Symmetricom S100 Manuale Utente

Chapter 1S100 User GuideSyncServer S100 User GuideInstallation, Configuration, and Operationfor the SyncServer S100 - OS Version 1.3Part #: S100 User

2 S100 User Guide – Rev. D – June 20051SyncServer S100Conventions UsedThe most common conventions used here are:Install the GPS antenna“Installing the

92 S100 User Guide – Rev. D – June 2005SyncServer S100ModeThis is a three-bit integer indicating the mode. The S100 can be operated in any mode.Stratu

S100 User Guide – Rev. D – June 2005 93253detected. Therefore, the Reference Timestamp will indicate the time at which the timing signal was lost. Whe

94 S100 User Guide – Rev. D – June 2005SyncServer S100The message digest is computed using preferred Message Digest 5 (MD5). An alternative is the Dig

S100 User Guide – Rev. D – June 2005 95253Other NTP ConsiderationsThe following are information modules regarding NTP. They are used here as a FYI.Cli

96 S100 User Guide – Rev. D – June 2005SyncServer S100Basic NTP Configuration No special configuration is required for a machine with a running NTP to

S100 User Guide – Rev. D – June 2005 97253multicasting is likely to be nearly as accurate as using a nonbroadcast server. Multicasting is preferable t

98 S100 User Guide – Rev. D – June 2005SyncServer S100• Use a server’s local clock as a reference clock (not a good idea)Synchronizing the server to a

S100 User Guide – Rev. D – June 2005 99253selecting these sources. Note that, while NTP detects and rejects loops involving neighboring servers, it do

100 S100 User Guide – Rev. D – June 2005SyncServer S100Figure 5-43: Large Net NTP Configuration

S100 User Guide – Rev. D – June 2005 101253Figure 5-44: Large Net NTP Configuration 2

1S100 User Guide – Rev. D – June 2005 3253Product DetailsDetails about the physical description and operating environment of the S100 are found in App

102 S100 User Guide – Rev. D – June 2005SyncServer S100Figure 5-45: Small Net NTP ConfigurationFigure 5-46: Small Net NTP Configuration

S100 User Guide – Rev. D – June 2005 103253Figure 5-47: Minimum Net NTP ConfigurationPeersSetting up a peer can be accomplished by adding the peer com

104 S100 User Guide – Rev. D – June 2005SyncServer S100ACTS OperationUse the S100’s web-based interface to configure this method of access to time (fo

S100 User Guide – Rev. D – June 2005 105253NMS executes applications that monitor and control managed devices. One or more NMSs must exist on any mana

106 S100 User Guide – Rev. D – June 2005SyncServer S100SNMP is a simple request/response protocol. The network-management system issues a request, and

S100 User Guide – Rev. D – June 2005 107253All of this information is passed to commands using the command line arguments described in the table below

108 S100 User Guide – Rev. D – June 2005SyncServer S100

S100 User Guide – Rev. D – June 2005 109253Chapter 6Frequently Asked QuestionsQuestionsHow can we obtain NTP client software to use with the S100?NTP

110 S100 User Guide – Rev. D – June 2005SyncServer S100• With an optional Rubidium oscillator installed, an IRIG time code output and an IRIG time cod

S100 User Guide – Rev. D – June 2005 111253How many satellites are necessary for me to operate the S100?Four. The unit will usually track six to eight

4 S100 User Guide – Rev. D – June 20051SyncServer S100Stratum LevelsThe Internet Engineering Task Force (IETF) established standards for Network Time

112 S100 User Guide – Rev. D – June 2005SyncServer S100How many NTP requests can be processed by the S100 each second? More than 5,000 requests per se

S100 User Guide – Rev. D – June 2005 113253Depending on the type of client software, requests can be made by a client anywhere from 1 per minute to 1

114 S100 User Guide – Rev. D – June 2005SyncServer S100How to install NTP v4 on a UNIX systemRequirements: A Unix system with compiler, standard tools

S100 User Guide – Rev. D – June 2005 115253How to install your GPS antennaSee “Installing the GPS Antenna” on page 23.How to acquire and install SymmT

116 S100 User Guide – Rev. D – June 2005SyncServer S100passwd: all authentication tokens updated successfully[root@syncserv1 /root]#This is really an

