by-src <interface 1 slot #> <interface 1 type> <interface 1 number>, and press Enter. 24.3.14.4 Activating and reserving trails To activate/reserve all trails 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: act-all-trails, and press Enter. To activate/reserve a specific trail by its ID: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: act-trail-by-id <trail ID>, and press Enter. 24.3.15 TDM Protected Trails (SNCP) All operations for unprotected trails are available for protected trails as well. The additional operations for protected trails are described in this section. 24.3.15.1 Defining a Protected TDM Trail To define a TDM trail, at the main unit: 1 Log in. 2 Change to the interfaces/pdh/trails directory. 3 Type: cd /interfaces/pdh/trails and press Enter. 4 Type: add-trail <trail ID> <trail description> <ACM priority> <operational/reserved> <protected/unprotected> <end-point interface slot #> < end-point interface type> < end-point interface number> <primary path slot #> < primary path type> < primary path number> <secondary path slot #> < secondary path type> < secondary path number>, and press Enter. Arguments description: Trail-ID: up to 16 alphanumeric characters Trail description: string up to 32 characters ACM priority: high or low Operational/reserved: reserved trails are introduced in the database and the bandwidth won’t be used for TDM traffic (it may be used for Ethernet traffic) but traffic does not flow. For operational trails bandwidth is fully allocated and traffic flows Protected/unprotected: unprotected trails are mappings between two interfaces only. Protected trails are mappings between an end-point interfaces and two other interfaces, the first of which is the primary path and the second of which is the secondary path FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 531 of 577 Interface slot: slot number of the IDU containing the interface (from 1 to 6) Interface type: line (E1/T1) or radio Interface number: the number of the E1/T1 interface or radio VC to be used. For E1/T1 it can be 1 to 32 (1 to 16 if no extra 16 E1 T-card is installed) For radio, the maximum number depends on the radio script being used Protected trail example: add-trail id1 desc1 high operational protected 1 line 1 2 radio 1 3 radio 1. 24.3.15.2 Forcing trails to active/standby Each protected trail can be forced to make either one of its paths active (or none of them). To force all trails to one of their paths 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: protected-trail-force-active <Id> <path>, and press Enter. To force a specific trail by its ID 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type to one of its paths type: protected-trail-force-active-by-id <Id> <path>, and press Enter. Arguments description: <Id> - trail ID <path> - “primary”, “secondary” or “none” FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 532 of 577 24.3.16 Showing TDM Trail PMs and Status 24.3.16.1 Showing TDM Trail PM Measurements To show PMs of all trails: 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: show-all-trail-pms, and press Enter. To show a specific trail’s PMs by its ID 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: show-trail-pms-by-id <trail ID> <15 min interval | 24h interval> and press Enter. <15min/24h interval> is the interval number to be shown, where 0 is the current interval, 1 is the previous one and so on. If no interval is selected, the current one will be shown. 24.3.16.2 Showing TDM Trail Status To show PMs of all trails 1 Change to the interfaces/pdh/trails directory. Type: cd /interfaces/pdh/trails and press Enter. 2 Type: show-all-trail-alarms and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 533 of 577 24.3.17 Configuring the Ethernet Switch Application The Ethernet Switch menu includes the Switch configuration, STP protocol, STP configuration, and QoS & rate limiting items. The Ethernet switching methods include: Smart (Single) Pipe - Ethernet switching is disabled, whereby only a single Ethernet interface is used for traffic and the unit operates as a point-to- point microwave Ethernet radio. Managed Switch - For Layer 2 802.1Q switching. Metro switch - Ethernet Q-in-Q provider switch is enabled. To set the Ethernet switching method: 1 Change to the interfaces/ethernet/bridge directory. 2 Type: cd interfaces/ethernet/bridge and press Enter. 3 Type: set ethernet-application <Ethernet application type> (Single pipe, Managed switch, or Metro switch), and press Enter. The system will reset (automatically). FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 534 of 577 24.3.18 Configuring the LAG Ports You can group different ports into a single LAG (link aggregation) port. 24.3.18.1 Setting load balancing of the LAG The load balancing of the LAG can be set to Hash function or simple Xor. To set the LAG load balancing: 1 Change to the interfaces/bridge directory. 2 Type: cd /interfaces/bridge and press Enter. To set load balancing to Hash function, type: set lag-load-balance hash, and press Enter. To set load balancing to simple Xor function, type: set lag- load-balance simple-xor, and press Enter. 24.3.18.2 Assigning ports to a LAG You should only assign ports to a LAG, with these limitations: Only traffic ports (including the radio port) can belong to a LAG. Ports that are configured as management or wayside ports cannot belong to a LAG. A LAG can only be defined in IDUs which are configured as a Managed switch or Metro switch. All ports in a LAG group must be located in the same IDU (switch). There may be a maximum of three LAGs per IDU. A LAG may contain from one to five physical ports. When you add ports to a LAG, you must observe the following restrictions: Ports 1 & 2 (GBE ports) and ports 3 - 7 (FE only ports) cannot be in the same LAG group. (This is true even if the GBE ports are configured at 100Mbps.) The Radio port (port 8) can only be in assigned to a LAG with GBE ports. To assign ports to a LAG: 1 Change to the interfaces/bridge /eth-port directory. Type: cd interfaces/bridge /eth-port[< port number>], and press Enter. 2 Type: set lag-port group- <LAG number> (1 – 3), and press Enter. 3 Repeat steps 2 and 3 for each port that is being added to the LAG. 24.3.18.3 Defining LAG Options To enable or disable port admin: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set admin <enable/disable>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 535 of 577 To set auto negotiation on/off: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set auto-negotiation <on/off>, and press Enter. To set the port type: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set type <access/trunk/hybrid>, and press Enter. To enable or disable port learning: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set learning <enable/disable>, and press Enter. To enable or disable port service type: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set service type <network/access>, and press Enter. To set classify default: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set qos-classify-default<1st, 2nd, 3rd, 4th>, and press Enter. To set classify initial QoS: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set qos-classify-initial < ip-tos, ip-tos-over-vlan-pbits, port, vlan-pbits, vlan-pbits-over-ip-tos>, and press Enter. To set classify VLAN ID override: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set qos-classify-vid-override <disable, pbit-override, queue- and-pbit-override, queue-override>, and press Enter. To set classify mac da override: 1 Change to the interfaces/bridge /eth-port directory. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 536 of 577 Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type set qos-classify-mac-da-override <disable, pbit-override, queue-and-pbit-override, queue-override>, and press Enter. To set Egress scheduler: 1 Change to the interfaces/bridge /eth-port directory. Type cd interfaces/bridge/eth-port[< port number>] and press Enter. 2 Type: set qos-scheduling-scheme < all-queues-hrr, all-queues-strict, fourth-and-third-queues-strict, fourth-queue-strict >, and press Enter. 24.3.18.4 Deleting a LAG You must remove each port from the LAG to delete the LAG from the system. To delete a LAG: 1 Change to the interfaces/bridge /eth-port directory. Type: cd interfaces/bridge /eth-port[< port number>], and press Enter. 2 Type: set lag-port not-aggregated, and press Enter. 3 Repeat steps 2 and 3 for each port that is already assigned to the LAG. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 537 of 577 24.3.19 Management Ports To set the number of management ports 1 Change to the management/networking directory. Type: cd /management/networking and press Enter. 2 Type: set number-of-ports <no. of ports>(0-3), and press Enter. To set the management type (inband, outband, VLAN) 1 Change to the management/networking directory. Type: cd /management/networking and press Enter. 2 Type set type < in-band or out-of-band >, and press Enter. If you choose in-band, you should configure management VLAN ID: 1 Change to the management/networking directory. Type: cd /management/networking and press Enter. 