098-00029-000-rev-c

8/11/2019 098-00029-000-rev-c

1/7

098-00029-000 Revision C October 2009

Copyright 2009, Symmetricom. All Rights Reserved

Software Release Notice

TimeProvider 5000IEEE 1588 Grand Master Clock

Introduction

The TimeProvider 5000 is a purpose-built, carrier-class PTP (IEEE 1588-2008) Grand Master. Itutilizes hardware time stamping to deliver extremely precise timing and frequency for criticalapplications such as synchronization of GSM and UMTS base stations operating overpacket-based IP/Ethernet networks.

This software release notice (SRN) describes the key features and known issues associated withVersion 1.1.8 of the Information Management Card (IMC) and Version 1.1.8 of the Input/OutputClock Card (IOC) of the TimeProvider 5000 Grand Master Clock.

Notes

Serial port settings are 57600 baud, 8N1, Flow Control None.

After configuring IP and VLAN parameters, be sure to use the CLI command to restart the IPinterface in order to apply the changes. It is recommended that the settings be verified withthe show ip status command.

In the port redundancy mode (bonded), the configuration from IOC Ethernet port 1 will beused for both ports.

In the port redundancy mode (bonded), the same type of SFP (multi-mode, single-mode, orelectrical) must be installed in both IOC ports. Symmetricom highly recommends that bothSFPs have the same performance specifications, especially timing characteristics.

For card redundancy, the configuration for IOC1 is used for both cards. The IOC1configuration is also used if the system includes only one IOC which is installed in the IOC2slot.

Parameter Default Value

CLI Administrator User Name: admin

Password: symmadmin**

IMC IP Address 192.168.0.100

IOC IP Addresses 192.168.1.11

192.168.2.11

8/11/2019 098-00029-000-rev-c

2/7

Page 2 098-00029-000 Revision C October 2009

TimeProvider 5000, by default, uses IP addresses 172.16.250.8 through 172.16.250.47internally. These addresses should not be used for external devices attached to the unit.

If using a gateway, then all IP interfaces and VLAN interface should be configured with theproper gateway IP address. If not using a gateway, then configure the gateway address to0.0.0.0.

During power-up and rebooting, messages will be displayed on the EIA-232 console port.

The messages are normal and should be ignored. Both -48VDC power supply inputs should be connected to avoid generating -48V alarms.

PTP slaves (clients) should not send unicast negotiation requests faster than once every 10seconds.

SNMP supports adding/deleting one row at a time for SNMP users, trap users, communities,SNMP managers, and CLI users. This also includes multiple accesses to the TimeProvider5000 from the same or different SNMP managers. Refreshing after making changes isnecessary.

If the IP interface is disabled, with the port in non-redundant mode, some PTP configurationsfor that interface can't be set.

Upgrades use SCP for secure FTP transfer and therefore SSH firewall applies. Both SSHand SFTP firewalls need to be allowed for upgrades.

TimeProvider 5000 IOC only supports full-duplex 100/1000 connections. Ethernet hubs arehalf-duplex and therefore not supported.

For SNMPv3, the following protocols are supported:

Authentication: HMAC-MD5 and HMAC-SHA

Privacy: CBC-DES and CFB-AES128

For SNMPv3 traps, both a user and a trapuser need to be configured identically. In addition,the manager should use the desired user to connect to the TimeProvider 5000. This will

ensure that a SNMPv3 trap will be successfully received by the manager using thecorresponding trapuser username.

The active IOC may switch during insertion of an IMC.

Modules should not be removed and inserted more frequently than once every 2 hours.

The number of SNMP managers and trapusers that are supported was reduced to 3 of eachin v1.1. When upgrading from v1.0 with more than 3 SNMP managers or trapusersconfigured, only the first 3 will be used.

The TimeProvider 5000 only supports the active mode of FTP; it does not support the passive(PASV) mode.

Upgrading from Versions Prior to 1.1.x

The following procedure must be followed when upgrading from previous version.

