Home

Verilink Red Zone Encryption Management System (REMS) User

1. 5 6 Configuring and starting REMS 5 6 Setting up REMS to provide re sync to the 5 7 Setting up external timing sisri trennen treten nenne 5 8 Configuring and starting REMS 6 1 Configuring REMS using the thumbwheel switch eee 6 1 Using the thumbwheel switches overview eese 6 2 Accessing the NCC 2020 using the thumbwheel switches 6 3 Procedure for configuring the FBR 6 4 Procedure for configuring the 6 5 Interpreting the LED indicators 6 7 General AS2000 NCC 2020 LEDs sere ironis oorner rE nennen 6 7 REMS master FBR NCC 2020 front panel LEDs 6 9 Master FBR DIU 2130 front panel 6 10 Remote FBR DIU front panel 6 10 Performance monitoring essere ener enne 7 1 soie gne EPUM asta RRPROPOI D RP IUE 7 1 System communication of performance messages 7 2 Calling up AM2000 performance displays seen 7 4 Interpreting AM2000 reports REMS ene 7 6 Near end User Statistics eee iacet eer tetris 7 6 Red Zone Encryption Management System User Manual 10 Near end Equipment Statistics PRMs from far end 7 6 Troubleshooting 5 eerte ete hene ete e ee aee ede 8 1 O
2. Multiline shelf Front module side view Rear connector module E P 4 per I 128 pin connectors Ejector gt lt q handles gt Thumbscrews 96 pin e connectors gt Shelf backplane connector 2 4 Red Zone Encryption Management System REMS User Manual Overview of FBR Hardware Overview of FBR and BRC Hardware The Red Zone Encryption Management System consists of two major components Frame Bit Repositioner FBR and Black to Red Communicator BRC The FBR is installed on the Red Zone side and communicates between the DTE equipment and the encryptor The FBR also connects to the PC running Access Manager The BRC is installed on the Black Zone side of the encryptor and communicates with the network On the far end another REMS is also installed See Fig ure2 5 Block Diagram of REMS showing Functional Components Figure 2 5 Block Diagram of REMS showing Functional Components REMS components go on both sides of the encryptor Red Zon Near End Access Manager 2000 Overview of the REMS component connections Black Zone Red Zon Far End Common Carrier Local Exchange Networ The dashed lines on the left show the REMS broken into its two main functional components the FBR and the BRC In addition to their specific functions both the Frame Bit Repositioner FBR and the Black to Red Commu
3. ON SUD um MANAGEMENT EXTENSION NOCOMNG EXT MANAGEMENT PORT IN NETWORK To MUX ESF D4 1 544 MHz in Not used Not used To PC COM port Not used The front panel of the FBR NCC 2020 contains amomentary push button switch labeled EXE 4 4 Red Zone Encryption Management System REMS User Manual Frame Bit Repositioner FBR m atwo position thumbwheel switch The thumbwheel is used to configure the REMS For thumbwheel switch interface operating instructions see Chapter 6 Configuring and starting REMS LED function indicators wm Craft port connector 6 pin modular jack a bantam signal access connectors Ejector handles facilitates removal and installation of the module ASCII terminal jack The front panel CRAFT jack of the master NCC 2020 is used for a local ASCII terminal connection This 6 pin miniature modular jack provides a direct RS 232 connection without flow control to the local terminal This jack is equipped with an auto baud feature which is activated upon power up When the master NCC receives a carriage return CR at a rate of 300 600 1200 2400 4800 9600 or 19 200 baud this port is programmed to operate at the ASCII terminal s rate Pressing the BREA key on the terminal for one second resets the baud rate or disconnecting the cable from the terminal to the CRAFT jack also resets the baud rate Refer to the
4. enne 3 3 System opefatlODn coheret vierte ertet 3 5 How the REMS aligns itself enne enne enne 3 5 frame synchronization nenne enne enne ene 3 5 Encryptor synchronization 3 6 FBR alignment and framing enne 3 6 Alignment sequence reete ferrent etr eher nene enger Pointe preti E a qu 3 7 D TE alignment nbl rens rte FR eee e e dede eet 3 9 Red Zone Encryption Management System User Manual Vii viii 4 5 6 7 How performance data is distributed 3 10 How BRC communicates with 3 12 FBR BRC components of REMS 4 1 OVeEVIeW eid Rep Came ie ee eee ad pa 4 1 Frame Bit Repositioner FBR E 4 3 FBR NCC 2020 eee m e Reda 4 4 FBR DIU2 130 ate eee re ieri ert etu 4 7 Black to Red Communicator BRC 4 8 Functions of the eee eO e pte ees 4 8 Components of the 4 8 NCC 2020 nett eet teo HE e eee tee e eee 4 9 CDM 2249 epe ERO PRO 4 9 Connecting REMS components 5 1 Procedure for connecting REMS components 5 3 Near end of circuit x coreano e PD Ire et ie a bete 5 3 Connecting the far end equipment 5 3 Signal acronyms in alphabetical order sse 5 5 Powering up REMS p ri epe e
5. Red Zone Encryption Management System REMS User Manual 3 13 Theory of operation Figure 3 7 Where the FBR code is processed Red Zone Black Zone Red Zone Near End Far End decrypted FBR code with inserted BRC performance message eR BRC Pa FBR performance reference combined encrypted 8 message code code and encrypted BRC performance message FBR code FBR code E hh pag 2 22 T Carrier Local Exchange Networ om 224 KG81 KG94 Encryptor 722 A 2 9 inating pertormarice message El lt Access Manager 2000 The communication from the BRC to its FBR is one way because the near end FBR uses the exclusive OR function to extract the performance data from the decrypted FBR code with an inserted BRC performance message 3 14 Red Zone Encryption Management System REMS User Manual Chapter 4 Overview FBR and BRC components of REMS The sections in this chapter break down the REMS FBR and BRC into their components and describe them in detail The purpose of this chapter is to familiarize you with the REMS major components the FBR and the BRC There are no installation or operating instructions in this chapter For REMS setup and component connection instructions see Chapter 5 Connecting REMS components These sections of this chapter describe purpose and operation of FBR and BRC
6. Transmit clocks supported network side Loop mode from network received data External mode supplied by user Internal mode 1 544 Mbps DTE mode from DTE received data a Easy hardware installation and troubleshooting a Installs in standard AS2000 multiline or dual line shelves a Modules based on proven AS2000 standard products a Supports Verilink Advanced Programmable Architecture APA REMS uses the full 1 544 Mbps bandwidth at all points 1 536 Mbps plus 8 Kbps framing DSU CSU devices which add framing and which bit stuff to the DTE signal to achieve T1 transmission rates are not necessary REMS contains an integral T1 ESF Channel Service Unit CSU permitting direct connection to public or private 1 media REMS can also be connected to an existing CSU REMS supports B8ZS line coding for network clear channel operation The key advantages of Verilink s patented REMS are a Enhanced security When compared with the wraparound technique REMS is more secure for two reasons First the frame bit is sent through the encryptor not wrapped around Second the frame bit is no longer coincident with DSO channels It is randomly aligned with the payload a Network Management from the Red Zone Red Zone Encryption Management System REMS User Manual 1 3 Introduction Black Zone performance monitoring of both the near end and far end can be done from the Red Zone a Increased bandwidth REMS uses the full 1 544
7. 1 1 1 Originating BRC performance message Network performance data is coded as a BRC performance message ready to be inserted and sent to the near end Access Manager 2000 Combined encrypted FBR code and BRC performance message The encrypted FBR code and the BRC performance message are combined into one message using a 2 input exclusive OR function Simply for each bit position if the bit values which are being combined are different the resulting value is 1 1 0 1 1 D the same the resulting value is 0 Decrypted FBR code with inserted BRC performance message As the exclusive OR ed text passes through the encryptor it is decrypted to produce this result Remember that the decryption key has now been applied to a message which was created from encrypted FBR code and a plain text BRC 0111110 performance message so the result will differ from original exclusive OR ed text 1 0 11 Local FBR reference code The local FBR refers to the FBR code it was expecting Resulting BRC performance message The FBR extracts the BRC message by using a second exclusive OR function to compare the received code with the FBR reference code Simply each bit position is compared to the expected value If the result of the comparison is different the output is a 1 the same the output is a 0 The resulting message is the same as the original BRC performance message created in
8. front panel connectors controls and indicators a front and module connectivity a Rear Connector Module rear panel connectors m System interconnections CAUTION REMS plug in modules look similar to standard AS2000 modules However REMS components contain specially modified hardware and firmware and should be labeled on the front panel with their REMs model numbers Do not attempt to replace a REMS module with a standard AS2000 module Both the FBR and the BRC are composed of front and back modules Back modules are called Rear Connector Modules The front modules contain the microprocessor based engines that perform the essential functions of the modules The back modules provided equipment and Red Zone Encryption Management System REMS User Manual 4 1 FBR BRC components of REMS network connectivity Engine modules are based on standard AS2000 modules but contain modified Flash EPROMs and other electronics Rear Connector Modules are also based on standard AS2000 modules Figur e4 1 Functional Block Diagram of REMS Component Modules and Encryptor shows the modular breakdown of the REMS FBR and BRC and their interconnectivity with the multiplexers the Encryptor and the network Figure 4 1 Functional Block Diagram of REMS Component Modules and Encryptor FBR BRC I 128 pin I connector b m mm mm EE EE EM EM EM Encryptor gt Shelf backplane 128 pin connecto
9. te eti eit e Bn 1 1 OVeEVIeW eS eid dup ri i M Utt 1 1 Beat res mote CUP de aa e eei 1 2 Full bandwidth without DSU CSUS 1 3 Other key advantages 1 3 REMS system hardware configuration 1 4 Diagnostics and performance monitoring 1 6 Network performance parameters 1 6 AREE 1 6 Registers database snc iei de TEES 1 7 Standards and compliance sss nennen enne 1 8 AS2000 compatibility 1 2 rte E n E e rers 1 9 System Overview 2 1 AS2000 rack mountable shelf system 2 1 Plug in modules ae etr ERR Hone D 2 1 Dual line and multiline shelves 2 2 Dual line shelf 2 3 Multiline shelf 2 3 Overview of FBR and BRC Hardware 2 5 Overview of the REMS component connections 2 5 Theory of operatloh eee ecce ete eet t ge ees 3 1 Verilink solves historical problems of encryption over networks 3 1 Framing Encrypted signals sessi enne 3 1 Accessing performance data essen eene nente nennen nne 3 2 Verilink s REMS solution to encrypted T1 transmission 3 2 Keystones of the New Functionality
10. Red Zone Encryption Management System REMS User Manual Interpreting the LED indicators Interpreting the LED indicators In some instances REMS uses its front panel LED indicators differently from a standard AS2000 This section explains how to interpret the REMS LED indicators Some indications do coincide with those of a standard AS2000 Figure 6 2 2020 Front Panel Showing LED Indicators i 0 0 FUNCTION EQPT IN OUT NET MON OUT IN NET EQPT Equipment CSU Status Networ LED Indicators General AS2000 NCC 2020 LEDs follows Solid Green Solid Yellow Solid Red Flashing Red Flashing Red Yellow Not Lit Red Zone Encryption Management System REMS User Manual Decoding the 2020 front panel LED indicator The EQPT equipment LED is a tri color indicator with six states as Equipment is OK regardless of network connection NCC is looped toward the equipment via a repeater or equipment loopback RLB or ELB and no errors are being received Any continuous error condition for example LOS AIS Bipolar Violation or CRC 6 Error low density indicator LED is updated every 50 to 100 milliseconds NCC is looped toward the equipment RLB ELB and errors are received from the equipment NCC is not powered up or has lost power or Self Test failure 6 7 Configuring and starting REMS