2 Type set vlan <no. of VLAN> (1-4090), and press Enter. 24.3.19.1 Port configuration Flow control To enable or disable flow control (Smart Pipe only): 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set flow-control <on | off>, and press Enter. Managed switch Ethernet ports To enable or disable port admin: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set admin <enable | disable>, and press Enter. To set port speed rate: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set ethernet-rate <Rate> (10, 100 or 1000 Mbps), and press Enter. To set port duplex: 1 Change to the interfaces/ethernet/bridge/eth-port directory. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 538 of 577 Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set duplex < full-duplex | half-duplex >, and press Enter. To set auto negotiation on/off: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set auto-negotiation <on/off>, and press Enter. To set the port type: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set type <access or trunk>, and press Enter. To set the default VLAN ID: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set vlan <VLAN no.> (1-4090), and press Enter. To enable or disable port learning: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set learning <enable/disable>, and press Enter. To add, remove, or accept VLANs: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set-allowed-vlans <add, except, remove> <VLAN no.>, and press Enter. 3 Type set-allowed-vlans < all, no-vlans>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 539 of 577 24.3.20 VLAN Configuration To add, remove, enable, or disable VLANs: 1 Change to the interfaces/ethernet/bridge directory. Type cd interfaces/ethernet/bridge and press Enter. 2 Type vlan <VLAN no.> <add, remove, enable, disable>, and press Enter. To add or change the VLAN name: 1 Change to the interfaces/ethernet/bridge directory. Type cd interfaces/ethernet/bridge and press Enter. 2 Type vlan <VLAN no.> name <VLAN name>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 540 of 577 24.3.21 QoS Configuration 24.3.21.1 Ingress Classifier To set initial classification: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set qos-classify-initial < ip-tos, ip-tos-over-vlan-pbits, port, vlan-pbits, vlan-pbits-over-ip-tos>, and press Enter. To set classify VID override: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set qos-classify-vid-override <disable, pbit-override, queue- and-pbit-override, queue-override>, and press Enter. To set classify MAC da override: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set qos-classify-mac-da-override <disable, pbit-override, queue-and-pbit-override, queue-override>, and press Enter. To set default classification: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set qos-classify-default<1st, 2nd, 3rd, 4th>, and press Enter. 24.3.21.2 Egress scheduler To set Egress scheduler: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: set qos-scheduling-scheme < all-queues-hrr, all-queues-strict, fourth-and-third-queues-strict, fourth-queue-strict >, and press Enter. 24.3.21.3 Egress shaper To set egress shaper: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 541 of 577 2 Type: set qos-egress-shaper <on/off,> and press Enter. 3 Type: set qos-egress-shaper-rate <rate>, and press Enter. 24.3.21.4 Policer To add/remove a policer: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: qos-policer <add, remove> <policer name>, and press Enter. To add a class to the policer: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: qos-policer-class <add, remove> <policer class name> <policer name> <matching type: all, arp, first-queue, second-queue, third-queue, fourth-queue, broadcast, multicast, non-tcp-udp, tcp-control, tcp-data, udp, unicast, unknown-unicast, unknown-multicast> <rate> <CBS> <exceed action: drop>, and press Enter. 3 Type: qos-show-policers to verify the data, and press Enter. 24.3.21.5 QoS tables To set VLAN Pbits priority remap table: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: qos-set-vlan-pbits-prio-remap <original Pbit> <Remapped Pbit>, and press Enter. To set VLAN ID to queue table: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type: qos-vlan-to-queue set/remove <VID> <queue ID: 1st-queue, 2nd-queue, 3rd-queue, 4th-queue >, and press Enter. To set VLAN Pbits to queue table: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type: cd interfaces/ethernet/bridge and press Enter. 2 Type: qos-set-vlan-tag-pbit-val <VLAN_Pbit> <queue ID: 1st-queue, 2nd-queue, 3rd-queue, 4th-queue >, and press Enter. To set IP Pbits to queue table: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type: cd interfaces/ethernet/bridge and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 542 of 577 2 Type: qos-set-ip-pbit-val <IP_Pbit> <queue ID: 1st-queue, 2nd- queue, 3rd-queue, 4th-queue>, and press Enter. To set IP priority options: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type: cd interfaces/ethernet/bridge and press Enter. 2 Type: set qos-ip-tos-tc-pbits-option <diffserv, ip-precedence>, and press Enter. To set static MAC table: 1 Change to the interfaces/ethernet/bridge directory. Type: cd interfaces/ethernet/bridge and press Enter. 2 Type: qos-static-mac-priority set/remove <MAC address> <dest.port no.[1-8]> <priority [0-7]> <VLAN ID [1-4090]>, and press Enter. To set queue weights table: 1 Change to the interfaces/ethernet/bridge directory. Type: cd interfaces/ethernet/bridge and press Enter. 2 Type: qos-set-scheduler-q-weight <queue ID: 1st-queue, 2nd-queue, 3rd-queue, 4th-queue > <weight:1-32>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 543 of 577 24.3.22 Auxiliary Channels 24.3.22.1 Wayside Channel To set port admin: 1 Change to the interfaces/wayside directory. Type: cd interfaces/wayside and press Enter. 2 Type: set admin <enable/disable>, and press Enter. To set port rate: 1 Change to the interfaces/wayside directory. Type: cd interfaces/wayside and press Enter. 2 Type: set ethernet-rate <10mbps or 100mbps>, and press Enter. To set auto negotiation on/off: 1 Change to the interfaces/wayside directory. Type: cd interfaces/wayside and press Enter. 2 Type: set auto-negotiation <on/off>, and press Enter. To set port duplex: 1 Change to the interfaces/wayside directory. Type: cd interfaces/wayside and press Enter. 2 Type: set duplex <full-duplex or half-duplex>, and press Enter. 24.3.22.2 User channel To set port admin: 1 Change to the interfaces/auxiliary/user-channel directory. Type: cd interfaces/auxiliary/user-channel and press Enter. 2 Type: set admin <enable/disable>, and press Enter. To set port type: 1 Change to the interfaces/auxiliary/user-channel directory. Type: cd interfaces/auxiliary/user-channel and press Enter. 2 Type: set type asynchronous-<rs232 or v-11> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 544 of 577 24.3.23 Automatic State Propagation, 1+0 Configuration Only To set automatic state propagation (GBE-mute-override) in a Smart Pipe application: 1 Change to the interfaces/ethernet directory. Type: cd interfaces/ethernet and press Enter. 2 Type: set-gbe-mute-override <criteria: none, lof-loc, lof-loc-excber, lof-loc-remote, lof loc-excber-remote >, and press Enter. To set automatic state propagation ( GBE-mute-override) in a managed or metro application: 1 Change to the interfaces/ethernet directory. Type: cd interfaces/ethernet and press Enter. 2 Type: set-gbe-mute-override <criteria: none, lof, lof-excber, lof- remote, lof-excber-remote >, and press Enter. 24.3.23.1 Ethernet Shutdown (Rx) Profile Threshold (ACM Enabled) To set Ethernet shutdown (Rx) profile threshold: 1 Change to the radio/mrmc directory. Type: cd radio/mrmc and press Enter 2 Type: set eth-shutdown-threshold-profile < profile-0 to profile-7 >, and press Enter. 24.3.23.2 Metro Switch and Port Type Configuration To set Metro switch as the application type: 1 Change to the interfaces/ethernet/bridge directory. Type: cd interfaces/ethernet/bridge and press Enter. 2 At the new prompt, type set ethernet-application metro-switch, and press Enter. 3 Confirm by typing yes, and press Enter. The system will restart automatically. To set the port type (CN/PN): 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.] and press Enter. 2 Type set type customer-network (or provider-network), and press Enter. To set default VLAN on CN ports: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.], and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 545 of 577 2 At the new prompt, type set vlan <VLAN ID>, and press Enter. To set allowed VLANs on PN ports: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.], and press Enter. 2 At the new prompt, type set-allowed-vlans <add,all,except,no- vlans,remove> <VLAN ID>, and press Enter. To set provider port ether type: 1 Change to the interfaces/ethernet/bridge/eth-port directory. Type cd interfaces/ethernet/bridge/eth-port[port no.], and press Enter. 