1. Upgrade the IOC with the following command, but don't reboot.

8/11/2019 098-00029-000-rev-c

3/7

098-00029-000 Revision C October 2009 Page 3

upgr ade i oc1 [ f t p: | sf t p: ]

Example

For an SFTP server with IP address sftp:192.168.5.65, a user name of user1, and aupgrade file named upgrades/ioc_upd.bin, the command is:

t p5000> upgrade i oc1 upgr ades/ i oc_upd. bi n sf t p: 192. 168. 5. 65 user1

When prompted, enter the password for the server.

2. Upgrade the IMC with the following command, but don't reboot the card by itself.

upgr ade i mc [ f t p: | sf t p: ]

Example

For an FTP server with IP address 192.168.5.66, a user name of user1, and an upgradefile named upgrades/imc_upd.bin:

t p5000> upgrade i mc upgr ades/ i mc_upd. bi n f t p: 192. 168. 5. 66 user1

When prompted, enter the password for the server.

3. Reboot the IMC and IOC with the following command.

r eboot syst em

See user's guide for more information on commands

.

Summary of Features

Unicast IEEE 1588-2008 messages

PTP Static and Dynamic (unicast negotiation)

Free-run mode

External reference mode using E1 and 2048 kHz inputs

E1 and 2048 kHz outputs (new in release 1.1)

Note: The FTP firewall is set to Block by default. Use the followingcommand to set the IMC firewall to Allow for FTP:

set f i r ewal l i mc f t p al l ow

Note:For more details and alternative procedures to minimize output

disruption with redundant IOC cards, see the Upgrading section in

Chapter 6 of the User's Guide.

8/11/2019 098-00029-000-rev-c

4/7


Ports 1 and 2 on the I/O card can be configured as inputs or outputs (new in release 1.1)

GPS reference, using L1 antenna

Port redundancy

IOC card redundancy (new in release 1.1)

Command-line interface on serial port, SSH, and telnet

Authentication with RADIUS (now supports SSH in release 1.1)

Capacity of 33000 packets/second per port (increased in release 1.1)

Up to 500 PTP clients per port

VLAN support on IOC ports up to 16 different VLANs

DiffServ on PTP packets

IOC Ethernet port auto-negotiation can be configured (new in release 1.1)

SFP connectors on IOC - 100BT and 1000BT electrical.

SFP connectors on IOC - optical 1000BASE-LX 1000BASE-SX.

Upgrade from SFTP or FTP server

Dual -48VDC power supply connections.

Optional 10MHz, 1PPS outputs

Event log and command log

CLI and SNMP management

Firewall

Remote syslog

Optional PTP probe measurement capability (new in release 1.1)

Proxy capabilities to manage TimeProvider 500 (new in release 1.1)

Whats New in This Release

Resolved Issues

06259: SNMP alarm and event trap container OID did not match MIB.

24936: SNMP sysObjectID returned incorrect enterprise object identifier.

23950: Should create event when I/O card is inserted or removed.

23952: Add feature to page display for PTP show clients CLI command.

23982: SSH did not authenticate using RADIUS.

24042: Add display of software images in SNMP.

8/11/2019 098-00029-000-rev-c

5/7


24093: Should add display of IOC uptime in "show status".

Add capability for user to modify their own password.

24157: Some MIB Tables did not refresh correctly after making changes.

24219: Duplication of several rows of data had been observed with some MIB browsers when

using get bulk.

24220: The SNMP ptpClientTable may take up to an hour or more for 500 clients. Fewer than200 clients will typically take less than 1 minute. May also impact SNMP Walk.

24250: Remote-syslog CLI command needs to be entered twice to be enabled.

24254: VLAN ID values greater than 999 did not display properly on CLI command show ipstatus.

24825: An error message may be displayed on some SNMP browsers when a row, other thanthe last row, is deleted from an SNMP table.

24458: Link status alarm is sometimes read incorrectly and generates extraneous alarms.

24460: E1 outputs generate occasional code errors - a bipolar violation is being generatedabout every 500 frames. (E1 outputs were only available on a few Beta software builds.)

24670: Possible issues if SNMPv2 community and a SNMPv3 user have the same name.

24742: Some PTP delay requests would occasionally be dropped.