S100 User Guide – Rev. D – June 2005 117253Also check that the configuration settings are set to a VT100 ASCII terminal using 9600, 8, N, 1 and hardwa

118 S100 User Guide – Rev. D – June 2005SyncServer S100

S100 User Guide – Rev. D – June 2005 119253Appendix AS100 SpecificationsNote: The GPS antenna described in this manual has been replaced as described

120 S100 User Guide – Rev. D – June 2005SyncServer S100Pin DescriptionsOperating & Storage EnvironmentsTemperature and Humidity 0°C to +45°C/5-95%

S100 User Guide – Rev. D – June 2005 121253Appendix BTime GlossaryAccess ControlThe mechanisms of limiting entry to resources based on users’ identiti

1S100 User Guide – Rev. D – June 2005 5253• Bandwidth consumption: Synchronizing the time over a WAN (wide area network) consumes expensive bandwidth

122 S100 User Guide – Rev. D – June 2005SyncServer S100allocation of bandwidth, meaning users get only the bandwidth they need and are charged accordi

S100 User Guide – Rev. D – June 2005 123253Certificate Authority (CA)A trusted entity that issues a certificate after verifying the identity of the pe

124 S100 User Guide – Rev. D – June 2005SyncServer S100Data Encryption Standard (DES)Encryption method in which both the sender and receiver of a mess

S100 User Guide – Rev. D – June 2005 125253Digital Signature Algorithm (DSA)The asymmetric algorithm that is at the core of the digital signature stan

126 S100 User Guide – Rev. D – June 2005SyncServer S100FirewallFirewalls are software and hardware systems that define access between two networks, of

S100 User Guide – Rev. D – June 2005 127253IKEInternet Key Exchange, a security system that uses a private key and an exchange key that encrypts priva

128 S100 User Guide – Rev. D – June 2005SyncServer S100L1 Band, L2 BandEach Navstar GPS satellite currently transmits in two dedicated frequency bands

S100 User Guide – Rev. D – June 2005 129253MultiplexingProcess during which two or more signals are combined into one; at the other end, signals are “

130 S100 User Guide – Rev. D – June 2005SyncServer S100Online validationA way of validating a key each time before it is used to verify that it has no

S100 User Guide – Rev. D – June 2005 131253Public Key CertificateCertificate in the form of data that holds a public key, authentication information,

6 S100 User Guide – Rev. D – June 20051SyncServer S100Special Safety InstructionsLithium Battery Disposal InstructionsElectrical Safety InstructionsCa

132 S100 User Guide – Rev. D – June 2005SyncServer S100SNMPSimple Network Management Protocol is the Internet standard protocol for network management

S100 User Guide – Rev. D – June 2005 133253enters at the computer or terminal are delivered to the remote machine, and the remote computer response is

134 S100 User Guide – Rev. D – June 2005SyncServer S100TraceabilityTraceability infers that the time standard used on the Time StampServer was set usi

S100 User Guide – Rev. D – June 2005 135253UTCSee Coordinated Universal Time (UTC)VaultSecure data storage facility.VerificationThe process of making

136 S100 User Guide – Rev. D – June 2005SyncServer S100X.509 v3 Certificate ExtensionThe X.509 standard with extended features approved by the IETF.

S100 User Guide – Rev. D – June 2005 137253Appendix DCustomer AssistanceSymmetricom's Customer Assistance Centers are a centralized resource to h

138 S100 User Guide – Rev. D – June 2005SyncServer S100Customer ServiceFor product quotes, service quotes, installations, order status and scheduling

S100 User Guide – Rev. D – June 2005 139253Appendix CDeclaration of Conformity DECLARATION OF CONFORMITY In accordance with ISO/IEC GUIDE 22 and EN 45

140 S100 User Guide – Rev. D – June 20051SyncServer S100FCC NOTICE AND COMPLIANCE STATEMENT Class A Symmetricom, Inc. 3750 Westwind Blvd. Santa Rosa

1S100 User Guide – Rev. D – June 2005 141253Appendix EAntenna ReplacementPlease note that the GPS antenna equipment described in this manual has been