2 At the new prompt, type set provider-port-ethertype <0x88a8, 0x8100, 0x9100, 0x9200>, and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 546 of 577 24.3.24 Radio script configuration To set the radio script: 1 Change to the radio/mrmc directory. Type cd radio/mrmc and press Enter. 2 Type change-script-cmd < Script's name> < Operational mode> <Maximum profile> disable-adaptive-power, then press Enter. Parameter values for the radio script include: Script name 10Mbps-6.5MHz-4QAM-Grade-1 155Mbps-26MHz-128QAM-Grade-1 181Mbps-26MHz-256QAM-Grade-1 20Mbps-6.5MHz-16QAM-Grade-1 39Mbps-26MHz-4QAM-Grade-1 39Mbps-6.5MHz-256QAM-Grade-1 47Mbps-9MHz-64QAM-Grade-1 ACM_181Mbps-26MHz-256QAM-Grade-1 ACM_367Mbps-52MHz-256QAM-Grade-1 ACM_42Mbps-6.5MHz-256QAM-Grade-1 ACM_87Mbps-12.5MHz-256QAM-Grade-1 Operational mode acm-adaptive-mode acm-fixed-mode regular-mode (for non ACM scripts) Maximum profile profile-0 profile-1 profile-2 profile-3 profile-4 profile-5 profile-6 profile-7 In “regular mode” only “profile-0” is available. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 547 of 577 24.3.25 Ring RSTP To enable Ring RSTP: 1 Change to the interfaces/ethernet/bridge directory. Type cd /interfaces/ethernet/bridge/ and press Enter. 2 Set the STP protocol. 3 Type set stp-protocol ring-rstp, and press Enter. To set bridge priority: 1 Change to the interfaces/ethernet/bridge directory. Type cd /interfaces/ethernet/bridge and press Enter. 2 Type set priority <priority no: range 0-61440, steps of 4096> and press Enter. To set interface’s priority: 1 Change to the interfaces/ethernet/bridge/ethe-port directory. Type cd /interfaces/ethernet/bridge/ethe-port[port no.] and press Enter. 2 Type set priority <interface priority no: range: 0-240, steps of 16> and press Enter. To set interface’s patch cost: 1 Change to the interfaces/ethernet/bridge/ethe-port directory. Type cd /interfaces/ethernet/bridge/ethe-port[port no.] and press Enter. 2 Type set path-cost <patch cost> and press Enter. To set if interface is an “edge” port or “ring” port (“non-edge” port): 1 Change to the interfaces/ethernet/bridge/ethe-port directory. Type cd /interfaces/ethernet/bridge/ethe-port[port no.] and press Enter. 2 Type set edge-port <yes | no> and press Enter. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 548 of 577 25. Appendix B – List of Alarms # Name Severity Type Description Probable cause Corrective Actions 101 ext-in-alarm indeterminate Alarm External alarm input (%1). User configured input problem. Check source description, and correct accordingly. 201 bridge- configuration- loss warning Event Loss of bridge configuration during reset Power failure during configuration change Verify bridge configuration. 301 excessive-ber major Alarm E1/DS1 excessive BER on port #%1. 1) Line is not properly connected. 2) External equipment is faulty. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Power cycle the system. 302 loopback- towards-line major Alarm E1/DS1 loopback towards line on port #%1. User configured system to loopback mode. Cancel loopback configuration. 303 loopback- towards-radio major Alarm E1/DS1 loopback towards radio on port #%1. User configured system to loopback mode. Cancel loopback configuration. 304 loss-of-signal major Alarm E1/DS1 loss of signal on port #%1. 1) Line is not properly connected. 2) External equipment is faulty. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Power cycle the system. 305 signal- degrade minor Alarm E1/DS1 signal degrade on port #%1. 1) Line is not properly connected. 2) External equipment is faulty. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Power cycle the system. 306 unexpected- signal warning Alarm E1/DS1 unexpected signal on port #%1. 1) Port is disabled. 2) Line is connected to a disabled port. 1) Enable relevant port. 2) Disconnect cable from relevant port. 307 std-trap-link- up indeterminate Alarm E1/DS1 link up trap. 308 std-trap-link- down indeterminate Alarm E1/DS1 link down trap. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 549 of 577 # Name Severity Type Description Probable cause Corrective Actions 401 eth-loc-alarm major Alarm Ethernet loss of carrier on port #%1. 1) FE cable disconnected. 2) Defective FE cable. 1) Check connection of FE cable. 2) Replace FE cable. 402 eth-tx-mute- alarm warning Alarm Ethernet Tx mute override on port #%1. Radio LOF/EXBER/Link ID on local or remote side (in pipe application). Check link. 403 gbe-loc-alarm major Alarm Gigabit Ethernet loss of carrier on port #%1. 1) Cable is not connected to the port. 2) Cable is defective. 1) Connect cable to the port. 2) Replace cable. 404 gbe-sfp-alarm major Alarm Gigabit Ethernet SFP not intact on port #%1. SFP is not inserted 1) Check SFP connector. 2) Replace fiber. 405 gbe-sfp-tx- alarm major Alarm Gigabit Ethernet SFP Tx fault on port #%1. SFP malfunction. Replace SFP. 406 gbe-tx-mute- alarm warning Alarm GBE Tx mute override on port #%1. Radio LOF/EXBER/Link ID on local or remote side. Check link. 407 std-trap-link- up indeterminate Alarm Ethernet link up trap. 408 std-trap-link- down indeterminate Alarm Ethernet link down trap. 409 change-in- stp-role warning Event Change in RSTP role for port: %1; New role: %2; New state: %3; Root bridge ID: %4; Bridge role: %5. 501 file-load- error-alarm critical Alarm Firmware file load error (%1). 1) Firmware file is missing. 2) System error on power up. 1) Move Management to port 2. 2) Download firmware file. 3) Reset system. 502 file-not-found- alarm critical Alarm Firmware file not found (%1). 1) Firmware file is missing. 1) Download firmware file. 2) Reset system. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 550 of 577 # Name Severity Type Description Probable cause Corrective Actions 601 radio- excessive-ber major Alarm Excessive BER on radio. 1) Fade in the link. 2) Defective IF cable. 3) Fault in RFU. 4) Fault in IDU. 1) Check link performance. 2) Check IF cable, and replace if required. 3) Replace RFU. 4) Replace IDU. 602 radio-link-id- mismatch critical Alarm Link ID mismatch. Link ID is not the same for both sides of link. Configure the same link ID for both sides of link. 603 radio-lof critical Alarm Loss of frame on radio. 1) Fade in the link. 2) Defective IF cable. 3) Fault in RFU. 4) Fault in IDU. 5) Different radio scripts at both ends of the link. 1) Check link performance. 2) Check IF cable, and replace if required. 3) Replace RFU. 4) Replace IDU. 5) Make sure same script is loaded at both ends of the link. 604 radio-signal- degrade minor Alarm Signal degrade on radio. 1) Fade in the link. 2) Defective IF cable. 3) Fault in RFU. 4) Fault in IDU. 1) Check link performance. 2) Check IF cable, and replace if required. 3) Replace RFU. 4) Replace IDU. 605 std-trap-link- up indeterminate Alarm Radio link up trap. 606 std-trap-link- down indeterminate Alarm Radio link down trap. 701 alarms-file major Alarm System alarm file not found. The alarm file was deleted or is corrupted. Download alarm file. 702 cold-reset- event warning Event Cold reset event. Cold reset command was issued. 703 config- creation- failed warning Event Configuration creation failed. Re-try configuration creation. 704 config- creation- succeeded warning Alarm Configuration creation succeeded. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 551 of 577 # Name Severity Type Description Probable cause Corrective Actions 705 config- download- failed warning Event Configuration download failed. Download failure. Re-try download procedure. 706 config- download- succeeded warning Event Configuration download succeeded. 707 config-install- failed warning Event Configuration install failed. 1) Corrupt file. 2) Internal SW error. 1) Re-install file. 2) Download and install file. 708 config-install- succeeded warning Event Configuration install succeeded. 709 config- upload-failed warning Event Configuration upload failed. Re-try upload procedure. 710 config- upload- succeeded warning Event Configuration upload succeeded. 711 entity-init-fail- alarm major Alarm SW failed to properly initialize. SW error during system initialization. Reset system. 712 entity-init-fail- event major Event SW error: entity %1 initialization failure. SW error during system initialization. Reset system. 713 extreme- temperature warning Alarm IDU is in extreme temperature condition. The external cooling/heating system is not operating. Turn on external cooling/heating systems. 714 fan-failure minor Alarm Fan failure. Defective fan unit. Replace fan unit. 715 general- hardware- failure critical Alarm General HW failure %1. Defective HW. 1) Reset system. 2) Replace IDU. 716 kernel- backup minor Alarm Backup kernel is running. 1) New software was installed when system time was "older" than the time when the previous version was installed. 2) The kernel (/boot/uImage) is corrupted or missing. 1) Re-install the SW when system time is updated. 2) Update time and run the following command: management/mng- services/mng- software/ . 3) Package-reinstall kernel-2.6.14.7- aidc.3.14.e300c2.rp m kernel-modules- 0.3.13- 2.6.14.7_aidc.3.14. e300c2.rpm. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 552 of 577 # Name Severity Type Description Probable cause Corrective Actions 717 low-input- voltage warning Alarm Low input voltage detected. Low input to the system. Check power supply voltage. Note: If the system includes a dual-feed power connection, this alarm may be raised if only one of the power inputs is actually connected, even though the system is receiving adequate power from the connected input. You can configure the system to avoid this. See Configuring Power Supply Alarms on page 377. 718 param-set- fail-alarm warning Alarm Parameter set failure. SW error. 1) Look in Alarm Log for matching event. 2) In the event, look for exact parameter that has failed. 3) Set the parameter again via the CLI. Note: the alarm will be cleared after reset. 719 param-set- fail-event major Event SW error: parameter %1 set failed. SW error. Reset system. 720 warm-reset- event warning Alarm Warm reset event. SW reset in the system. 721 cli-script- download- failed warning Event CLI configuration script download failed. Download failure. Re-try download procedure. 722 cli-script- download- succeeded warning Event CLI configuration script downloaded successfully. 723 cli-script- executed warning Event CLI configuration script activated. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 553 of 577 # Name Severity Type Description Probable cause Corrective Actions 724 cli-script- execution- succeeded warning Event CLI configuration script executed successfully. 725 cli-script- execution- failed warning Event CLI configuration script failed. CLI configuration script execution failure. 1) Correct CLI configuration script. 2) Download corrected script. 3) Execute script. 726 public-key- upload-failed warning Event Public key upload failed. 727 public-key- upload- succeeded warning Event Public key upload succeeded. 728 lvds- backplane- error-main major Alarm Errors in TDM backplane channel for slot #%1. (1) Extension or main unit equipment failure. (2) Backplane failure. (1) Re-insert unit. (2) Power-cycle unit. (3) Replace unit (4) Check backplane 729 lvds- backplane- error-extn major Alarm Errors in TDM backplane channel in connection with main. (1) Extension or main unit equipment failure. (2) Backplane failure. (1) Re-insert unit. (2) Power-cycle unit. (3) Replace unit. (4) Check backplane. 730 lvds-db-error major Alarm Errors are detected in connection with T-card. (1) IDU HW failure. (2) T-card HW failure. (1) Re-insert T-card. (2) Power-cycle unit. (3) Replace T- card. (4) Replace IDU. 731 csr-file- upload- succeeded warning Event CSR file upload succeeded. 732 csr-file- upload-failed warning Event CSR file upload failed. 801 corrupted-file- alarm critical Alarm Inventory file (%1) is corrupted. 1) Inventory file is missing. 2) Inventory file was found to be corrupt upon system power up. 1) Reset system. 2) Download inventory file.. 802 file-not-found- alarm critical Alarm Inventory file (%1) was not found. Inventory file is missing. 1) Download inventory file. 2) Reset system. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 554 of 577 # Name Severity Type Description Probable cause Corrective Actions 901 demo- license-alarm warning Alarm Demo license is being used by customer. Demo license activated by user. 1) Terminate demo license. 2) Activate operational license. 902 license- demo-expired warning Event License demo expired. Demo trial period has ended. Obtain a valid license. 903 license- demo-start- by-user warning Event User started demo license. 904 license- demo-stop- by-user warning Event Demo license stopped by user. 905 license-load- fail warning Event License load failure %1. License load operation failed. 1) Invalid serial number - license code does not match unit's serial number. 2) License version mismatch. 1) Compare unit's serial number with license serial number (3 left characters of license code with 3 right characters of unit's serial). 2) Check code license generation sequence. 3) Contact Tech support. 906 license-load- successful warning Event License load successful. 907 license- violation- alarm warning Alarm License violation: %1. Unit does not match license feature set. 1) Check that the code was entered correctly. 2) Call tech support for new license generation. 908 demo- license- about-to- expire-alarm major Alarm Demo license is about to expire within 48 hours and will initiate a system cold reset. Demo license activated by user. 1) Terminate demo license. 2) Activate operational license. 909 license- violation- detected warning Event License violation detected: %1. User configuration doesn't match licensed feature set. (1) Fix configuration to correspond to loaded licenses. (2) Load proper license. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 555 of 577 # Name Severity Type Description Probable cause Corrective Actions 910 license- signature-fail major Alarm License code checking failed due to invalid product serial number. Product serial number or internal files error. Change IDU. 1001 cable- disconnected -alarm major Alarm Protection cable is not properly connected. 1) Cable is not connected between protection ports. 2) Cable is connected to wrong port. 3) Cable is damaged. 1) Connect Ethernet cable to protection port of both IDUs. 2) Replace cable. 1002 configuration- mismatch- alarm major Alarm Mismatch between IDUs in protection mode. The configurations of the IDUs are not identical. .Apply Copy to Mate from the desired IDU. 1003 copy-to-mate- completed- event warning Event Copy to mate completed. 1004 copy-to-mate- failure-event warning Event Copy to mate failed. Initiate another Copy to Mate command. 1005 copy-to-mate- started-event warning Event Copy to mate process started. 1006 exc-ber- change- remote-tx- sent-event major Event Request from remote side to perform a protection switch. Active Tx at local side is not transmitting. 1) Check the Tx level of active unit. 2) Check if active unit was set to Mute. 3) Check active unit's RFU. 1007 force-switch- alarm major Alarm Force switch command was issued. 1) User command - force protection switch. 1) Clear force switch command. 1009 lockout-alarm major Alarm Protection lockout command was issued. User issued protection lockout. Clear lockout command. 1010 lof-change- remote-tx- sent-event warning Event Remote side requests protection switch due to radio loss of frame. 1) Active Tx at local side is not transmitting. 2) Fade in the link path. 1) Check the Tx level of active unit. 2) Check if active unit was set to Mute. 3) Check active unit's RFU. 4) Check PM for fade in link path. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 556 of 577 # Name Severity Type Description Probable cause Corrective Actions 1011 manual- switch-req- event warning Event Local switch due to user request. User request to perform local switch. 1012 mate-comm- failure-alarm major Alarm IDU cannot communicate with its mate IDU. 1) IDU IP addresses are identical. 2) IDU IP subnets are not identical. 3) In stand-alone configuration: protection cable is not properly connected. 4) In stand-alone configuration: protection cable is damaged. 1) Check IP address and subnet definition in both units. 2) In stand- alone configuration: check protection cable connectivity. 3) In stand-alone configuration: replace protection cable. 1013 protection- mode- changed- event warning Event Protection mode changed to %1 %2. 1014 sd-change- remote-tx- sent-event warning Event Remote side is requesting a protection switch due to radio signal degrade. 1) Link fade. 2) Defective IF cable. 3) RFU fault. 4) IDU fault. 1) Check link performance. 2) Check IF cable. 3) Check RFU. 4) Check IDU 1015 bridge-xml- file-alarm warning Alarm 1101 download- failed warning Event Software download failed event. 1) There are no valid packages for download at remote server. 2) Communication with remote server is down. 3) Remote server access credentials are not valid. 4) Remote server URL is not valid. 1102 download- succeeded warning Event Software download succeeded event. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 557 of 577 # Name Severity Type Description Probable cause Corrective Actions 1103 install-failed warning Event Software installation failed event. 1) There are no valid packages for installation at local update directory. 2) One or more package has unresolved dependencies, i.e. requires another package(s) to be installed first. 1104 install- succeeded warning Event Software installation succeeded event. 1105 timed-install warning Event User has either started or canceled a timed installation. SW %1 timer %2 command; timer: %3 seconds. 1201 firmware-file- missing-alarm critical Alarm Modem firmware file was not found. Modem file is missing. 1) Download Modem file. 2) Reset system. 1202 firmware- load-error- alarm critical Alarm Modem firmware was not loaded successfully. 1) File is corrupt. 2) System failure. 1) Download file. 2) Reset system. 1203 modem-wd- reset-event warning Event Modem WD reset. 1301 fpga-file- corrupt-alarm critical Alarm Radio script LUT is not valid. 1) Faulty file. 1) Download radio script LUT. 1302 fpga-file-not- found-alarm critical Alarm Radio script LUT not found. File was not downloaded to system. Download radio script. 