11. 6 8 NOTE EE Solid Red events take priority over Flashing Red events except when a loopback is enabled Decoding the NCC 2020 CSU Status STAT LED Indicator The STAT CSU status LED is a three color indicator with six possible states This will be the only LED lit when the power up self test fails Solid Green All OK Flashing Green The NCC is being accessed by a thumbwheel switch operator at the master NCC Solid Yellow An operator test is in progress that is a test signal is currently being applied to the circuit by the CSU Solid Red Any alarm Flashing Yellow and Red Errors received during user initiated test Flashing Red Power up self test failure Not Lit No power blown fuse If an alarm state is caused by exceeding the performance monitoring threshold the alarm does not clear until the error in the selected intervals falls below the threshold This will be equal to one or more 15 minute intervals Decoding the NCC 2020 Network NET LED Indicator LED The NET network LED is a tri state indicator with six states as follows Solid Green A normal signal is being received from the network all OK Solid Yellow NCC is looped toward network via a line loopback LLB or payload loopback PLB and no errors received from the network Solid Red Continuous errors on the network for example LOS AIS Red Zone Encryption Management System REMS User Manual REMS m
12. 68 The following tables list the applicable registration jack universal order codes USOCS facility interface codes FICs and service order codes SOCs These are required to order service from the telco For T1 interfaces Port ID REN SOC FIC USOC 1 544 Mbit s SF 6 0N 04DUO9 BN RJ 48C jack 1 544 Mbit s SF 825 04DU9 DN 1 544 Mbit s ANSI ESF 04009 1KN 1 544 Mbit s ANSI ESF B8ZS 04009 1SN ftheunit appears to be malfunctioning inform the telco and disconnect it from the network lines until the source of trouble is determined to be your equipment or the telephone line If your equipment needs repair it should not be reconnected until it is repaired Theunit has been designed to prevent harm to the network If the telephone company finds that the equipment is exceeding tolerable parameters it can temporarily disconnect service In this case the telephone company will provide you advance notice if possible fthetelephone company alters its equipment in a manner that can affect the use of this device it must give you warning so that you have the opportunity to maintain uninterrupted service You will be advised of your right to filea complaint with the FCC Verilink REMS User Manual Lithium Battery English Francais Espafiole Deutsch Nocustomer is authorized to repair this equipment regardless of warranty status All repairs must be performed by Verilink or an authorized agent It is the r
13. 81 ESF 82 AMI 83 B8ZS Procedure for Using the BRC thumbwheels located on the front panel of the BRC NCC configuring the 2020 select the BRC timing mode for each BRC in the circuit Refer to the subsection BRC Timing Options below 1 Access the by entering its location address into its the thumbwheel switches located on the front panel of the BRC NCC 2020 The STATUS light on the front panel of the NCC begins flashing Green You have 60 seconds to perform the next step Using the FBR thumbwheels located on the front panel of the FBR NCC 2020 set the FBR to 40 This is the canned preconfigured FBR option The NCC STATUS light stops flashing Select the BRC timing mode for each BRC in the circuit Refer to the subsection BRC Timing Options below Red Zone Encryption Management System REMS User Manual 6 5 Configuring and starting REMS 6 6 BRC Timing Options Select one of the settings 40 through 43 which are canned programs Then select from 50 through 63 as appropriate 40 Canned program Internal timing generate PRMs Performance Report Messages 41 Canned program Network loop timing generate PRMs 42 Canned program Internal timing no PRMs 43 Canned program Network loop timing no PRMs 50 Internal timing 51 Network loop timing 52 Equipment timing 53 External timing RS442 54 External timing TTL 62 Disable transmit of BRC message 63 Enable transmit of BRC message
14. B1 VERILINK VERILINK CORPORATION 127 JETPLEX CIRCLE MADISON ALABAMA 35758 TEL 800 837 4546
15. Block Diagram of Near end 5 8 Red Zone Encryption Management System REMS User Manual Setting up external timing Figure 5 5 External Timing Block Diagram of Red Zone Black Zone MUX Encryptor to T1 ESF network Internal or External timing T1 ESF from network EXT CLK Re sync leads 64 kHz reference synchronized with RSC i EXT CLK In Table 5 1 REMS External Timing Configuration two valid alternative timing configurations are given one in each row Table 5 1 REMS External Timing Configuration Near end MUX Near end BRC Far end BRC Far end MUX Loop Internal Loop Loop Loop or External External Loop or External Loop or External a Must be from same clock source as EXT input to near end BRC or RSC from the encryptor or 64 KHz REF RSC from FBR b Must be from same clock source as EXT input to near end BRC Red Zone Encryption Management System REMS User Manual 5 9 Connecting REMS components 5 10 Red Zone Encryption Management System REMS User Manual Chapter 6 Configuring and starting REMS This chapter describes a Configuring REMS using the thumbwheel switch interface a Interpreting the LED indicators Configuring REMS using the thumbwheel switch The operator uses the EXE execute and FUNCTION thumbwheel switches on the NCC 2020 modules to configure REMS There are thumbwheel switches in both the FBR and the BRC You must config
16. Mbps bandwidth at all points A 14 increase in bandwidth is realized when you compare the uncompromised 1 536 M bps provided by the REMS with the 1 34 4Mbps limit of the slow down technique REMS system Each AS2000 REMS termination consists of two parts hardware gt aBlack to Red Communicator BRC CSU located in the Black configuration Zone and a a Frame Bit Repositioner FBR located in the Red Zone Both the BRC and the FBR are designed to function within either the Access System 2000 dual line shelf DLS 2000 or the High Density multi line shelf MLS 2200 See Figur e1 2 REMS System Equipment and Network Interfaces Figure 1 2 REMS System Equipment and Network Interfaces Ti or RS 422 RS 422 DTE RS 422 n D4 ESF common Carien 1 544Mbps 1 544Mbps c 1 i pete Wi Red Zone Black Zone 1 4 Red Zone Encryption Management System REMS User Manual Features Flexible DTE interfaces The REMS provides all needed interfaces for direct connection to public or private TI media and to T1 or RS 422 Data Terminal Equipment DTE The REMS access port is selectable between standard Superframe SF framed signal D4 or Extended Super Frame ESF Some of the current DTE multiplexers and terminals provide ESF capability only REMS is selectable between ESF or D4 framing on the DTE access port If ESF is selected data can be extracted from the ESF framing information FDL and CRC6 do not pass end to end
17. Mounting brackets for rear connector Expansion bus connectors P3 and P4 module thumb screws 0000000000000000000000000 0000000000000000000000000 Con necting the The signal and chassis ground connector TB1 on the dual line shelf signal and chassis backplane connects the shelf to a proper grounding point The signal and ground chassis ground connector has two sockets The signal ground SGND conductor connects to the socket on the left hand side of the connector The chassis ground CGND conductor connects to the socket on the right hand side of the connector See Figur e9 4 Signal and Chassis Ground Connector on Rear Panel of Dual line Shelf Red Zone Encryption Management System REMS User Manual 9 5 Installing and Configuring AS2000 Shelves Figure 9 4 Signal and Chassis Ground Connector on Rear Panel of Dual line Shelf 9 6 NOTE Le Back view of dual line shelf A single shelf does not need to use the grounding connector If more than one dual line shelf is used in a node use the TB1 grounding connectors on the back of the shelves Both shelves should be grounded to the same grounding point Ground wires are user supplied Connecting the signal ground The first socket on the left hand side of the shelf backplane is labeled 1 1 It connects the signal ground SGND conductor Connecting the chassis ground The second socket on th
18. When handling this equipment follow these basic safety precautions to reduce the risk of electric shock and injury Follow all warnings and instructions marked on the product and in the manual Unplugthe hardware from the wall outlet before cleaning Do not use liquid cleaners or aerosol cleaners Use a cloth slightly dampened with water Do not place this product on an unstable cart stand or table It may fall causing serious damage to the product Slots and openings in the shelves are provided for ventilation to protect them from overheating These openings must not be blocked or covered Never place this product near a radiator or heat register This product should be operated only from the type of power source indicated on the marking label and manual If you are unsure of the type of power supply you are using consult your dealer or local power company Do not allow anything to rest on the power cord Do not locate this product where the cord will interfere with the free movement of people Verilink REMS User Manual Product Warranty Customer Service Do not overload wall outlets and extension cords as this can result in fire or electric shock Never push objects of any kind into the shelves They may touch dangerous voltage points or short out parts that could result in fire or electric shock Never spill liquid of any kind on this equipment Unplug the equipment from the wall outlet and refer servicing to
19. between shelves to prevent the equipment from overheating maximum temperature is 50 C By allowing air to circulate freely through the shelves mounted in a rack a heat baffle provides ventilation and avoids most heat conduction from one rack to another The dual line shelf requires one 1 75 inch 44 5 mm high mounting space It can be mounted in a 19 inch 482 6mm rack Figure 9 2 System Mounting Dimensions shows the shelf mounting dimensions for dual line shelves and heat baffles Red Zone Encryption Management System REMS User Manual Multiple shelf rack mount systems Figure 9 2 System Mounting Dimensions HEAT BAFFLE DUAL LINE SHELF DUAL LINE SHELF HEAT BAFFLE if required Using heat baffles Instructions for mounting a dual line shelf or heat baffle 1 Mounting 1 75 Space y DLS 2100 1 75 y DLS 210 1 75 y 1 75 LOW Each dual line shelf and heat baffle also occupies one vertical mounting space Heat baffles are mounted the same as dual line shelves as shown in Figur e9 2 System Mounting Dimensions Use the same mounting instructions described for the dual line shelf above For a rack consisting entirely of dual line shelves one heat baffle must be placed between every two shelves as shown in Figur e9 2 System Mounting Dimensions If any equipment is to be mounted above two consecutively mounted dual line s
20. processing and transmission to Access Manager 2000 By coordinating with the FBR the BRC provides a one way communication channel through the encryptor to the FBR The BRC provides two interfaces which operate at 1 544 Mbps a AnESF compliant T1 network interface which includes performance monitoring and data collection as defined by AT amp T Pub 54016 Rev 2 and ANSI T1 403 a An RS 422 interface to the KG bulk encryption devices KG 81 and KG 94 The Black to Red Communicator BRC is made of two components based on standard AS2000 plug in modules The front module is the NCC 2020 The back module is the CDM 2249 See Figur e4 8 Functional Block Diagram of BRC Component Modules Red Zone Encryption Management System REMS User Manual Black to Red Communicator Figure 4 8 Functional Block Diagram of Component Modules To PC Access Manager BRC p um um um um um Ww 9 FBR x 128 pin Shelf 2 lt connector backplane I m 8 lt 5 a To network To equipment BRC NCC 2020 CDM 2249 The front module is based on the Node Controller Unit NCC 2020 The NCC contains the Channel Service Unit CSU The CSU performs the major 1 functions such as signal framing and encoding This is the same module that is a component of the FBR See Figure 4 3 NCC 2020 Front Panel The back module of the BRC NCC 2020 is based on the Channel Service Unit Interf