1S100 User Guide – Rev. D – June 2005 7253Chapter 2S100 TechnologyOverviewThis chapter gives a review of the S100 technology.There is additional infor

142 S100 User Guide – Rev. D – June 20051SyncServer S100

1S100 User Guide – Rev. D – June 2005 143253IndexNumerics1PPS 65AAbout This Book 1Access Control 121ACTS 103, 121Operation 104Add New Relationships pa

144 S100 User Guide – Rev. D – June 20051SyncServer S100Attribute Certificate122Audit Trail 122authdelay 62Authentication 122Authentication fields 59A

1S100 User Guide – Rev. D – June 2005 145253Client Software 10Clock Settings 70Clock Value 70Code Modulation 67Code Type 66Collapse 84Confidentiality

146 S100 User Guide – Rev. D – June 20051SyncServer S100Denial of Service124DES 124DHCP 73, 124Dial-up 103Dialup Backup dialog 35Dialup Settings dialo

1S100 User Guide – Rev. D – June 2005 147253Event Control 71Event Edge 71Event Input 22FFalling edge 71File System Check on Reboot 76Filter 81FIPS 125

148 S100 User Guide – Rev. D – June 20051SyncServer S100HeartBeat Mode71Help 84Host 58, 74, 75Hostname 73How do I...? 1How toAcquire and install SymmT

1S100 User Guide – Rev. D – June 2005 149253IP address 73IP Forwarding 73IPSec 127IRIG 65, 127IRIG A 66IRIG B 66, 104Irrefutable 127Issue Alarms 80ITU

150 S100 User Guide – Rev. D – June 20051SyncServer S100Logging Off85Logging On 30Logs 81MMail forwarder 80Mail Log 82Main Settings 65Manycast client

1S100 User Guide – Rev. D – June 2005 151253NMIServer 129, 134No filter 81NOC 129Non-repudiation 129Notarization 129NTMS 129NTP 4, 5, 7, 10, 42, 90, 1

8 S100 User Guide – Rev. D – June 20051SyncServer S100by secure web sites to protect credit card numbers and other sensitive information from unintend

152 S100 User Guide – Rev. D – June 20051SyncServer S100Oscillator disciplining function gain value71OSI 130Out-of-band Authentication 130outputs 109P

1S100 User Guide – Rev. D – June 2005 153253Reference ID 62Reference Time 61, 62Registers 71Regular expression 81Remove all but the last __ lines 81re

154 S100 User Guide – Rev. D – June 20051SyncServer S100Server role59service quotes 137Setup Complete screen 38, 45, 48SHA-1 131Simple Network Time Pr

1S100 User Guide – Rev. D – June 2005 155253System Information 36System Information dialog 39, 46System Peer 61System Peer Mode 61System Status screen

156 S100 User Guide – Rev. D – June 20051SyncServer S100TLS133TMC 133Token 133Tool box 133TPC 133TPCA 133Traceability 134Transaction 134Transmission C

1S100 User Guide – Rev. D – June 2005 157253Warrant 135Web-based interface 51When 76Wide area network 135Wireless Application Protocol (WAP) 135WPKI 1

158 S100 User Guide – Rev. D – June 20051SyncServer S100

1S100 User Guide – Rev. D – June 2005 9253Time Distribution ModelNetwork time distribution systems use a hierarchical time distribution model, as show

10 S100 User Guide – Rev. D – June 20051SyncServer S100More details are found in “Chapter 3” on page 13 and “The Web-Based Interface” on page 53.S100

1S100 User Guide – Rev. D – June 2005 11253Digitally signed public certificates are required by the Autokey protocol. (See the interface at “Advanced:

2 S100 User Guide – Rev. D – June 20051

12 S100 User Guide – Rev. D – June 20051SyncServer S100

S100 User Guide – Rev. D – June 2005 13253Chapter 3Installation and ConfigurationOverviewInstallation, setup, and getting started with the S100 are re

14 S100 User Guide – Rev. D – June 2005SyncServer S100CD with NTP Clients, SymmTime™ software, User Guide PDFCD with NTP Clients, SymmTime™ software,

S100 User Guide – Rev. D – June 2005 15253Your CD-ROMThe CD does not autoload when inserted into the CD-ROM drive. Use the file browser to view the co