1303 incompatible- script-alarm critical Alarm Incompatible script: %1 %2. Incompatibility between RFU and loaded radio script. 1) Change RFU. 2) Change Radio script. 1304 modem- script-file- corrupt-alarm critical Alarm Radio script is not valid. File is corrupt. Download file. 1305 modem- script-file-not- found-alarm critical Alarm Radio script not found. File not found. Download file. 1306 mrmc-file- corrupt-alarm critical Alarm MRMC file not valid. File is corrupt. Download file. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 558 of 577 # Name Severity Type Description Probable cause Corrective Actions 1307 mrmc-file-not- found-alarm critical Alarm MRMC file not found. File not found. Download file. 1308 rfu-file- corrupt-alarm critical Alarm RFU file not valid. File is corrupt. Download file. 1309 rfu-file-not- found-alarm critical Alarm RFU file not found. File not found. Download file. 1310 radio-script- not- supported-by- hw-alarm critical Alarm Radio script not supported by hardware. Script capacities above 100 Mbps not supported by this hardware. Configuration from another system loaded into F-series hardware. 1) Change radio script. 2) Make sure right hardware is installed. 1311 acm-profile- below- defined-thr- alarm warning Alarm TX ACM profile has dropped below the threshold defined by user. Fade in Link Make sure transmission power and ACM settings are adequate for link conditions. 1401 incompatible- rfu-tx- calibration major Alarm RFU calibration tables require IDC SW upgrade. RFU calibration tables require IDC SW upgrade. Upgrade IDU SW. 1501 remote- communicatio n-failure major Alarm Remote communication failure alarm. 1) Fade in the link. Check link performance. 1601 if-loopback- alarm warning Alarm IF loopback initiated. 1) User enabled IF loopback. Disable IF loopback. 1602 lock-detect- alarm critical Alarm IF synthesizer unlock. 1) Extreme temperature condition. 2) HW failure. 1) Check installation. 2) Reset IDU. 1701 cable-open major Alarm Cable between IDU and RFU is not properly connected. 1) Cable is not connected to IDU or RFU. 1) Check IF cable and connectors. 2) Verify that N-Type connector inner pin is not spliced. 3) Replace IDU. 4) Replace RFU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 559 of 577 # Name Severity Type Description Probable cause Corrective Actions 1702 cable-short major Alarm There is a short in the IF cable. 1) Physical short at the IF cable. 1) Check IF cable and connectors. 2) Verify that N-Type connector inner pin is not spliced. 3) Replace IDU. 4) Replace RFU. 1703 communicatio n-failure warning Alarm Failure in communication between IDU and RFU. 1) Defective IF cable. 2) IF cable not connected properly. 3) Defective IDU. 4) Defective RFU. 5) RFU software download in progress. 1) Check IF cable and connectors. 2) Verify that N-Type connector inner pin is not spliced. 3) Replace IDU. 4) Replace RFU. For high power RF unit: 1) Check BMA connector on OCB. 2) Check BMA connector on RFU. 1704 delay- calibration- failure-1 warning Event RFU delay calibration failure 1. Rx AGC is not locked. Defective RFU. 1) Reset the IDU/RFU. 2) Replace RFU. 1705 delay- calibration- failure-2 warning Alarm RFU delay calibration failure 2. Calibration cannot be completed due to notch detection. Enter delay calibration value manually. 1706 extreme- temp-cond warning Alarm RFU temperature is too high or low. 1) Installation conditions. 2) Defective RFU. 1) Check installation conditions. 2) Verify operation as per product's specs. 3) Replace RFU. 1707 fan-failure major Alarm RFU fan failure. 1) Defective / non- existent fan drawer. 2) Defective RFU- to-fan drawer connection. 3) Defective RFU. 1) Check RFU connection to BP. 2) Check that fans are connected to PS. 3) Replace RFU BP cable. 4) Replace specific fan or fan drawer. 5) Replace RFU. 1708 freq-set- automatically warning Event Frequency set automatically. Defective RFU. Check if problem repeats and if errors/alarms reported. Replace ODU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 560 of 577 # Name Severity Type Description Probable cause Corrective Actions 1709 hardware- failure-1 critical Alarm RFU hardware failure 1 alarm. 1) Defective RFU. 1) Replace RFU. 1710 hardware- failure-2 critical Alarm RFU hardware failure 2 alarm. Defective RFU. Replace RFU. 1711 low-if-signal- to-rfu major Alarm RFU is detecting low IF signal from IDU. 1) IF cable connection. 2) Defective RFU. 3) Defective IDU. 1) Check IF cable connectors. 2) Verify that N-Type connector inner pin is not spliced. 3) Replace IDU. 4) Replace RFU. 1712 no-signal- from-rfu warning Alarm IDU is not detecting a signal from the RFU. No RX (140 MHz) signal from RFU. 1) Check IF cable and connectors. 2) Verify that N-Type connector inner pin is not spliced. 3) Replace IDU. 4) Replace RFU. For high power RF unit: Check that the BMA connector center pin is not spliced both on RFU and on OCB. 1713 pa-extreme- temp-cond warning Alarm RFU PA extreme temperature. 1) Installation conditions. 2) Defective RFU. 1) Check installation conditions. 2) Replace RFU. 1714 power-failure- 12v major Alarm RFU power failure (12v) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. 1715 power-failure- 1point5 major Alarm RFU power failure (1.5v) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. 1716 power-failure- 24v major Alarm RFU power failure (24v) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. 1717 power-failure- 6v critical Alarm RFU power failure (6v pro) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 561 of 577 # Name Severity Type Description Probable cause Corrective Actions 1718 power-failure- 6v-sw major Alarm RFU power failure (6v SW) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. 1719 power-failure- minus-5v major Alarm RFU power failure (6v pro) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. 1720 power-failure- vd critical Event RFU power failure (Vd) alarm. 1) Defective IF cable/connector. 2) Defective RFU. 3) Defective IDU. 1) Replace IF cable/connector. 2) Replace RFU. 3) Replace IDU. 1721 reset- occurred warning Event RFU reset event. 1722 rfu-loopback- active major Alarm RFU loopback alarm User action. Disable RFU loopback. 1723 rfu-mode- changed-to- combined warning Event RFU changed mode to Combined. 1724 rfu-mode- changed-to- diversity warning Event RFU mode changed to Diversity. 1725 rfu-mode- changed-to- main warning Event RFU changed mode to Main. 1726 rfu-power- supply-failure major Alarm RFU power supply failure. At least one of the PSU voltages is too low. 1) Replace RFU. 1730 synthesizer- 1-unlocked major Alarm RFU synthesizer is unlocked. 1) Defective RFU. 2) Defective XPIC cable connection. 1) Replace XPIC cable. 2) Replace RFU. 1731 synthesizer- 2-unlocked major Alarm RFU synthesizer is unlocked 1) Defective RFU. 2) Defective XPIC cable connection. 1) Replace XPIC cable. 2) Replace RFU. 1732 synthesizer- 3-unlocked major Alarm RFU synthesizer is unlocked. 1) Defective RFU. 2) Defective XPIC cable connection. 1) Replace XPIC cable. 2) Replace RFU. 1733 synthesizer- unlocked major Alarm One of the RFU synthesizers is unlocked. One of the RFU synthesizers is unlocked. 1) Replace RFU. 2) In XPIC mode, replace mate RFU as well. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 562 of 577 # Name Severity Type Description Probable cause Corrective Actions 1734 tx-level-out- of-range minor Alarm RFU Tx level out of range. 1) Defective RFU (the RFU cannot transmit the requested TX power). 1) Replace RFU. 2) Intermediate solution - reduce Tx power. 1735 tx-mute warning Alarm RFU Tx mute. RFU transmitter muted by user. Unmute the RFU transmitter. 1736 unknown-rfu- type major Alarm IDC SW does not support the RFU. IDC SW does not support the RFU. Upgrade IDC SW. 1737 power- decreased- due-to-pa- temperature major Alarm Power amplifier temperature is extremely high. 1) Incorrect installation. 2) Hardware failure. 1) Check installation conditions. 2) Verify operation as per product's specs. 3) Replace RFU. 1738 atpc-override- tx-higher- than-max warning Alarm ATPC override transmission level value is greater than system maximum transmission level. User configuration. Change either atpc- override-tx-level or max-tx-level value so that the override value is less than or equal to the maximum value. 1739 atpc-override warning Alarm ATPC overridden: Tx level has been equal to the max Tx level for a longer time than allowed. Actual transmitted signal level has been at its maximum value for longer than allowed. This is probably caused by a configuration error or link planning error. 1) Correct the transmission levels. 2) The alarm will be cleared only upon manual clearing. 1740 rsl-lower- than-user- defined-thr warning Alarm The received signal level is lower than the user configured threshold. 1) Low Tx power in transmitter. 2) Wrong reference level if ATPC is active. 3) Loss in channel or cables. 4) Threshold configured too high. 1) Check Transmission settings. 2) Check IDU-RFU cable. 3) Change threshold according to link planning. 