21. re ce que quipement continue a tr en agr ment avec EN60950 1992 A4 1997 Section 6 2 pour les circuits de voltage de liaisons d changes r seau par les t l communications TNV apr s les connections de circuits ATTENCION La bateria puede explotar si se reemplaza incorrectamente Reemplace la bateria con el mismo tipo de bateria una equivalente recomendada por el manufacturero Dis ponga de las baterias de acuerdo con las instrucciones del manufacturero ATTENCION Para evitar contacto con circuitos que electrocutan la fuente de alimentaci n debe ser instalada por un t cnico profesional La terminal de la fuente de alimentaci n marcada con el s mbolo de tierra debe ser conectada a un circuito de vuelta por tierra permanente PELIGRO Circuitos que se interconectan a la red de telecomunicaciones deben hacerse de tal manera que cumplan con los requisitos estipulados en las especificaciones EN60950 1992 A 4 1997 Secci n 6 2 para los voltages de circuitos interconnectados ala Red de Telecomunicaciones TNV despues de terminar las connecciones entre los circuitos VORSICHT Explosionsgefahr bei unsachgem fsem Ersetzen der Batterie Batterie gleichen Typs und gleicher Qualitat benutzen wie vom Hersteller empfohlen Entsorgung der Batte rie nach Anweisung des Herstellers Verilink REMS User Manual iii Canadian Requirements Safety Precautions VORSICHT GEFAHR Um keinen
22. second multiline shelf The module addresses in the dual line shelves are 27 and 28 in the first shelf and 29 and 30 in the second shelf If the node has only dual line shelves the module addresses are 01 and 02 in the first shelf and 03 and 04 in the second shelf You must configure the FBR and the BRC separately as if they were two separate AS2000 nodes Accessing modules To access the desired NCC enter its address in the thumbwheel switches and press the EXE button twice within one second See Figure6 1 NCC Thumbwheel Switches The STAT LED of the module flashes green indicating that it is accessed and waiting for your next command Once an NCC has been accessed you have 60 seconds to enter another thumbwheel switch command If no command is entered within this time period the accessed module returns to the idle state and its STAT LED goes out Red Zone Encryption Management System REMS User Manual 6 3 Configuring and starting REMS Procedure for configuring the FBR 6 4 IMPORTANT Clearing an incorrect address entry If you accidentally access the wrong module enter command 00 and rapidly press the EXE button twice This releases the currently accessed module If you enter command 00 while a QRSS test signal is applied to an NCC or while a loopback is in progress nothing happens The loopbacks must be deactivated first Use the following procedure for configuring the FBR NCC 2020 For list of
23. the far Make similar connections as above on far end end equipment Red Zone Encryption Management System REMS User Manual 5 3 Connecting REMS components Figure 5 2 Simplified System Cabling Diagram 1 MUX FBR mm NE NEM NM DIM 2530 rear panel T1 ESF D4 to network l EIA 530 port 2 To back I O port of 2249 CIM 2020 rear panel f Adapter cable ESF D4 1 544 Equipment Port MHz MUX to FBR EIA 530 Red Zone Black Zone U lied RS BE C ser supplied computer Optional PC running Access Manager 2000 d Figure 5 3 Pin to Pin System Cabling Diagram i EIA 530 MUX FBR EIA 530 Data Port on CDM 2249 BRC Port 2 on DIM 2530 3 16 2 14 24 11 to T1 ESF or D4 network 15 12 3 16 17 9 i ESF from network Re sync leads 64 kHz reference 1 synchronized Red Zone Black Zone with RSC NOTE The pin numbers are notated in the order Plus Minus 5 4 Red Zone Encryption Management System REMS User Manual Signal acronyms BSC in alphabetical RCT order RPTC RS RSC RTC SD ST TCT TCTC TPT TT Red Zone Encryption Management System REMS User Manual Procedure for connecting REMS components Black Station Clock Receive Ciphered Text Rea
24. the opposite from the sequence you use to install the modules See the previous section To remove a front module from a multiline shelf use the following procedure 1 Power down the dual line shelf 2 Remove the primary management cable and other cables if any from the front module front panel 3 To unseat the card pull the handles of the ejectors outward from the front panel of the front module 4 Slide the front module out of the dual line shelf and place it in an ESD protective bag or box 5 Install the replacement module following the instructions in the previous section To remove a rear connector module from a dual line or multiline shelf 1 Power down the dual line shelf 2 Before detaching the cables attached to the module label them for future reference 3 Disconnect the cables attached to the module Red Zone Encryption Management System REMS User Manual 10 5 Installing and Replacing Plug in Modules 4 Loosen the thumbscrews at each outer edge of the module See instructions in the previous section 5 Remove the front module Follow the instructions as described in Removing and replacing and plug in modules above 6 Slide the module out of the dual line shelf and put it in an ESD protective bag or box 7 Install the replacement module following the instructions in the previous section 10 6 Red Zone Encryption Management System REMS User Manual October 1999 P N 880 502423 001
25. the rear panel as shown in Figure 1 0 2 Securing a Rear Connector Module into a Dual line Shelf Using the Thumbscrews Red Zone Encryption Management System REMS User Manual Installing a rear connector module into a shelf Figure 10 2 Securing a Rear Connector Module into a Dual line Shelf Using the Thumbscrews Secure In place using the two thumbscrews Cut away rear view of dual line shelf rear connector module installed in slot 1 Red Zone Encryption Management System REMS User Manual 10 3 Installing and Replacing Plug in Modules Installing a front module into a shelf TIP NOTE Le 10 4 To install a front module s into a shelf Verilink recommends you insert and secure each rear connector module into the dual line shelf before inserting its mating back module Install the rear connector module as described in the previous section Be sure the shelf is powered down and the rear connector module is already installed in the designated shelf and slot position as described above Facing from the front of the shelf slide the module s into the designated shelf slot position aligning it with the shelf backplane connector and the rear connector module mating connector Using the dual ejector handles if any on the front panel of the module plug the module firmly into the mating shelf backplane and the mating re
26. the rear panel of the messages FBR CIM 2020 and BRC CDM 2249 See Figur e7 2 Origination and Flow of Performance Data in a REMS Network Figure 7 2 Origination and Flow of Performance Data in a REMS Network Red Zone Black Zone Red Zone Near End Far End PRMs carry far end network performance data back to near end BRC relays PRMs and BRC messages to FBR User performance registers in Red Zone gather information from point A in Black Zone Access Manager 2000 vvv vvv Y Equipment performance registers in Red Zone gather information from point B in Black Zone 7 2 Red Zone Encryption Management System REMS User Manual In a typical operational scenario using AM2000 a near end operator in the Red Zone can monitor the quality of the line as it is received by the near end BRC and also receive reports from the far end BRC A certain subset of performance data from the far end is sent back to the near end BRC in the form of Performance Report Messages PRMs The PRMs are combined with the near end performance data and sent back to the FBR where they can be displayed by AM2000 A full set of reports can be also obtained from an AM2000 installed on the far end Red Zone Encryption Management System REMS User Manual 7 3 Performance monitoring Calling up AM2000 performance displays This subsection assumes you have correctly installed AM2000 and configured your near end node in accordance with
27. 7 Introduction Standards and complianc 1 8 The network interface is compatible wth AT amp T 54016 ANSI T1 403 and provides clear channel capability Consequently the system supports an uncompromised 1 536 Mbps of payload In addition the BRC complies with the following standards and publications AT amp T 62411 AT amp T 54016 Issue 2 ANSI T1 403 1989 Bellcore TR 194 MCI ESF Standards Sprint ESF Standards GT amp E ESF Standards AS2000 components have obtained the following approvals Underwriters Laboratories 1459 FCC Part 68 FCC Part 15 Red Zone Encryption Management System REMS User Manual AS2000 compatibility AS2000 compatibility REMS is a standalone system and cannot be integrated with AS2000 modules However it installs in standard AS2000 shelves and uses standard power supplies User interfaces REMS is configured with a thumbwheel interface Access Manager AM2000 an the ASCII Terminal Interface ATI are used in performance monitoring and troubleshooting The Verilink s Graphical Network Manager GNM currently does not support REMS Advanced Programmable Architecture APA ADM 2170 incorporates Verilink Advanced Programmable Architecture APA APA provides the capability of downloading via AM2000 some portions of the upgraded firmware into an AS2000 module s onboard RAM The firmware can also be field replaced with upgraded chips APA provides for system expansion modul
28. Access System 2000 ASCII Terminal Operation manual for instructions on connecting the ASCII terminal to an Access System 2000 node For information on using the ASCII Terminal Interface ATI with REMS see Chapter 7 Performance monitoring Signal access jacks The NCC 2020 front panel also has three pairs of bantam jacks for signal access by an external T1 test set Fi gure4 5 NCC Signal Access Jacks shows the wiring of these jacks 1 Later models are equipped with dual ejectors Red Zone Encryption Management System REMS User Manual 4 5 FBR BRC components of REMS Figure 4 5 NCC Signal Access Jacks EQPT D4 ESF MON Equipment EQPT NET OUT IN E CSU Signal shelf Processing backplane EQPT NET IN OUT IN The EQPT IN jack breaks transmission path toward the DS 1 equipment This allows an operator to apply an external test signal to the equipment receiver EQPT OUT The EQPT OUT jack breaks the transmission path toward the network and looks toward the DS 1 equipment transmitter This jack can be patched to the test set receiver for signal measurement NET IN The NET IN jack looks toward the network when accessed It can be patched to the test set transmitter for test signal application to the network NET OUT The NET OUT jack permits external measurement of the incoming signal from the network MON The MON jacks are non intrusive When accessed each ja
29. Figure 3 1 REMS T1 Signal Partitioning This diagram shows how the T1 signal is partitioned as it passes through the REMS system The CRC 6 and ESF framing bits which are added at the BRC are network generated and therefore unencrypted Red Zone Black Zone 1 536 Mbps PAYLOAD 8 Kbps FBR code ommon Carrie or Local Exchange Networ KG94 1 536 Mbps encrypted PAYLOAD 4 Kbps encrypted FBR code 2 Kbps CRC 6 SS 2 Kbps ESF framing Access Manager 2000 Red Zone Encryption Management System REMS User Manual 3 3 Theory of operation Figur e3 2 Signal Content Across Circuit illustrates the T1 signal content at each segment of the path from DTE to DTE The figure shows transmission from the near end to the far end Figure 3 2 Signal Content Across Circuit Red Zone Black Zone Red Zone Near End direction of transmission Far End cipher text D4 ESF framed encrypted FBR framed D4 framed plain text FBR framec FBR data ESF framed cipher text plain text plain text plain text 2222 Common Carrie Local Exchange Networ A 2 Encryptor Encryptor KG81 KG94 KG94 frame bit is offset frame bit is restored to original position Access Manager 2000 3 4 Red Zone Encryption Management System REMS User Manual System operation System operation How the REMS aligns itself BRC frame synchronization The Red Zone Encryption Manageme