16 S100 User Guide – Rev. D – June 2005SyncServer S100• TermPro23.exe is used to install Tera Term terminal emulation software, if desired. The manual

S100 User Guide – Rev. D – June 2005 17253DOS Prompt (in 95, 98, ME) or the Command Prompt (in NT, 2000). This is available from the Programs section

18 S100 User Guide – Rev. D – June 2005SyncServer S100• Windows prevents programs from accidentally accessing one another's memory space and it a

S100 User Guide – Rev. D – June 2005 19253Installing Your S100Install the S100 in a physically secure location with strong physical access controls.Sy

20 S100 User Guide – Rev. D – June 2005SyncServer S100Making All Connections: An OverviewUse your standard PC workstation to configure the S100.Refer

S100 User Guide – Rev. D – June 2005 21253Setting Up the HardwareOn the S100 Front PanelComplete the following steps before turning on the power:1.

1S100 User Guide – Rev. D – June 2005 i253Table of ContentsChapter 1Introduction and Overview 1Conventions Used 2Product Details 3Time Standards 3Glob

22 S100 User Guide – Rev. D – June 2005SyncServer S100On the S100 Rear PanelComplete the following steps to complete the S100 installation:1. Conne

S100 User Guide – Rev. D – June 2005 23253Installing the GPS AntennaIf you are installing an S100 with the GPS option, a bullet antenna is provided. T

24 S100 User Guide – Rev. D – June 2005SyncServer S100Installing the GPS antennaNote: The GPS antenna and cable described in this manual have been rep

S100 User Guide – Rev. D – June 2005 25253the hub directly to the network using the third Ethernet cable and perform an on-network test. Figure 3-4: C

26 S100 User Guide – Rev. D – June 2005SyncServer S100Figure 3-5: COM Port Properties* To set the Terminal Type, select File>Properties>Settings

S100 User Guide – Rev. D – June 2005 27253Figure 3-6: Login and Command Line3. A command line appears.4. Type netconfig and press <Enter>.

28 S100 User Guide – Rev. D – June 2005SyncServer S100Testing Network FunctionalityTo ensure that your network is functioning correctly, check to see

S100 User Guide – Rev. D – June 2005 292533. Now, verify the S100’s IP address. At the Unix command prompt, at the command line (Figure 3-6), type

30 S100 User Guide – Rev. D – June 2005SyncServer S100How to Acquire TimeWith the S100, you can choose your source of secure time. Each of the time re

S100 User Guide – Rev. D – June 2005 31253Administrator Log-InOn the System Status Screen, click the Administrator Log-In link. After the security ale

ii S100 User Guide – Rev. D – June 20051SyncServer S100Your CD-ROM 15Using the Software 16PuTTY Folder Details 16PUTTY.EXE 16PSCP.EXE 16PSFTP.EXE 17PL

32 S100 User Guide – Rev. D – June 2005SyncServer S100Next StepIf this is your first log-in, your next step is to select the Configuration Wizard link

S100 User Guide – Rev. D – June 2005 33253Choose Your Time SourceThe first dialog in the Configuration Wizard asks you to choose the source of time.Th

34 S100 User Guide – Rev. D – June 2005SyncServer S100Beginning on the following pages, you will be walked through each of the various configuration s

S100 User Guide – Rev. D – June 2005 35253GPSIf you choose GPS (see Figure 3-16) and click Next, the Dialup Backup dialog is displayed. If you wish to

36 S100 User Guide – Rev. D – June 2005SyncServer S100Then click Next for the System Information dialog.• Admin e-mail, for the administrator of the S

S100 User Guide – Rev. D – June 2005 37253System Tests Dialog You can skip the test by clicking Finish, or initiate the test by clicking Test Now.The

38 S100 User Guide – Rev. D – June 2005SyncServer S100There is no output to the “Mail test” field. That is because mail is tested by sending an e-mail

S100 User Guide – Rev. D – June 2005 39253If you choose the Dialup radio button and click Next, the Dialup Settings dialog is displayed. In the field,

40 S100 User Guide – Rev. D – June 2005SyncServer S100• Host name• System (S100) locationConfirm the data that is in the fields. If it is not accurate

S100 User Guide – Rev. D – June 2005 41253Test Results dialog This screen tells you if the dial-up time source for your S100 is functioning properly.