1801 upload- firmware- canceled warning Event RFU firmware upload canceled event. User action. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 563 of 577 # Name Severity Type Description Probable cause Corrective Actions 1802 upload- firmware- error major Event RFU firmware upload error. Retry upload. 1803 upload- firmware- failed major Event RFU FW upload failed. Retry upload. 1804 upload- firmware- succeeded warning Event RFU FW upload succeeded. 1901 upload- software- canceled warning Event RFU software upload canceled. Retry upload. 1902 upload- software-error warning Event RFU software upload error. Retry upload. 1903 upload- software- failed warning Event RFU SW upload failed. Retry upload. 1904 upload- software- started warning Event RFU SW upload started. 1905 upload- software- succeeded- event warning Event RFU SW upload succeeded. 2001 cfm-failure warning Alarm Ethernet services failure. 1) Local MEP error indication. 2) Remote MEP error indication. 3) Remote MEP loss of connectivity. 1) Check MAID definitions. 2) Check remote MEP definitions. 3) Check local MEP definitions. 4) Run "CFM traceroute" to the remote MEP, then perform "CFM ping" to each MP (Maintenance Point) in order to find the broken point. 2101 heartbeat indeterminate Event Heartbeat trap 2201 eeprom- access-failure major Alarm System unable to detect TDM drawer type. (1) Inserted drawer not supported. (2) Hardware error. (1) Make sure drawer is properly inserted. (2) Power cycle the system. (3) Replace drawer. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 564 of 577 # Name Severity Type Description Probable cause Corrective Actions 2301 bp-lof-alarm critical Alarm TDM backplane LOF for slot #%1. No signal is detected from port. (1) Extension or main unit equipment failure. (2) Backplane failure. (1) Re-insert unit. (2) Power-cycle unit. (3) Check backplane. 2302 communicatio n-lost-with-idu critical Alarm Communications lost with IDU #%1. Communications have been lost with extension units' SW. (1) Extension or main unit equipment failure. (2) Backplane failure. (1) Re-insert unit. (2) Power-cycle unit. (3) Check backplane. 2303 extraction- detected warning Event Extraction of IDU #%1 in the shelf has been detected. 2304 idu-presence- not-detected minor Alarm IDU #%1 presence not detected. An IDU which is configured as operational is not detected as being physically present in the shelf. IDU with TDM trails mapped to it was extracted from shelf. (1) Insert IDU in shelf. (2) Delete relevant TDM trails. 2305 insertion- detected warning Alarm Insertion of IDU #%1 in the shelf has been detected. 2306 mate-version- mismatch major Alarm SW version mismatch between two units in protection mode. (1) SW update performed in one unit only. (2) Units with different SW version connected as protection mate. Perform SW update to mate unit. 2307 protection- admin- mismatch minor Alarm Protection mode mismatch for IDU #%1, %2. A unit is configured in main unit as protected but an indication is received that the unit is not under protection (or vice- versa). (1) Equipment error in extension IDU. (2) Backplane communications error. (1) Re-configure XC settings. (2) Reset extension unit. (3) Replace extension unit. 2308 protection- mode- mismatch major Alarm Protection activity error for IDUs #%1, %2. Two protected units chose the same activity (active/stand-by). (1) Backplane communications failure. (2) Equipment failure in extension units. (1) Replace units, one by one. (2) Check backplane. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 565 of 577 # Name Severity Type Description Probable cause Corrective Actions 2309 unit-version- mismatch major Alarm SW running version mismatch with extension unit in slot %1. The software version of extension unit is different from that of the main unit. (1) SW update performed in main unit only. (2) Units with different SW version connected as extensions. Perform a SW update for the relevant extension unit. 2402 extension-bp- lof critical Alarm No signal is detected in backplane connection with main IDU. (1) Extension or main unit equipment failure. (2) Backplane failure. (1) Re-insert unit. (2) Power-cycle unit. (3) Check backplane. 2403 failure-in-one- or-more-tdm- trails warning Alarm A failure has been detected in at least one TDM trail. (1) Network TDM trail Configuration error. (2) Signal failure in TDM trail - this may be due to equipment failure or AIS at the line input. (3) Excessive BER in TDM trail. (4) Signal degrade in TDM trail. Check TDM trails status. 2406 invalid-trail- status- change major Event Invalid trail status change %1 in trail %2. Equipment failure status of one or more trails changed. (1) Trail end-point failure detected for one or more trails. (2) Trail end-point failure cleared for one or more trails. (1) Perform reset in end-point IDU if exists. (2) Replace end-point IDU. 2407 trail- excessive- BER-change major Event Trail excessive BER status change %1 in trail %2. Excessive BER status of one or more trails changed. (1) Trail excessive BER detected for one or more trails. (2) Trail excessive BER cleared for one or more trails. Check links and equipment alarms along the TDM trail. 2408 trail-id- mismatch warning Alarm Trail ID of received data differs from locally configured. (1) Trail ID spelling difference between trail ends. (2) Network TDM trail configuration error. (3) Errors in incoming signal. (1) Check trail ID at both ends of the trail. (2) Check network trail configuration. (3) Check trail performance (BER) along the trail path and fix errored links if needed. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 566 of 577 # Name Severity Type Description Probable cause Corrective Actions 2409 trail-id- mismatch- change warning Event Trail ID mismatch status change %1 in trail %2. The status of one more trails has changed. (1) Trail ID mismatch detected for one or more trails. (2) Trail ID mismatch cleared for one or more trails. (1) Check trail ID at both ends of the trail. (2) Check network trail configuration. 2410 trail- protected- forced-active warning Alarm Trail ID: %1, path: %2 forced active.. Force active command has been issued for the relevant path in the trail. (1) User command - force active. Set force active to "none" for this trail. 2411 trail- protected- switch warning Event Trail protection switch performed in trail %1 due to %2. Active trail has been switched in a path- protected trail. (1) Signal failure along the active trail's path. (2) User issued force active command to stand- by path. 2412 trail-signal- degrade- change minor Event Trail signal degrade status change %1 in trail %2. Signal degrade status of one or more trails has changed. (1) Trail signal degrade detected for one or more trails. (2) Trail signal degrade cleared for one or more trails. Check links and equipment alarms along the TDM trail. 2413 trails- mapped-to- inexistent- interfaces warning Alarm Trails mapped to inexistent interfaces in IDU #%1. There are trails in the database that are mapped to interfaces not currently installed in the system. (1) One or more components were extracted from the system since trails were defined. (2) Radio scripts have been replaced by narrower scripts since trails were defined. (1) Replace missing components (IDUs, T-cards). (2) Make sure radio scripts support required number of E1/DS1 trails through radio. (3) Delete relevant trails. 2414 trail-signal- failure- change warning Event Trail signal failure status change %1 in trail %2. AIS received in one or more incoming trails. (1) Fade in a link along the trail. (2) Equipment failure in a network element along the trail. (3) Trail not properly provisioned along the path. Check links, equipment alarms and trail configuration along the TDM trail. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 567 of 577 # Name Severity Type Description Probable cause Corrective Actions 2415 illegal-trail- configuration. warning Alarm Conflicting trails are configured in protected IDUs %1 and %2. One or more trails are configured between two units configured in protection mode. Protection was enabled in pair of IDUs between which trails were previously configured. (1) Erase relevant trails. (2) Disable protection in pair. 2416 trail-RDI- detected- change warning Event RDI received status %1 in trail %2. An RDI indication has been received from the far-end of the trail. 1. Far end does not receive a proper signal. 2. Trail is forced active to secondary in far- end 1. Check trail integrity in primary path. 2. Configure force "none". 2417 trail-signal- failure major Alarm Signal failure (AIS received) in one or more incoming trails. (1) Fade in a link along the trail. (2) Equipment failure in a network element along the trail. (3) Trail not properly provisioned along the path. Check links, equipment alarms and trail configuration along the TDM trail. 2418 local-trail-rdi- detected warning Alarm An RDI indication has been received from the far-end of the trail. 1. Far end does not receive a proper signal. 2. Trail is forced active to secondary in far- end 1. Check trail integrity in primary path. 2. Configure force "none". 