30. However their functionality is provided via other REMS features For more information see Chapter 3 Theory of operation Example DTE devices include a ATM switches Public Branch Exchange PBX equipment framed multiplexers Local Area Network LAN bridges and routers Video conferencing equipment Because DTE signal formatting is standard specialized interfaces and signal conditioning is not required Electrical interface is RS 442 449 via female DB 25 connectors This allows a variety of devices to be connected to the encrypted link see BRC below 3 Internaly REMS uses ESF for synchronization only and does not pass FDL and CRCE6 to the network Red Zone Encryption Management System REMS User Manual 1 5 Introduction Diagnostics and performance monitoring Network performance parameters Alarms 1 6 The BRC provides near end network and far end performance information which is displayed in the Access Manager 2000 AM2000 BRC functionality includes test signals and loopbacks The BRC deciphers the incoming T1 403 PRMs from the far end combines the data with near end network data and broadcasts the report data across the encryptor to the FBR located in the Red Zone The FBR supports AM2000 alarm monitoring and logging daily performance data retrieval Red Zone daisy chaining and FBR configuration The FBR also supports the ASCII Terminal Interface for near end performance display
31. Schlag zu erhalten beim Versagen der electrischen Anlage muss der Stro manschluss von einem Elektriker vorgenommen werden Der elektrische Pol verse hen mit dem Erdsymbol muss am Stromanschluss permanent geerdet sein VORSICHT Schaltungen die in den Ger ten zusammengeschaltet sind m ssen weiterhin den Vorschriften EN60950 1992 A4 1997 Absatz 6 2 f r Telecommunications Netz Spannung TNV Schaltkreize entsprechen This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications Le pr sent appareil num rique n met pas de bruits radio lectriques d passant les limites applicables aux appareils num riques dela class A prescrites dans le R glement sur le brouillage radio lectrique dict par le minist re des Communications du Canada The Industry Canada label indentifies CS 03 certified equipment This certification means that the equipment meets certain telecommunications network protective operational and safety requirements Industry Canada does not guarantee the equipment will operate to the user s satisfaction Before installing this equipment users should ensure that it is permissibleto be connected to the facilities of the local telecommunications company The equipment must also be installed using an acceptable method of connection In some cases the company s inside wiri
32. System REMS User Manual Chapter 9 Overview Installing and Configuring AS2000 Shelves This chapter provides information and instructions on a installing dual line and multi line shelves a configuring their shelf positions in a system a configuring and connecting shelves in a multi shelf system As described in Chapter 2 System Overview AS2000 plug in modules can be installed in rack mountable shelves Shelves are either a dual line or a multiline shelf The dual line shelf is designed for installing modules horizontally The multiline shelf is designed for installing modules vertically See Figur e2 2 Front Panel View Concept Drawing Dual line and Multiline Shelf Rack Configurations These instructions primarily pertain to dual line shelves For more details on installing a multiline shelf see the AS2000 manuals referred to in the front of this document Red Zone Encryption Management System REMS User Manual 9 1 Installing and Configuring AS2000 Shelves Multiple shelf rack mount systems IMPORTANT Figure 9 1 Heat Baffle Rack mounting dual line shelves and heat baffles 9 2 One or more dual line shelves can be rack mounted horizontally or placed on a flat surface stacked no more than two shelves high Multiline shelves are usually rack mounted CAUTION Do not stack multiline shelves loose and unmounted on a flat surface In multiple shelf rack mount systems heat baffles can be placed
33. TI Signal Partitioning the network 2 Kbps framing and 2 Kbps CRC 6 codes are inserted at the BRC The FBR code originating at each FBR is carried through to the far end FBR and is used to maintain REMS synchronization The encrypted FBR code is periodically interrupted across the network to support the ANSI T1 403 PRM andAT amp T 54016 message exchanges The BRC collects network performance data and provides a one way communication channel through the encryptor to the FBR Far end BRC performance data is conveyed to the near end BRC by means of a ANSI T1 403 Performance Report Message PRM which is inserted into the FBR code Table 3 1 Decoding the 4 bit Message Field shows what happens to the FBR code as it travels through the system from the far end to the near end For the purposes of this discussion only one 4 bit data byte is analyzed The alpha references in the table correlate the FBR code with a specific location on the network diagram shown in Figure 3 3 Network performance data is collected in the Black Zone 3 12 Red Zone Encryption Management System REMS User Manual How the BRC communicates with the FBR Table 3 1 Decoding the 4 bit Message Field Message bit 1 21314 Site Code or Message State FBR Code The FBR code placed in the offset frame bit positions is sent from the far end 1 Encrypted FBR Code 0 1 1 0 As it passes through the encryptor the FBR code is encrypted
34. VELVICW 8 1 Basic troubleshooting eese 8 2 Verifying REMS equipment using the encryptor bypass cable 8 3 Troubleshooting using a test set and loopback sse 8 4 Sending framed all ones to verify BRC connections to the line 8 5 Installing and Configuring AS2000 Shelves 9 1 OVERVICW Mp EEE 9 1 Multiple shelf rack mount systems 9 2 Rack mounting dual line shelves and heat 9 2 Using heat battles nee Dee eR eem ene pue 9 3 Instructions for mounting a dual line shelf or heat 9 3 Using shelf rear panel functions sese nennen ens 9 5 Connecting the signal and chassis ground 9 5 Setting the shelf address switch 9 7 Installing and Replacing Plug in Modules n 10 1 Installing a rear connector module into a shelf 10 1 Installing a front module into a shelf 10 4 Removing and replacing plug in modules 10 5 Removing and replacing a front module sse 10 5 Removing and replacing a CIM or DIM 10 5 Red Zone Encryption Management System User Manual ix Red Zone Encryption Management Syste
35. Verilink Red Zone Encryption Management System REMS User Manual October 1999 P N 880 502423 001 1 12 345 amp T 8 5 WHE 13 l el te ete el tele te te ds JE IB IN IN 18 19 IN IN L puce LIE IE TE TE E TE OE TE IE E ID 7 18 IE I IIBER i eee eee ee ee 2 VERILINK Copyright Notice Trademarks FCC Requirements Copyright 1999 Verilink Corporation rights reserved This document does not create any express or implied warranty about Verilink or about its products or services Verilink s sole warranty is contained in its product warranty The end user documentation is shipped with Verilink s products and constitutes the sole specifications referred to in the product warranty Verilink has made reasonable efforts to verify that the information contained herein is accurate but Verilink assumes no responsibility for its use or for any infringement of patents or other rights of third parties that may result The customer is solely responsiblefor verifying the suitability of Verilink s products for its use Specifications are subject to change without notice Verilink is a registered trademark of Verilink Corporation Access System 2000 VeriStats and FrameStart are trademarks of Verilink Corporation Any named pro
36. ace Module CDM 2249 It receives the encrypted signal at its Data port Its network port connects to the T1 carrier network Figure 4 9 CDM 2249 Rear Panel Port To T1 Networ RJ 48 connector EXT TIMING i MANAGEMENT MANAGEMENT RS449 EIA530 i NO COM NC EXTENSION Data Alarm Node Node Port Relay Management Management Jacks Extension In Port Port To back port input of encryptor b Not used To PC COM port Red Zone Encryption Management System REMS User Manual 4 9 FBR BRC components of REMS 4 10 Red Zone Encryption Management System REMS User Manual Chapter 5 Connecting REMS components This chapter provides instructions for setting up a REM circuit It also provides the following setup procedures a Setting up REMS to provide re sync to the encryptor Setting up external timing IMPORTANT Before setting up a circuit be sure you have read the preface and the three preceding chapters of this manual a Preface m Chapter 1 Introduction a Chapter 3 Theory of operation a Chapter 4 FBR and BRC components of REMS Red Zone Encryption Management System REMS User Manual 5 1 Connecting REMS components CAUTION When connecting the FBR and BRC to the encryptor be sure to maintain the correct polarity of the driver and receiver signals of these devices That is always connect the plus output of a driver to the plus in
37. ar Panel View of Dual line Shelf Showing Shelf Address Switch Shelf Address Switch SW 1 Red Zone Encryption Management System REMS User Manual 9 7 Installing and Configuring AS2000 Shelves 9 8 Using a small flat blade screwdriver set the shelf address at the shelf address switch SW1 located at the back of the shelf to the number of the shelf in your node If you have more than one shelf in your node set the shelf address switch of each additional shelf as described above Red Zone Encryption Management System REMS User Manual Chapter 10 Installing and Replacing Plug in Modules This chapter provides instructions for installing removing and replacing AS2000 modules in their shelves CAUTION Before plugging in modules be sure shelves are properly installed and grounded as described in the previous chapter Installing a rear connector module into a shelf To install a rear connector module into a dual line shelf use the following procedure TIP Verilink recommends you insert and secure each rear connector module arm into its multiline shelf before inserting its mating front modules 1 Be sure the power supply cable is unplugged from the rear panel of the dual line shelf or that the power supply is unplugged from the AC or DC power source 2 Select the appropriate shelf and slot position for the rear connector module front module 2150 combination The NCC module goes in Shelf 0 Slot 1 Th
38. ar connector module connector Power up the dual line shelf while watching the module front panel Check for the following a The module s front panel LEDs all briefly illuminate red b The front panel LEDs briefly illuminate green c The front panel LEDs then extinguish d except for the System LED which remains green These events indicate a successful self test of the rear connector module front module installation The above routine applies only if the front module is being installed initially or if all ports are out of service If the front module has been previously configured and the ports are in service the LEDs will reflect the current state of the configuration and the alarm status If the LEDs begin regularly flashing red instead of going out the front module has failed the self test Repeat the installation and replace the module with a new module if necessary Red Zone Encryption Management System REMS User Manual Removing and replacing plug in modules Removing and replacing plug in module Removing and replacing a front module PROCEDURE CIE SSS Removing and replacing a CIM or DIM module PROCEDURE IE SSS When you replace a module follow the standard good practices of an experienced technician such as powering down equipment and using the proper tools When you replace a rear connector module in a multiline shelf first remove the front module This is