1S100 User Guide – Rev. D – June 2005 iii253Logging In 54Administrative Interface 54Admin Interface: Base Menu 55Administrative Menu: Expanded 56Syste

42 S100 User Guide – Rev. D – June 2005SyncServer S100NTPYou can also acquire time through other NTP servers and S100s.Note: If you have not configure

S100 User Guide – Rev. D – June 2005 43253System Information dialogThe System Information dialog shows you:• Admin e-mail, for the administrator of th

44 S100 User Guide – Rev. D – June 2005SyncServer S100System Tests dialog You can skip the test by clicking Finish, or initiate the test by clicking T

S100 User Guide – Rev. D – June 2005 45253There is no output to the “Mail test” field. That is because mail is tested by sending an e-mail to the addr

46 S100 User Guide – Rev. D – June 2005SyncServer S100Dialup Backup dialogIf you check Use dialup as backup for IRIG-B, a similar Dialup Settings dial

S100 User Guide – Rev. D – June 2005 47253• Host name• System (S100) locationConfirm the data that is in the fields. If it is not accurate, change it

48 S100 User Guide – Rev. D – June 2005SyncServer S100Test Results dialog This screen shows whether the IRIG-B for your S100 failed or passed. In this

S100 User Guide – Rev. D – June 2005 49253Using SymmTime™ Next, you need to install client software to test NTP (Windows installation).The SymmTime ut

50 S100 User Guide – Rev. D – June 2005SyncServer S1005. Right-click the displayed clocks for the menu and select Sync Servers6. The following s

S100 User Guide – Rev. D – June 2005 512538. The IP is added to the Active Servers window. Click OK. The IP address is listed under Active Servers.

iv S100 User Guide – Rev. D – June 20051SyncServer S100SyncServer Help 84NTPD Help 84Search NTPD Manual 84Logging Off 85Chapter 5Operations & Time

52 S100 User Guide – Rev. D – June 2005SyncServer S100

S100 User Guide – Rev. D – June 2005 53253Chapter 4The Web-Based InterfaceOverviewThe following is a description of the web-based software interface t

54 S100 User Guide – Rev. D – June 2005SyncServer S100Logging InUsing your browser, the following dialog is displayed once you enter the S100’s IP add

S100 User Guide – Rev. D – June 2005 55253Admin Interface: Base MenuThe first thing you see on the left of your screen is the base Administrative (Adm

56 S100 User Guide – Rev. D – June 2005SyncServer S100Administrative Menu: ExpandedExpanding each item on the base menu shows you all the available op

S100 User Guide – Rev. D – June 2005 57253System StatusClicking this item, you will quickly see the status of the S100.The color of the box on the lef

58 S100 User Guide – Rev. D – June 2005SyncServer S100NTP RelationshipsUse this option to configure NTP.Define the relationships between and among thi

S100 User Guide – Rev. D – June 2005 59253• Server• Broadcast• Manycast Client• Broadcast Client• Manycast Server• Multicast ClientAddress - Enter the

60 S100 User Guide – Rev. D – June 2005SyncServer S100NTP Time Source TestThe NTP Server Test dialog lets you test the servers you designated in the N

S100 User Guide – Rev. D – June 2005 61253NTP RestartHere, you can restart the NTP daemon, for troubleshooting purposes only.However, please note the

1S100 User Guide – Rev. D – June 2005 v253How many satellites are necessary for me to operate the S100? 111How do I know if the satellite signal stren

62 S100 User Guide – Rev. D – June 2005SyncServer S100Leap Indicator - This is a two-bit code warning of an impending leap second. The numbers mean:00

S100 User Guide – Rev. D – June 2005 63253Advanced: ntp.confThe following dialog is only for those with advanced knowledge of NTP.The dialog in Figure

64 S100 User Guide – Rev. D – June 2005SyncServer S100Advanced: Keys/CertificatesUse this NTP Keys/Certificates dialog to obtain a digital certificate

S100 User Guide – Rev. D – June 2005 65253Alternatively, you can use Paste Certificate to copy and paste the certificate from the certreq.jsp file int