24851: Could not independently route the 2 Ethernet ports on the IOC. Release 1.0.6 wouldonly support a single gateway. Release 1.0.7 supports independent gateways for each port

and routes response packets correctly. However, for "ping" initiated on the TimeProvider5000, only one default gateway will be used. "Ping" sent to the TImeProvider 5000 will beresponded to correctly.

24874: Disabling VLAN on one Ethernet port can block traffic on the other Ethernet port whenin non-redundant mode.

24902: When changing the VLAN configuration, sometimes PTP operation is interrupted.This usually occurs if many VLANs have been configured.

24924: SNMP get-bulk sometimes did not return correct data.

24925: Should add implementation to protect SNMP PTP client table data during reads.

25096: Events were sent as SNMP alarm traps rather than event traps.

25198: System sometimes did not recover from holdover for large offsets.

25271: ClockAccuracy and timeSource fields in PTP message had incorrect values in sysmode (non-GPS).

8/11/2019 098-00029-000-rev-c

6/7


25280: In non-GPS mode, 1PPS output may have jumped during boot-up process ofnewly-installed IMC.

25314: Restore to factory configuration did not remove existing configuration of SNMPmanager, user, trap-user, and v2-community.

25317: Restore of IMC configuration from configuration stored in IOC did not remove existingconfiguration of SNMP manager, user, trap-user, and v2-community.

25337: If optical SFP was replaced by an electrical SFP, then the Ethernet port didn't link at100M.

Known Issues

23909: SNMPv3 improper HMAC-validation allows authentication bypass. Seehttp://www.kb.cert.org/vuls/id/878044

Workaround:Attach IMC Ethernet port to protected network.

25268: IP address of standby card could be different from active card. If the IP address is

changed, and the IP interface is not restarted, and one IOC is rebooted, then the standbycard will have the new configuration and the active card will have the old configuration.

Workaround: Restart the IP interface after configuring an IP interface.

25247: The SNMP ethAutoNegState, in ethAutoNegTable, sometimes takes several secondsto update after being changed.

Workaround: Wait 20 seconds after changing the setting before reading.

25390: SSH authentication may not complete if public key has been configured on the SSHclient. The TP5000 only supports SSH password authentication.

Workaround: Remove public/private keys for the user running the SSH client.

Using the Release CD

To launch the CD for Microsoft Windows, insert the CD into your computers CD-ROM drive, thendo the following:

In Windows Explorer, double-click on the PDF documentation file for your product.

Available Documentation for Setup and Configuration Software Release Notice (this document, 098-00029-000)

TimeProvider 5000 User's Guide(098-00028-000)

SNMP MIBs

This Software Release Notice and the Users Guide are included in PDF format on the CD. UseAdobe Acrobat Reader to open the appropriate file on the CD.

8/11/2019 098-00029-000-rev-c

7/7


You will need the version of Adobe Acrobat Reader that is appropriate for your Operating Systemto view and print these documents. If you dont have Acrobat Reader already installed on yoursystem, you can install it from the CD or download it from Adobes Web site(http://www.adobe.com ).

Where to Find Installation Procedures

Please refer to the TimeProvider 5000 Users Guidefor instructions for installing and updatingthe software.

Contacting Technical Support

If you encounter any difficulty installing the update or operating the product, contactSymmetricom Global Services at:

U.S.A. Call Center:

including Americas, Asia, and Pacific RimSymmetricom, Inc.

2300 Orchard ParkwaySan Jose, CA 95131-1017

Toll-free in USA: 888-367-7966 (1-888-FOR-SYMM)Telephone: 408-428-7907Fax: 408-428-7998E-mail:[email protected]: http://www.symmetricom.com

Europe, Middle East, and Africa (EMEA) Call Center:

Symmetricom Global Services EMEAAltlaufstrasse 42

85635 Hoehenkirchen-SiegertsbrunnGermany

Telephone: +49 700 3288 6435Fax: +49 8104 662 433E-mail:[email protected]: http://www.symmetricom.com

098-00029-000-rev-c

Documents

Transcript of 098-00029-000-rev-c