39. ar end BRC is looped back Configure the near end side of a REMS circuit as the master node Set the FBR to 40 64 and the BRC to 40 Put the testset on loop timing Disconnect the re sync connection from the FBR to the encryptor if it was previously connected Manually re sync the KG Encryptor re sync connections are usually made to the Relay Alarm contacts on the back of the FBR See Chapter 5 Connecting REMS components for procedure to provide re sync to the encryptor The results of this procedure should be a The EQ LED on the FBR NCC 2020 should go Green Figure 8 2 Test Set T1 EIA 530 F R Loop 40 Timing 64 Master 1 2 3 4 8 4 Red Zone Encryption Management System REMS User Manual Sending framed all ones to verify BRC connections to the T1 line NOTE Troubleshooting using a test and loopback b The EQ LED BRC NCC 2020 should go Green c The KG should stay up and running Look for the following final indicators a Steady flashing of the Port 1 and Port 2 LEDs on the FBR DIU front panel indicate the FBR is receiving good REMS code and is trying to align If the above indications are not present check the polarity of the EIA 530 signal wires Crossed wires can cause a data inversion See Figur e5 3 Pin to Pin System Cabling Diagram At the encryptor re verify the clock and data phase relationship If the Clock does not have the proper phase relations
40. ar firmware upgradability and a flexible technology migration path thereby protecting the customer s investment against obsolescence No downloads are currently applicable to REMS Red Zone Encryption Management System REMS User Manual 1 9 Introduction 1 10 Red Zone Encryption Management System REMS User Manual Chapter 2 System Overview This chapter presents a summary description of REMS including the standard AS2000 modular shelf platform which houses REMS modules AS2000 rack mountable shelf system The AS2000 rack mountable shelf system is a modular platform that accommodates a wide varietyof Verilink plug in modules Plug in modules Individual plug in modules provide specific functionality in a the AS2000 modular shelf platform They also provide additional capacity and ease of replacement Figur e2 1 Front Module Mating with Rear Connector Module in a Dual line Shelf Configuration illustrates how a front module is plugged into a back module and into the backplane connector of the dual line shelf The shelf is not shown Red Zone Encryption Management System REMS User Manual 2 1 System Overview Figure 2 1 Front Module Mating with Rear Connector Module in a Dual line Shelf Configuration 128 pin mating Rear Connector Connectors Module 96 pin for mating with shelf backplane connector 4 Front module Backplane connector is offset toward the front of the shelf relative to the pla
41. aster FBR NCC 2020 front panel LEDs Flashing Red Interpreting the LED indicators Bipolar Violation or CRC 6 indicator Flashing Red and Yellow Not Lit CSU is looped toward the network and errors are being received BPV or CRC 6 NCC is not powered up power loss or self test failure There are two NCC 2020 modules in each REMS one in the FBR and one in the BRC The NCC 2020 module LEDs referred to in this subsection are those of the master FBR set to 64 Figure 6 3 FBR NCC 2020 Front Panel Showing LED Indicators BE EQPT NET 0 6 6 FUNCTION NET Red Zone Encryption Management System REMS User Manual Equipment LED Indicators CSU Status Networ Decoded FBR NCC 2020 LED indicators EQPT NET STAT on BRC DTE input from terminal equipment Signal information from signal in Black Zone Each Green flash indicates a message received from the Black Zone LEDs on the FBR actually flash twice very quickly the first flash is the decrypted unencrypted PRM the second flash is the BRC message which contains the intelligible PRM 6 9 Configuring and starting REMS Master FBR DIU 2130 front panel LEDs The FBR DIU 2130 front panel LED assignments below refer to the DIU 2130 in the master REMS set to 64 Figure 6 4 FBR DIU 2130 Front Panel Showing LED Indicators Remote FBR DIU fr
42. ck permits signal monitoring by an external test set without interrupting normal transmission 4 6 Red Zone Encryption Management System REMS User Manual Frame Bit Repositioner FBR FBR DIU 2130 The FBR DIU 2130 connects to the encryptor The front panel of the FBR DIU 2130 is shown in Figur e4 6 FBR DIU 2130 Front Panel Figure 4 6 FBR DIU 2130 Front Panel Loopback and Status LEDs Data Port 1 Data Port 2 Ejector handle Information on interpreting the LED indicators is given in Chapter 6 Configuring and starting REMS Figur e4 7 FBR DIM 2530 Rear Panel Back Module for DIU 2130 shows the rear connector panel of the back module that pairs with the FBR DIU 2130 Figure 4 7 FBR DIM 2530 Rear Panel Back Module for DIU 2130 Q EIA 530DATA PORT EIA 530DATA PORT 1 This DIM mates with DIU 2130 front module EIA 530 DB 19 female connectors Red Zone Encryption Management System REMS User Manual 4 7 FBR BRC components of REMS Black to Red Communicator BRC Functions of the BRC Components of the BRC The Black to Red Communicator BRC is a single front back module located in the Black Zone It functions as a super CSU The BRC performs the following functions a Provides positioning for the ESF framing bit a Collects network performance data and transparently passes it through the decrypting direction of the active encryptor to the FBR for further
43. commands see the subsection FBR Thumbwheel Configuration Commands below 1 Access FBR by entering its location address into its the thumbwheel switches located on the front panel of the FBR NCC 2020 The STATUS light on the front panel of the NCC begins flashing Green You have 60 seconds to perform the next step 2 Using FBR thumbwheels located on the front panel of the FBR NCC 2020 set the FBR to 40 This is the canned preconfigured FBR option The NCC STATUS light stops flashing 3 Asappropriate configure one of the FBRs in the circuit to be Master 64 and the other end Remote 65 4 As appropriate configure the access port to D4 or ESF framing You can also use the ASCII Terminal Interface ATI to set these parameters 5 Select the line code You can also use the ATI to set these parameters If you reset the thumbwheel switches to 40 at any time after performing the above procedure all settings are reset to the defaults You must then reenter the commands that make the configuration unique Red Zone Encryption Management System REMS User Manual Configuring REMS using the thumbwheel switch FBR Thumbwheel Configuration Commands 40 Canned FBR Option 1 Remote REMS is the default 64 FBR is Master 65 FBR is Remote 68 Disable Re sync Default 69 Re sync 2 seconds 70 Re sync 4 seconds 71 Re sync 6 seconds 72 Re sync 8 seconds 73 Re sync 10 seconds 80 04
44. d Data Receive Plain Text Receive Plain Text Clock Red Station Red Station Clock Receive Ciphered Text Clock Send Data Send Timing or Synchronized Timing Transmit Ciphered Text Transmit Ciphered Text Clock Transmit Plain Text Terminal Timing 5 5 Connecting REMS components Powering up REMS 1 Be sure you have connected the system components at both ends of the circuit 2 Power up the shelves housing the modules in the circuit If necessary see the appropriate AS2000 manuals referred to in the preface of this book Configuring and When you have connected the components on both sides of the circuit starting REMS configure and start REMS as described in the next chapter 5 6 Red Zone Encryption Management System REMS User Manual Setting up REMS to provide re sync to the encryptor Setting up REMS to provide re sync to the encryptor Provide re sync leads to the encryptor as follows 1 Connect the encryptor re sync leads to the relay alarm contacts on the back of the FBR CIM 2020 Use the COM and NC terminals Make the re sync connections from the FBR to the KG at both ends of the circuit See Fig ure5 4 Providing Re sync Leads to the Encryptor Figure 5 4 Providing Re sync Leads to the Encryptor Test Set T1 EIA 530 EIA 530 To far end Common Carrier or Local Exchange Networ Loop Timing Alarm relays 2 3 Re sync leads Put
45. dded to increase node capacity Rear connector modules and other modular system components usually can be added upgraded and replaced independently The shelves are powered by optionally redundant DC power supplies in the form of double wide plug in modules for the multiline shelf and free standing brick modules for the dual line shelf Dual line shelf Figur e2 3 Example Dual line Shelf System shows an example dual line configuration shelf configuration Figure 2 3 Example Dual line Shelf System Rear connector module is visible fro the rear of the shelf Dual line shelf module front panel Universal power suppl module front panel In a dual line shelf plug in modules are mounted horizontally A dual line shelf holds only two plug in modules Shelves can be stacked and can be used in systems that also include multiline shelves For information on installed shelves see Chapter 9 Installing and Configuring AS2000 Shelves Multiline shelf Modules are installed into a multiline shelf configuration using the same configuration method as for dual line shelves except that the modules are vertically oriented Red Zone Encryption Management System REMS User Manual 2 3 System Overview Figure 2 4 Installing Front and Rear Modules in a Multiline Shelf Side View Shelf rear panel
46. ducts herein are trademarks of their respective companies This equipment has been tested and found to comply within the limits for a Class A digital device pursuant to Part 15 of the Federal Communications Commission FCC rules These limits are designed to provide protection against harmful interference in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the user manual can cause harmful interference to radio communications There is no guarantee that interference will not occur in a particular installation If this equipment causes harmful interference to radio or television reception which can be determined by turning the equipment off and on try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna ncreasethe separation between the equipment and receiver Connectthe equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This equipment complies with Part 68 of the FCC Rules On the rear side or bottom of the unit is a label that contains the FCC registration number and other information If requested provide this information to the telephone company All direct connections to the network lines must be made using standard plugs and jacks compliant with Part
47. e DIU module goes in Slot 2 3 Orient the rear connector module at the real panel of the dual line shelf as shown in Figure 10 1 Front Module and Rear Connector Module Installation in a Dual line Shelf Top View Red Zone Encryption Management System REMS User Manual 10 1 Installing and Replacing Plug in Modules Figure 10 1 Front Module and Rear Connector Module Installation in a Dual line Shelf Top View Front module Shelf 0 slot1 position Mating backplane connecto Dual line shelf Front Panel CIM Module 10 2 Slot 2 position Thumbscrews 44 Dual line shelf Top View Shelf Backplane The 128 pin female connector J1 side of the rear connector module should be facing to the interior of the shelf Its rear connector panel should be facing to the outside rear of the shelf 4 Insert the rear connector module into the slot 1 position of the dual line shelf so that the rear connector module seated with rear panel is flush with the rear panel of the shelf Make sure it is squarely aligned Seat it by gently pushing it all the way in until it stops and you can hand start the thumbscrews 5 Secure the rear connector module by tightening the two thumbscrews on