66 S100 User Guide – Rev. D – June 2005SyncServer S100• Real-Time Clock, or RTC, synchronizes the oscillator to the 1PPS signal from the timing engine

S100 User Guide – Rev. D – June 2005 67253The default modulation envelope is AM.Time Code Settings - This confirms the settings:• Time Code = The time

68 S100 User Guide – Rev. D – June 2005SyncServer S100Notes: (1) After this error is detected, its bit remains set until the GPS receiver is reset.(2)

S100 User Guide – Rev. D – June 2005 69253GPS TimeGPS time is noted here.Seconds of Week - This is expressed in the number of seconds since January 6,

70 S100 User Guide – Rev. D – June 2005SyncServer S100Other InformationThe following screens give additional information about the S100.Engine TimeThe

S100 User Guide – Rev. D – June 2005 71253Disc Control - Short for disciplining control, this disciplining function is the part of the software that m

vi S100 User Guide – Rev. D – June 20051SyncServer S100Appendix BTime Glossary 121Appendix DCustomer Assistance 137US Assistance Center 137Customer Se

72 S100 User Guide – Rev. D – June 2005SyncServer S100Model InformationThe following page provides basic data about the bc635/637 PCI board, the timin

S100 User Guide – Rev. D – June 2005 73253of the ports; a signal is transmitted and returned to the sending device and the returned signal is compared

74 S100 User Guide – Rev. D – June 2005SyncServer S100ifconfig OutputThis screen gives you information about the network configuration of the S100. It

S100 User Guide – Rev. D – June 2005 75253Wait time - Response time between pingsPing count - Try to ping this number of times before quittingOptions

76 S100 User Guide – Rev. D – June 2005SyncServer S100• Skip Name Lookup: If you check this, the S100 will not take the time to look up the host names

S100 User Guide – Rev. D – June 2005 77253Reset - Click Reset to clear the data you have entered.Submit - Clicking Submit to disconnect the server fro

78 S100 User Guide – Rev. D – June 2005SyncServer S100Time ZoneUse this option to set the time zone displayed in the web-based admin interface.The tim

S100 User Guide – Rev. D – June 2005 79253SNMP ConfigurationWhen populated with text, this screen is a summary of the SNMP configuration commands ente

80 S100 User Guide – Rev. D – June 2005SyncServer S100AlarmsThis page lets you configure alarm activity.E-mail Address - This e-mail address is where

S100 User Guide – Rev. D – June 2005 81253LogsYou can access the NTP, Boot, System, Config and HTTPD logs through either the admin menu or in the drop

1S100 User Guide – Rev. D – June 2005 1253Chapter 1Introduction and OverviewThe S100 provides computers and network devices secure synchronization to

82 S100 User Guide – Rev. D – June 2005SyncServer S100Boot LogUse this log to see messages created during the boot process.System LogUse this log to m

S100 User Guide – Rev. D – June 2005 83253Config LogThis log shows you S100 configuration and status messages.HTTP LogThis log shows webserver message

84 S100 User Guide – Rev. D – June 2005SyncServer S100HelpThis is the last section of the S100 admin menu. Available Help functions are:SyncServer Hel

S100 User Guide – Rev. D – June 2005 85253Logging OffLog off by clicking Log Out, at the top of each screen within the interface.You will see the Syst

86 S100 User Guide – Rev. D – June 2005SyncServer S100

S100 User Guide – Rev. D – June 2005 87253Chapter 5Operations & Time-ProtocolsS100: Operations and Time ProtocolsSysplex Timer“Sysplex” means SYSt

88 S100 User Guide – Rev. D – June 2005SyncServer S100Figure 5-41:Time Information String ParametersComm parameters can be controlled by modifying the

S100 User Guide – Rev. D – June 2005 89253will run the odd parity (9600,8,o,1) version of the protocol. The currently available versions of the proto

90 S100 User Guide – Rev. D – June 2005SyncServer S100When used over UDP, the S100 listens for a datagram on port 13. The S100 responds to the UDP req

S100 User Guide – Rev. D – June 2005 91253Leap Indicator (LI)This is a two-bit code warning of an impending leap second that will be inserted or delet