2419 local-trail- signal-failure major Alarm Signal failure (AIS received) in one or more incoming trails. (1) Fade in a link along the trail. (2) Equipment failure in a network element along the trail. (3) Trail not properly provisioned along the path. Check links, equipment alarms and trail configuration along the TDM trail. 2420 invalid-trail- status major Alarm Equipment failure status for one or more TDM trails. (1) Trail end-point failure detected for one or more trails. (2) Trail end-point failure cleared for one or more trails. (1) Perform reset in end-point IDU if exists. (2) Replace end-point IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 568 of 577 # Name Severity Type Description Probable cause Corrective Actions 2500 security-log- event major Event An error has been detected in the security log file. The security log file has been tampered with. Log has been automatically renewed. Previous data is lost. 2501 unsuccessful- consecutive- login- attempts warning Event Unsuccessful consecutive login attempts for user %1. A user attempted to log in using a wrong password more than the allowed number of times. User mistake or security event. Reset the user account (only "secure officer" or above user types allowed). 2502 corrupt-diff- delay-val- found-event major Event At system boot corrupt values were found in the differential delay calibration parameters. Error automatically fixed. Inventory file was found to be corrupt upon system power up. 1) Download inventory file. 2) Reset system. 2554 switch-lock- alarm warning Alarm Hitless protection switching is locked by user. Radio diversity forced to %1. User configuration. Release switch lock. 2555 unused-radio- lof-alarm warning Alarm Radio in IDU #%1 unused due to LOF. IDU not being used for hitless switching because no frame is received at its radio. 1) Configuration error. 2) Defective IF cable. 3) Fault in RFU. 4) Fault in IDU. 1) Check link configuration and performance. 2) Check IF cable, and replace if required. 3) Replace RFU. 4) Replace IDU. 2558 blocking- radio-alarm warning Alarm MR: radio traffic blocked on slot %1. Multi-radio traffic distribution to a radio is blocked by user. User configuration. Release the radio lock. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 569 of 577 # Name Severity Type Description Probable cause Corrective Actions 2560 incompatible- features- enabled warning Alarm Two or more mutually exclusive features have been enabled. Feature "%1" and feature "%2" are mutually exclusive. One of the following feature combinations has been enabled: Multi-radio and protection. Multi- radio and diversity. Diversity and XPIC. Diversity and 2+2. Diversity and ACM. XPIC and protection. Enable only compatible features. 2601 stm1-los critical Alarm No signal is detected from STM- 1/OC-3/OC-3 port. (1) Line is not properly connected. (2) Cable is faulty. (3) Equipment is faulty. (4) STM- 1/OC-3 SFP not attached. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Attach SFP. 5) Power cycle the system. 2602 stm1-lof critical Alarm Loss of frame in incoming STM- 1/OC-3 signal. (1) Line is not properly connected. (2) Cable is faulty. (3) Equipment is faulty. (4) STM- 1/OC-3 SFP not attached. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Attach SFP. 5) Power cycle the system. 2603 a2n- initialization- failure critical Alarm Failure to initialize or configure some component in access to network card. (1) Equipment is faulty. (2) SW/HW versions mismatch. 1) Power cycle the system. 2) Check SW versions. 2604 stm1-sfp-not- detected major Alarm Error in SFP detection. (1) SFP not inserted properly. (2) Incompatible SFP type. (3) Damaged SFP. 1) Reconnect SFP. 2) Change SFP. 2605 stm1- excessive-ber major Alarm Excessive BER is above configured threshold in incoming STM- 1/OC-3 signal. (1) Line is not properly connected. (2) Cable is faulty. (3) External equipment is faulty. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Power cycle the system. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 570 of 577 # Name Severity Type Description Probable cause Corrective Actions 2606 stm1-signal- degrade minor Alarm Signal degrade - excessive BER is above configured threshold in incoming STM- 1/OC-3 signal. (1) Line is not properly connected. (2) Cable is faulty. (3) External equipment is faulty. 1) Reconnect line. 2) Check line cables. 3) Check external equipment. 4) Power cycle the system. 2607 stm1-sfp-tx- fault major Alarm SFP hardware failure: unable to transmit. (1) SFP not inserted properly. (2) Damaged SFP. 1) Reconnect SFP. 2) Change SFP. 2608 mute-override warning Alarm STM-1/OC-3 mute override. User configured STM-1/OC-3 interface as silent. Configure STM- 1/OC-3 interface to transmit. 2610 loopback-at- stm1 major Alarm Loopback at STM- 1/OC-3 interface alarm status. User configured loopback at STM- 1/OC-3 interface. Cancel loopback configuration. 2611 stm1-pll- unlocked critical Alarm Unable to lock to input clock for STM- 1/OC-3 signal. Hardware failure in STM-1/OC-3 card. (1) Power cycle the system. (2) Replace STM-1/OC-3 card 2612 j0-mismatch minor Alarm Received J0 trace identifier string not identical to configured expected string. (1) Error in remote optical equipment configuration. (2) Error in J0 expected string configuration. (3) Error in J0 length configuration. Check that remote equipment sent J0 string and length equals expected J0 configuration. 2613 stm1-sync- clock-signal- failure major Alarm The TDM trail configured to carry the clock for the STM-1 interface is not properly received. (1) Clock source configured from wrong VC. (2) Radio LOF or equipment failure along the path of the synchronization trail. (3) LOS or AIS at the synchronization source interface in the far end of the trail. (1) Make sure the configured VC is the end-point of the synchronization trail. (2) Check status of synchronization trail. (3) Check status of clock source interface. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 571 of 577 # Name Severity Type Description Probable cause Corrective Actions 2701 lag- degradation- alarm major Alarm Degraded functionality in LAG #%1; LAG working at partial capacity. At least one physical port belonging to a LAG report link down. 1) Configuration error. 2) Defective Ethernet cables or cables disconnected. 3) Fault in external equipment. 1) Check LAG physical configuration in both sides of link. 2) Check cables and replace if required. 3) Replace IDU. 2702 lag-loss- alarm critical Alarm LAG #%1 status down - all physical ports belonging to the LAG report a link down. Traffic not flowing through the LAG. 1) Configuration error. 2) Defective Ethernet cables or cables disconnected. 3) Fault in external equipment. 1) Check LAG physical configuration in both sides of link. 2) Check cables and replace if required. 3) Replace IDU. 2703 change-in- stp-role warning Event Change in RSTP role for port: %1; New role: %2; New state: %3; Root bridge ID: %4; Bridge role: %5. 2716 unused-tx- multi-radio- alarm warning Alarm Traffic not being sent through radio on slot %1 by multi- radio due to radio or configuration failure. One of the following failures is present at the receiving radio: 1) Radio LOF. 2) Minimum ACM point reached. 3) Link ID mismatch. 4) Excessive BER. 5) Signal degraded. 6) User "radio block" command. 7) Multi- radio disabled in that IDU. 1) Correct failure. 2) Disable failure (Excessive BER, signal degrade) as a cause for blocking. 3) Enable multi-radio in both IDUs. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 572 of 577 # Name Severity Type Description Probable cause Corrective Actions 2718 unused-rx- multi-radio- alarm warning Alarm Traffic not being taken from radio on slot %1 by multi- radio. Traffic not being passed through this radio due to radio or configuration failure. One of the following failures is present at this radio: 1) Radio LOF. 2) Minimum ACM point reached. 3) Link ID mismatch. 4) Excessive BER. 5) Signal degraded. 6) User "radio block" command. 7) Multi- radio disabled in that IDU. 1) Correct failure. 2) Disable failure (Excessive BER, signal degrade) as a cause for blocking. 3) Enable multi-radio in both IDUs. 2719 multi-radio- local-lof- alarm critical Alarm Loss of frame on radio. 1) Fade in the link. 2) Defective IF cable. 3) Fault in RFU. 4) Fault in IDU. 5) Different radio scripts at both ends of the link. 1) Check link performance. 2) Check IF cable, and replace if required. 3) Replace RFU. 4) Replace IDU. 5) Make sure same script is loaded at both ends of the link. 2801 radio- interface- changed-by- user-event warning Event Radio interface is currently %1 (enabled or disabled) by user configuration. If disabled, no traffic will pass through local radio. User configuration. Enable the radio interface if use of the radio is desired 2802 requested- cap-exceeds- radio-cap- alarm minor Alarm Requested traffic capacity (Ethernet + TDM) exceeds radio capacity. The total number of high priority trails and Ethernet traffic configured to this radio exceeds the total radio capacity. TDM trails and high priority Ethernet configuration. Reduce high- capacity Ethernet or high priority TDM trails to this radio. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 573 of 577 # Name Severity Type Description Probable cause Corrective Actions 2901 system-reset- required warning Alarm One of the following configurations have been changed; system reset to be applied: (1) Radio enable/disable (2) Radio script (3) Ethernet application (4) Demo license enable/disable (5) License code change (6) Configuration restore One of the following configurations was changed: (1) Radio enable/disable (2) Radio script (3) Ethernet application (4) Demo license enable/disable (5) License code change (6) Configuration restore (1) Perform system reboot. (2) Change relevant configuration to current value. 2902 under- voltage- condition-ps- 1 major Alarm Under-voltage conditions detected in a power supply. 1) Power cable disconnected. 2) Power supply source failure. 3) Hardware failure. 1) Connect power supply cable. 2) Check power supply source. 3) Replace IDU. 2903 under- voltage- condition-ps- 2 major Alarm Under-voltage conditions detected in a power supply. 1) Power cable disconnected 2) Power supply source failure. 3) Hardware failure. 1) Connect power supply cable. 2) Check power supply source. 3) Replace IDU. 3001 insufficient- config-for- xpic major Alarm XPIC cannot be set; see probable cause for the possible reasons. 1) Modem script does not support XPIC 2) ODU does not support XPIC 3) The frequency of both radios is not equal. 4) Different type of ODU 5) Protection is enabled 6) One of the IDUs HW does not support XPIC. 7) Different scripts are loaded in the IDUs Check which condition is lacking and resolve it. 3002 xsm-event warning Event XPIC recovery event. A change in the XPIC recovery mechanism took place. 3003 insufficient- config-for- xpic-event warning Event Condition for XPIC not met. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 574 of 577 # Name Severity Type Description Probable cause Corrective Actions 3100 sync-source- switch warning Event Synchronization source for the system has been switched. 1) LOS/LOF at previous sync source interface. 2) Hardware failure at previous sync source interface. Check status of incoming signal at sync source interfaces. 3101 sync-line- clock-signal- failure major Alarm Sync clock source signal failure for %1 interface. The synchronization signal driving the interface's output clock is not being received. 1) Radio error along the sync path. 2) Invalid clock signal at clock source. 3) Configuration error. 1) Make sure all radio links are errorless along the path. 2) Make sure source PDH signal is being received. 3) Re-check synchronization path configuration. 3102 sync-line-db- clock-signal- failure major Alarm Sync clock source signal failure for %1 interface. The synchronization signal driving the interface's output clock is not being received. 1) Radio error along the sync path. 2) Invalid clock signal at clock source. 3) Configuration error. 1) Make sure all radio links are errorless along the path. 2) Make sure source PDH signal is being received. 3) Re-check synchronization path configuration. 3103 sync-stm1- clock-signal- failure major Alarm Sync clock source signal failure for %1 interface. The synchronization signal driving the interface's output clock is not being received. 1) Radio error along the sync path. 2) Invalid clock signal at clock source. 3) Configuration error. 1) Make sure all radio links are errorless along the path. 2) Make sure source PDH signal is being received. 3) Re-check synchronization path configuration. 3104 sync-radio- clock-signal- failure major Alarm Sync clock source signal failure for %1 interface. The synchronization signal driving the interface's output clock is not being received. 1) Radio error along the sync path. 2) Invalid clock signal at clock source. 3) Configuration error. 1) Make sure all radio links are errorless along the path. 2) Make sure source PDH signal is being received 3) Re-check synchronization path configuration. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 575 of 577 # Name Severity Type Description Probable cause Corrective Actions 3105 sync-eth- clock- unavailable major Alarm Sync clock status unavailable for Ethernet interface. Unable to reach synchronization interface hardware. 1) Mismatch between synchronization configuration and actual hardware. 2) Hardware failure. 1) Make sure all interfaces configured as carrying sync source clock exist in the system. 2) Replace T-card. 3) Replace IDU. 3106 sync-line- clock- unavailable major Alarm Sync clock status unavailable for line %1 interface. Unable to reach synchronization interface hardware. 1) Mismatch between synchronization configuration and actual hardware. 2) Hardware failure. 1) Make sure all interfaces configured as carrying sync source clock exist in the system. 2) Replace T-card. 3) Replace IDU. 3107 sync-line-db- clock- unavailable major Alarm Sync clock status unavailable for daughter-board line %1 interface. Unable to reach synchronization interface hardware. 1) Mismatch between synchronization configuration and actual hardware. 2) Hardware failure. 1) Make sure all interfaces configured as carrying sync source clock exist in the system. 2) Replace T-card. 3) Replace IDU. 3108 sync-stm1- clock- unavailable major Alarm Sync clock status unavailable for %1 interface. Unable to reach synchronization interface hardware. 1) Mismatch between synchronization configuration and actual hardware. 2) Hardware failure. 1) Make sure all interfaces configured as carrying sync source clock exist in the system. 2) Replace T-card. 3) Replace IDU. 3109 sync-radio- clock- unavailable major Alarm Sync clock status unavailable for %1 interface. Unable to reach synchronization interface hardware. 1) Mismatch between synchronization configuration and actual hardware. 2) Hardware failure. 1) Make sure all interfaces configured as carrying sync source clock exist in the system. 2) Replace T-card. 3) Replace IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 576 of 577 # Name Severity Type Description Probable cause Corrective Actions 3110 sync-eth- clock-signal- failure major Alarm Sync clock source signal failure for %1 interface. The synchronization signal driving the interface's output clock is not being received. 1) Radio error along the sync path. 2) Invalid clock signal at clock source. 3) Configuration error. 1) Make sure all radio links are errorless along the path. 2) Make sure source PDH signal is being received. 3) Re-check synchronization path configuration. 3111 sync-node- mode-forced warning Alarm Node synchronization source forced to sync source #%1. A certain interface has been forced by user as the source of the synchronization reference signal. User configuration. Set node synchronization mode to "automatic". 3112 sync-source- if-status warning Event Change in clock quality level at sync source #%1. New quality is %2. The quality of a reference signal received at a certain interface has changed. 1) User changed quality configuration in an interface. 2) SSM received with new quality value. 1) Change interface configuration. 2) Check flow of reference clock in the network. 3113 sync-source- system-clock warning Event Change in T0 system reference clock quality level. New quality is %1. The quality of the system's internal reference clock (which is distributed onwards towards the network) has changed. 1) The quality of the reference source signal has changed. 2) The interface taken as reference has changed. 3333 no-internal- mate-alarm major Alarm IDU cannot communicate with second IDU in the same shelf. 1) Second IDU faulty. 2) Second IDU missing. 3) Hardware error. 1) Replace missing/faulty unit. 2) Replace this IDU. FibeAir® IP-10G and IP-10E User Guide Ceragon Proprietary and Confidential Page 577 of 577 # Name Severity Type Description Probable cause Corrective Actions 4001 eth-clock- source- signal-failure major Alarm The synchronization signal driving the synchronous Ethernet clock is not being received. 1) Radio error along the sync path. 2) Invalid clock signal at clock source. 3) Configuration error. 1) Make sure all radio links are errorless along the path. 2) Make sure source PDH signal is being received. 3) Re-check synchronization path configuration. 5001 floating-ip- filter-lock- alarm major Alarm Floating IP locked to fixed unit following excessive protection switches. To allow management access to the system under permanent switching, the floating IP address is fixed to a single unit and does not necessarily correspond with the currently active unit. Constant protection switches due to permanent errors in radio. Perform protection lockout. 5002 fip-invalid- protection- conf warning Alarm Floating IP is enabled in a system configured to 1+0. An extra IP address is being unnecessarily used. Protection admin is "disabled" but floating IP address is configured (value is different than 0.0.0.0). (1) Set floating IP address to [0.0.0.0]. or (2) Enable protection.
Copyright © 2024 DOKUMEN.SITE Inc.