48. e network ESF framing and CRC 6 bits and corrected errors in the FBR code Red Zone Encryption Management System REMS User Manual Alignment sequence System operation The alignment sequence is as follows The near end FBR sends all ones no framing bit to the encryptor The all ones stream is encrypted and this cipher text is passed to the BRC The near end BRC inserts an initial ESF framing bit onto the cipher text by overwriting a bit at a random location Additional ESF framing bits are inserted in every subsequent 386th bit Time BRC BRC inserted bit This ESF framed cipher text is passed through the network to the far end BRC This signal passes through the BRC unchanged and goes to the far end encryptor where it is decrypted to restore the original all ones signal Some of the bits which were inserted overwritten show up as errors zeros where all ones were expected The position of the errors is noted Without further processing the payload data would be errored sporadically in the inserted bit position Using this information the far end FBR identifies the near end framing sequence generated by the near end BRC and synchronizes to it By sending FBR code the far end FBR signals the near end FBR that it has synchronized to the framing sequence of the near end transmitting BRC Red Zone Encryption Management System REMS User Manual 3 7 Theory of operation 6 Asthe
49. e right hand side of the dual line shelf backplane is labeled TB1 2 It connects the chassis ground CGND conductor The point should be connected to the equipment rack ground bus and then the common station earth ground Interconnecting the signal and chassis grounds If the customer site requires interconnecting the signal and ground you can jumper the grounds together at the signal and chassis ground connector TB1 Red Zone Encryption Management System REMS User Manual Setting the shelf address switch Using shelf rear panel functions If more than one shelf is installed all system shelves must be within 12 cabling feet 3 657 m of each other The address switch SW 1 located on the back of a dual line shelf sets the shelf identity within a node The address switch on the first shelf in your node should be set to 0 If you have two shelves in your node the address switch on the second shelf should be set to 1 See the diagram below Figure 9 5 Dual line Shelves and Slot Identification Diagram Front view schematic of double dual line shelf Slot 1 Slot 2 NCC Shelf 0 Shelf 1 NCC Module is always on the left On a multiline shelf the shelf address switch is located on the power supply circuit board and is also labeled SW1 The circuit board is accessible from the rear of the shelf See Figure9 6 RearPanel View of Dual line Shelf Showing Shelf Address Switch Figure 9 6 Re
50. esponsibility of users requiring service to report the need for service to Verilink or to one of our authorized agents The lithium battery referred to in the following notices is contained inside the clock chip DANGER The battery can explode if incorrectly replaced Replace only with the same or equiv alent type recommended by the manufacturer Dispose of used batteries according to the manufacturer s instructions DANGER To avoid electrical shock in case of failure the power supply must be installed by a professional installer The terminal labeled with the ground symbol on the power supply must be connected to a permanent earth ground CAUTION Interconnecting circuits must comply with the requirements of EN60950 1992 A 4 1997 Section 6 2 for telecommunications network voltages TNV circuits ATTENTION Une explosion peut se produire si la batterie est remplac e d une facon incorrecte Remplacez la seulement avec le m me mod le de batterie ou un mod le quivalent selon les recommendations de manufacture Disposez de les batteries us es selon les instructions de manufacture ATTENTION Pour viter choc lectrique en cas de insucc s la provision de pouvoir doit tr install par un installeur professionnel Le terminal de la provision de pouvoir mar qu du symbol de terre doit connect un circuit de terre permanent PRUDENT Les circuits doivent tr interconnect s de mani
51. helves place a heat baffle between the equipment and the dual line shelf The dual line has mounting ears attached to the middle of the shelf for mid mounting in a 19 inch 482 6 mm rack See Figur e2 3 Example Dual line Shelf System The ears are detachable for front mounting the module To mount the dual line shelf to the equipment rack 1 Place the dual line shelf in an upright horizontal position 2 Hold the shelf from underneath and align the mounting screw holes on the 19 inch 482 6 mm mounting brackets Red Zone Encryption Management System REMS User Manual 9 3 Installing and Configuring AS2000 Shelves 3 Lineup the shelf holes with the holes in the rack 4 Mount the top screws first and then the bottom screws Hold the rack securely until all the screws are secured 9 4 Red Zone Encryption Management System REMS User Manual Using shelf rear panel functions Using shelf rear panel functions A shelf rear panel allows for rear connector modules to be installed and secured It also provides the following components connectors for the power supplies cables connectors for ground connections and the expansion buses a shelf address switch See Figur e9 3 Rear Panel View of Dual line Shelf with Callouts Figure 9 3 Rear Panel View of Dual line Shelf with Callouts TB Signal and Chassis Ground Connectors Dual Power Supply Connectors Shelf Address Switc A Control Bus In ES Control Bus Out
52. hip to the data from the FBR correct the phase relationship by optioning the phase select strap in the encryptor Repeat the above steps for the far end After confirming that the T1 line is good and the NET LED on one or both BRCs is still Red perform the following steps Refer to Figure8 3 Example of Typical REMS Circuit Configuration in Troubleshooting Mode 1 Plug an ASCII terminal into the Craft interface on the near end BRC NCC 2020 front panel Alternatively youcan attach a PC running 2000 to CDM 2049 Management In port Using the ASCII terminal interface or the AM2000 change the keep alive signal at both BRCs to FAIS framed all ones The NET LEDs should go Green This keep alive signal provided by the BRC allows the BRC to frame up even though the encryptor may not be sending signal toward the BRC and the line Red Zone Encryption Management System REMS User Manual Rev B preliminary 8 5 Troubleshooting Figure 8 3 Example of Typical REMS Circuit Configuration in Troubleshooting Mode Internal Loop Test Set Encryptor timing timin Encryptor FBR Test Set T1 F B R Loop Ps 40 41 xt Loop Foe Timin Timing MASTER NODE REMOTE NODE In Figur e8 3 Example of Typical REMS Circuit Configuration in Troubleshooting Mode two digit numbers under the devices are configuration commands See Chapter 6 Configuring and starting REMS Red Zone Encryption Management
53. icating the near end and far end Black Zone registers The information can be viewed by the network management system in the Red Zone the Verilink s PC Windows based Access Manager 2000 AM2000 Red Zone Encryption Management System REMS User Manual 4 3 FBR components of REMS Provides Red Zone alarm notification in the event that the register count exceeds the preset threshold Repositions the framing bit provided by the DTE to correspond with the BRC inserted framing bit This proprietary alignment technique is the key to full bandwidth operation For more information see Chapter 3 Theory of operation FBR NCC 2020 The FBR NCC 2020 connects to the MUX via its Rear Connector Module the CIM 2020 Figure4 3 NCC 2020 Front Panel shows the NCC 2020 front panel controls and indicators Figure 4 3 NCC 2020 Front Panel EQPT nul FUNCTION Thumbwheel LED ASCII Signal Access Interface Indicators Interface Jacks Thumbwhes Switches Equ ipment osu Modular Jack Bantam and Comman tatus a j Execution Push button Network L Ebs ASCII Terminal Ejector handle Connection Figur e4 4 FBR CIM 2020 Rear Panel Back Module for NCC 2020 shows the rear connector panel of the NCC 2020 s mating back module Figure 4 4 FBR CIM 2020 Rear Panel Back Module for NCC 2020 This CIM mates with NCC 2020 front module Thumb screws
54. in a REMS Network TELCO is the same as USER except that it is usually accessed only by the Telco EQP Equipment reports C and G In REMS EQP data maps to far end network performance relayed via PRMs from far end BRC In response to your selection the Node Selection Menu appears 6 Select the near end REMS node The network performance display appears for the type of report you have selected For further details and illustrations of report display screens see Access Manager 2000 User Manual Red Zone Encryption Management System REMS User Manual 7 5 Performance monitoring Interpreting AM2000 reports in REMS A subset of AM2000 reports and parameters are valid in a REMS environment These include several parameters displayed in 1 and 24 hour table reports and bar charts Near end User When monitoring User Statistics from an AM2000 attached to the near Statistics end ignore the far end User stats PRMs from the far end can be seen only in Equipment reports In the AS2000 1 Hour USER Performance Data report display the following parameters are measured ES UAS BES SES LOFC ES L SEFS CSU Test Status BPVs OOFS LOFS The same parameters are available in the 24 hour report Near end When monitoring Equipment Statistics from an AM2000 attached to the Equipment near end the following 1 hour and 24 hour parameters are displayed Statistics PRMs us from far end UAS 7 6 Red Zone Encryptio
55. in the encryptor Encryptor re sync connections are usually made to the Relay Alarm contacts on the back of the FBR Use the COM and NC terminals See Chapter 5 Connecting REMS components 4 Verify that the signal from the network to the BRC input is good The NET LED should be green 8 2 Red Zone Encryption Management System REMS User Manual Verifying REMS equipment using the encryptor bypass cable Verifying REMS equipment using the encryptor bypass cable If REMS still does not come up use the Encryptor Bypass cable to verify the operation of REMS without the encryptors See Figur e8 1 Encryptor Bypass Cable Wiring Diagram Figure 8 1 Encryptor Bypass Cable Wiring Diagram FBR Port 2 BRC Data port Red Zone Encryption Management System REMS User Manual Rev B preliminary 8 3 Troubleshooting Troubleshooting using a test set and loopback If the LED indicators show that is not operating use a testset such as the FIREBERD T BERD or Verilink s TS2000 If a testset is not available you can apply a known good TI D4 ESF signal to the DTE input of the FBR Put the near end side of a REMS circuit into loopback in a setup described in Figure 8 2 REMS Troubleshooting Using a Testset Loopback Setup REMS Troubleshooting Using a Testset Loopback Setup EIA 530 loopback 40 The testset takes the place of the MUX The encryptor KG is in the setup The ne
56. is necessary to ensure that at the far end DTE framing is positioned correctly with respect to the payload Red Zone Encryption Management System REMS User Manual User Manual 3 1 Theory of operation Accessing performance data Verilink s REMS solution to encrypted T1 transmission 3 2 Historically network performance monitoring network alarms and fault isolation of an encrypted ESF framed T1 signal were only accessible from the network connected ESF CSU in the Black Zone Network performance information could not be passed through the encryptor because either The framing and performance information was removed prior to encryption or a all information was encrypted rendering the network framing and performance information unidentifiable and useless at the secured communication center Red Zone In this situation the secured communication center in the Red Zone has no means of rapidly identifying whether T1 service in the Black Zone is deteriorating or failing Isolating local hardware problems from network service problems is difficult without ESF CSU access Resolution has required dispatching a technician to the ESF CSU site to evaluate the performance data Often the site is unattended and located miles from the communication center causing logistics problems for the operations staff Typically resolution requires considerable communications center downtime Verilink s Access System 2000 Red Zone Encryption Ma
57. m User Manual Chapter 1 Overview Introduction The Verilink Access System 2000 Red Zone Encryption Management System REMS is a T1 compatible system for communicating KG XX encrypted data between two Red Zones across a Black Zone public or private network while monitoring network management parameters from the Red Zone The secure area from a DTE to an encryptor is called the Red Zone The non secure public media between encryptors is called the Black Zone Figure 1 1 Simplified Block Diagram of a REMS Network User supplied compute running Access Manager 2000 Red Zone Red Zone Encryption Management System REMS User Manual 04 or ESF full 1 544 MHz RS 442 449 REMS with con REMS with 24 or ESF wit ommon wi KG XX Carrier KG xx full 1 544 MHz RS 442 449 Red Zone Far End Black Zone 1 The purpose of encryption is to alter intelligent data producing an unintelligent bit stream for transport across the non secure public media Inversely the encryption process is reversed at the destination reproducing the original intelli gent data 1 1 Introduction Features The Red Zone Encryption Management System offers the following features Full 1 544 MHz 1 via RS 442 449 interfaces 1 536 Mbps plus 8 Kbps framing No longer is there any need to give up bandwidth to provide framing functionality as there was with hi
58. message Now the Black Zone performance registers need to be transmitted to and rebuilt at the FBR To do this the BRC creates performance message and transmits it by using an algorithm to force errors on the encrypted FBR code 3 10 Red Zone Encryption Management System REMS User Manual How performance data is distributed Figure 3 5 The FBR receives the information Red Zone Near End 2 2 2 2 Encryptor Black Zone Far End Performance Registers Near End Performance Registers KG81 KG94 A 2 P2 Decrypted FBR code with BRC performance message At the encryptor the FBR code containing the BRC performance message is decrypted The FBR does know what FBH code it was expecting from the other end and can compare the received code with the expected code Figure 3 6 The FBR decodes information and rebuilds registers Far End Red Zone Black Zone Near End 2 Registers Near End Performance Near End Registers Reg ee yes S S S S Encryptor R S N KG81 e S YS KG94 SS Using an algorithm the FBR extracts the BRC performance message from the received code It then uses these extracted BRC performance messages to reconstruct the Black Zone performance registers Red Zone Encryption Management System REMS User Manual 3 11 Theory of operation How the BRC communicates with the FBR As shown earlier in Figure 3 1 REMS
59. n Management System REMS User Manual Chapter 8 Troubleshooting Overview REMS troubleshooting is divided into different phases of problem isolation as described in the following subsections TIP Before starting the troubleshooting procedures in this section recheck the anm system cabling according to Fi gure5 3 Pin to Pin System Cabling Diagram Red Zone Encryption Management System REMS User Manual 8 1 Troubleshooting Basic troubleshooting In normal operating mode all LEDs on the front panels should be green Flashing green LEDs on the FBR DIU front panel indicate the receipt of BRC performance monitoring messages from the BRC to the FBR See Chapter 6 Configuring and starting REMS 1 Ifthe system does not appear operational start troubleshooting with the EQ LED on the FBR front panel This LED must be green before any other part of the system can come up green EQ LED indicates that the EQ input of the FBR is receiving a good D4 ESF signal 2 Next verify that the encryptor and the BRC are properly connected If the EQ LED is red an LOS condition exists This condition must be rectified before proceeding further Recheck the setups described in Chapter 5 Connecting REMS components 3 Atthe encryptor verify the clock and data phase relationship If the Clock does not have the proper phase relationship to the data from the FBR correct the phase relationship by optioning the phase select strap
60. nagement System provides very useful solution for full bandwidth operation and network performance monitoring from the secured Red Zone Using a proprietary patented Verilink technique the REMS allows fully framed signals to be transmitted through an encryption system while maintaining a standard Extended Superframe ESF framed signal at the carrier network interface The Access System 2000 REMS also allows critical network management information such as ESF performance data and alarms collected from the near and far end REMS Black systems to be delivered through the encryptor to Verilink s Access Manager 2000 located in the Red Zone side of the encryptor This technique is accomplished without wrap around or other means requiring payload overhead Red Zone Encryption Management System REMS User Manual Verilink solves historical problems of encryption over T1 networks Keystones of the This new functionality has two keystones New Functionality wm First instead of making CSU frame to the signal the Access System 2000 Red Zone Encryption Management System makes the signal frame to the CSU This is implemented as the system aligns itself a Secondly the system makes innovative use of the 4 Kbps of ESF Facility Data Link bits to securely transfer network management data These 4 Kbps transport FBR code and PRM messages The REMS 1 signal partitioning is illustrated in Figure 3 1 REMS T1 Signal Partitioning
61. ne of the rear connector module Notes Modules are shown without dual line shelf but in the horizontal plane necessary for a dual line configuration Rear connector module is installed into the shelf first Then the front module is plugged in from the front First the rear connector modules are installed from the back the shelf into the individual slots Then the front modules are plugged in from the front In doing so the rear facing connectors of the front module plugs into the mating connectors of the shelf backplane and the rear connector module The backplane connector and the rear connector module mating connectors are offset from each other Dual line and The REMS plug in front back module assembly is installed in a standard multiline shelves AS2000 dual line or multiline shelf Both the dual line and multiline shelves are mountable in a standard 19 inch rack See Figur e2 2 Front Panel View Concept Drawing Dual line and Multiline Shelf Rack Configurations Figure 2 2 Front Panel View Concept Drawing Dual line and Multiline Shelf Rack Configurations if 35 T kt Hzure Concept of multiline shelf 2 2 Red Zone Encryption Management System REMS User Manual AS2000 rack mountable shelf system AS2000 plug in modules can be added up to the capacity of the shelf Multiline shelves can hold up to 13 single wide modules in individually addressable slots Additional shelves with separate shelf addresses can be a
62. near end DTE transmits its DA ESF framed signal the near end FBR extracts information about the location of the DA ESF framing bit Time BRC DTE F BRC inserted bit F D4 framing bit 7 The near end FBR sends an FBR code that is aligned with the DTE framing This means actually that the FBR code is inserted into the DTE framing bit position The far end FBR identifies the FBR and BRC frame bit positions and calculates an offset count Time m BRC DTE F FBR code FB offset x BRC inserted bit F D4 framing bit FBR FBR code 8 The near end FBR repositions the DTE framing bit which contains the FBR code by an amount equal to the offset count Only the framing bit itself is repositioned and the end to end encode decode delay of the entire signal is a maximum of one bit The FBR code and BRC framing bits now correspond to the same time slot F 8 1 l2 3 191 offset x o 112 3 191 3 8 Red Zone Encryption Management System REMS User Manual System operation Or to summarize the DTE frame bit carrying FBR code is shifted in time to correspond with the position of the BRC inserted bit The far end FBR reframes on the offset framing bit FBR code After the FBR code is aligned to the BRC frame bit position the FBR allows the DTE payload onto the network As a result of the off
63. ng associated with a single line individual service may be extended by means of a certified connector assembly telephone extension cord The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier Any repairs or alterations made by the user to this equipment or equipment malfunctions may give the telecommunications company cause to request the user to disconnect the equipment Users should ensure for their own protection that the electrical ground connections of the power utility telephone lines and internal metallic water pipe system if present are connected together This precaution may be particularly important in rural areas Caution Users should not attempt to make such connections themselves but should contact the appropriate electric inspection authority or electrician as appropriate This equipment is intended to be installed only in a Restricted Access Location that meets the following criteria Access can only be gained by service personnel or users who have been instructed about the reasons for the restrictions applied to the location and about any precautions that must be taken Access can only be gained through the use of a lock and key or other means of security and is controlled by the authority responsible for the location
64. nicator BRC provide full CSU functionality including transcoding and performance data registers Both the FBR and the BRC are composed of front and back modules Back modules are called Rear Connector Modules The front modules contain the microprocessor based engines that perform the essential Red Zone Encryption Management System REMS User Manual 2 5 System Overview functions of the modules The back modules provided equipment and network connectivity Engine modules are based on standard AS2000 modules but contain modified Flash and other electronics Rear Connector Modules are also based on standard AS2000 modules Figur e2 6 Functional Block Diagram of REMS Component Modules and Encryptor shows the modular breakdown of the REMS components and their interconnectivity with the equipment side the encryptor and the network Figure 2 6 Functional Block Diagram of REMS Component Modules and Encryptor FBR BRC x 9 1 x Shet l X backplane 8 2049 I m EE EM EM mm mm mm um d Encryptor gt MUX D4 ESF To network To PC Access Manage For a further descriptive breakdown of the FBR and BRC see Chapter 4 FBR and BRC components of REMS 2 6 Red Zone Encryption Management System REMS User Manual Chapter 3 Theory of operation This section provides technical background on problems with encryption over service car
65. nt System REMS consists of two of each of the following components a DTE equipment operating at 1 544 Mbps such as IDN multiplexers a Frame Bit Repositioners FBR a Encryptors such as the KG81 or KG94 and a Black to Red Communicators When the system starts up each piece of equipment tries to get into sync with its counterpart at the other end of the network To accomplish this the entire system goes through an ordered procedure to align itself The system alignment process involves four sequential steps 1 BRC to BRC framing 2 Encryptor to encryptor synchronization 3 FBR to FBR alignment and framing and 4 DTE to DTE framing In this example we consider the near end REMS termination to be the transmitting side The BRCs frame to each other using ESF framing across the public network Each BRC arbitrarily assigns a bit position in the cipher text signal and overwrites the original cipher text bit with standard ESF frame bits and CRC 6 bits Although this would appear to create errors within the cipher text data the following sequences eliminate any errors Red Zone Encryption Management System REMS User Manual 3 5 Theory of operation Encryptor synchronization FBR alignment and framing 3 6 After the BRCs are frame synchronized a 1 544 Mbps path is provided though the aligned from the near to the far end encryptor Encryptor synchronization is initiated by the FBR encryp
66. ont panel LEDs 6 10 Near end FBR DIU Front Panel LEDs STAT Port 1 STAT Port 2 Flashing Red means Remote to Master signal path is out of alignment alignment is in progress Steady Red means loss of REMS framing Flashing Green means remote to master is aligned and in receipt of PRMs or BRC messages Off means loss of REMS framing Flashing Red means Master to Remote signal path is out of alignment alignment is in progress Green means Master to Remote signal path is aligned The remote FBR is set to configuration 65 STAT Port 2 STAT Port 1 Steady Red means loss of REMS framing Flashing Red means Master to Remote is out of alignment alignment is in progress Flashing Green means in receipt of PRM or BRC messages Off means loss of REMS framing Steady Green means master to remote is aligned Red Zone Encryption Management System REMS User Manual Chapter 7 Overview NOTE LE Performance monitoring This chapter describes using AM2000 and or the ASCII Terminal Interface ATI with REMS to monitor a REMS circuit performance It is possible to install and use REMS without Access Manager AM2000 However using AM2000 is the best way to monitor REMS performance AM2000 is a distinct Verilink product AM2000 is a menu driven ASCII graphical display application that runs in Windows It provides ASCII displays of various performance registers You can also use the ASCII Terminal In
67. put of the receiver it is connected to Likewise always connect the minus output of a driver to the minus input of the receiver it is connected to See F igure5 2 Simplified System Cabling Diagram Figure 5 1 Maintaining Driver Signal Wire Polarity Example NOTE The pin numbers are notated in the order Plus Minus For example 3 16 means output 3 output 16 3 Receiver BO 16 Figur e5 3 Pin to Pin System Cabling Diagram shows a the signal level connections for REMs on the near end 5 2 Red Zone Encryption Management System REMS User Manual Procedure for connecting REMS components Procedure for connecting REMS components For intermodule connections refer to Fi gure5 2 Simplified System Cabling Diagram For signal level pin to pin cabling details refer to Figur e5 3 Pin to Pin System Cabling Diagram Near end of circuit Start by connecting the equipment at the near end 1 Connect TI MUX to FBR CIM 2020 rear panel Equipment port 2 Connect rear panel of FBR DIM 2530 Port 2 of FBR to Encryptor input port 3 Connect PC to Management In port on 2020 rear panel 4 Connect Encryptor output port to EIA 530 adapter cable P N 458 502045 001 Rev or higher 5 Connector BRC end of adapter cable to minisub Management Extension port on rear panel of BRC CDM 2249 6 Connect BRC Network port on rear panel of CDM 2249 to TI ESF network Con necting
68. qualified service personnel under the following conditions e When the power supply cord or plug is damaged or frayed If has been spilled into the product e If the product has been exposed to rain or water f the product has been dropped or if the cabinet has been damaged Verilink s product warranty covers repair or replacement of all equipment under normal use for a five year period from date of shipment Replacement products may be new or reconditioned Any replaced or repaired product or part has a ninety 90 day warranty or the remainder of the initial warranty period whichever is longer Our in house Repair Center services returns within ten working days Verilink offers the following services System Engineers at regional sales offices for network design and planning assistance 800 837 4546 Technical Assistance Center for free 24x7 telephone support during installation maintenance and troubleshooting 800 285 2755 and support verilink com To return a product it must be assigned a Return Materials Authorization RMA number before sending it to Verilink for repair 800 926 0085 ext 2282 Maintenance contracts and leasing plans 800 837 4546 Technical Training on network concepts and Verilink products 800 282 2755 and training verilink com Web site www verilink com Verilink REMS User Manual Verilink REMS User Manual 2 3 Table of Contents Introduction ao
69. r CDM 2049 To network Jojd u2u3 XX OM MUX D4 ESF To PC Access Manage 4 2 Red Zone Encryption Management System REMS User Manual Frame Bit Repositioner FBR Frame Bit Repositioner FBR The Frame Bit Repositioner FBR provides two interfaces which operate at 1 544 Mbps a or RS 422 DTE interface a an RS 422 interface to the KG bulk encryption device The Frame Bit Repositioner FBR is a dual module assembly made up of a paired CSU and DSU These functions are implemented by one NCC 2020 based front module and one DIU 2130 based front module Both modules contain special Flash EPROMs See Figur e4 2 Functional Block Diagram of FBR Component Modules Figure 4 2 Functional Block Diagram of FBR Component Modules FBR 202 5 128 128 BRC connecto connecto lt b m mm um um um um um um dj E Encryptor gt MUX D4 S To network To PC Access Manage The NCC 2020 connects to the Red Zone DTE equipment via its CIM 2 0 20 rear connector module The DIU 2130 connects to the encryptor via its DIM 2530 rear connector module The FBR generates its own proprietary code and performs the following functions a Receives and decodes performance data originating at the BRC This information is processed and stored in real time performance registers dupl
70. rier networks and the REMS solution to these problems In depth material is presented on how REMS functions are allocated to and performed by its dual components the FBR and the BRC Subjects covered are framing alignment and system communication Verilink solves historical problems of encryption over T1 networks Framing Encrypted T1 signals When using the public telecommunications network to transport a full bandwidth encrypted signal two areas have been problematic positioning the framing bit having access to Black Zone information about performance data network alarms and fault isolation from the Red Zone Transmission of encrypted full bandwidth T1 signals across the public switched network has always been a challenge to the communication engineer In past the carrier furnished a custom facility to transport encrypted T1 data in an unframed format In today s world custom 1 facilities are nonexistent or at best very expensive The challenge to the user is how to economically hand off a framed full bandwidth encrypted signal from the secure Red Zone to the carrier in the non secure Black Zone The previously accepted method has been to reposition the DTE frame bit into the payload before encryption and insert the network framing sequence into the bit stream after encryption This process requires payload bandwidth to transport the DTE framing sequence to the far end Transport of the framing information
71. s only The BRC supports all AM2000 capabilities such as network management daisy chaining performance monitoring and storage of performance data and alarms Paragraph numbers refer to the T1M1 3 92 005R3 specification a Near end registers Errored Seconds 6 3 2 3 e Errored Seconds Type B 6 3 2 4 e Severely Errored Seconds 6 3 2 5 Unavailable Seconds 6 3 2 9 Far end registers e Errored Seconds Unavailable Seconds Performance degrading alerts are included with each near and far end register set Each thresholding point is user selectable from 0 to 900 alerts pertain to Path Registers only DS1 threshold and alerting criteria are described T1M 1 3 92 005R3 4 2 2 4 and 9 2 1 3 For example a typical alarm scenario would be The FBR Errored Seconds performance Red Zone Encryption Management System REMS User Manual Diagnostics and performance monitoring register alarm threshold is set to 45 An accumulation of 45 error seconds within a 15 minute time interval at the far end causes the local FBR to initiate an alarm to AM2000 Registers Data is logged in six AM2000 database registers Register processing database criteria are described in T1M1 3 92 005R3 Data storage is described in T1M1 3 92 005R3 9 2 1 2 DS1 Performance Data Storage FBR registers can be reset independently or globally from the FBR ASCII Craft interface or the AM2000 Red Zone Encryption Management System REMS User Manual 1
72. set and alignment no payload bits are errored 9 The far end FBR moves the offset framing bit and restores it to its original location offset removed mel 29 E DTE alignment Once the FBRs are aligned and a 1 544 Mbps path is provided to the DTE the DTEs frame to each other Red Zone Encryption Management System REMS User Manual 3 9 Theory of operation How performance data is distributed The following four figures show how information from Black Zone performance registers is transferred to the Red Zone Figure 3 3 gt Network performance data is collected in the Black Zone Red Zone Black Zone Near End Far End Performance Registers To detect errors each BRC creates a CRC 6 Near End Near End for the data it transmits and verifies the Performance Performance CRC 6 for the data it receives This Black Registers Registers Zone error information is collected in performance registers To exchange performance register information BRCs send standard PRMs across the ESF Facility CRC 6 inserted Data Link The ESF Facility Data Link is concurrently carrying ESF framing bits and encrypted FBR code 27 0 Local Exchange Networ CRC 6 verified Figure 3 4 The BRC encodes and transmits the performance data Red Zone Black Zone Far End Near End Performance Registers Near End Performance Registers ombine encrypted FBR code and BRC performance
73. storical methods Patented technique requires no wrap around or other means that generate payload overhead Data access port selectable between ESF or 042 e Supports AMI or B8ZS lines codes Linelevel DSX 1 Single access port and network port per system unit Complies with carrier T1 standards Requires no additional DSU CSU modules Plug to plug compatible with KG 81 and 94 encryptors REMS operates with Government and Military Encryptors such as the KG 81 and KG 94 including RS 422 449 interface signal levels and timing conventions at 1 544 Mbps Maintains integrity of fully framed T1 signals across KG XX encryptors to Extended Super Frame ESF carrier network interface Dual modular components consisting of Frame Bit Repositioner FBR and Black to Red Communicator BRC These modules are installed on the Red Zone side and the Black Zone side of the encryptor respectively Another pair is installed similarly at the far end circuit Windows based Access Manager AM2000 monitors Black Zones network parameters from Red Zones e ESF performance data alarms 2 Selectable as a user configurable option 1 2 Red Zone Encryption Management System REMS User Manual Full T1 bandwidth without DSU CSUs Other key advantages of REMS Features fault isolation Easy thumbwheel interface configuration Provides front panel Craft interface for performance monitoring via the ASCII Terminal Interface
74. t addresses numbers are two digit numbers that range from 01 to 30 The NCC is typically in slot 01 Configuring the system using the thumbwheel switches is a two step process The operator enters a command by setting the FUNCTION thumbwheel switches to the corresponding command number address The operator then presses the EXE button twice in one second Red Zone Encryption Management System REMS User Manual Accessing the NCC 2020 using the thumbwheel switches Configuring REMS using the thumbwheel switch Each command consists of two digits The switch nearest to the EXE push button sets the first digit of each command and has a TENs arithmetic value The other switch sets the second digit of the command and has a ONEs value Plug in module slot addresses range from 01 to 30 Slot numbers are assigned to dual line and multi lined shelves from left to right continuing from one shelf to another See Figure 2 2 in the Red Zone Encryption Management System User Manual The figure is titled Front Panel View Concept Drawing Dual line and Multiline Shelf Rack Configurations For more information see the AS2000 manuals referred to in the preface of the REMS user manual Every module in an Access System 2000 node has a unique two digit location number or address In a node with two multiline and two dual line shelves the module addresses for thumbwheel switch access are 01 to 13 in the first multiline shelf and 14 to 26 in the
75. terface ATI to display near end performance data No far end reports are available via the ATI Verilink recommends that you use AM2000 for monitoring REMS Figur e7 1 Management of performance data briefly summarizes how the BRC and FBR work together to manage performance data Figure 7 1 Management of performance data Red Zone Near End Access Manager 2000 2 f 22 aon 2 Black Zone Red Zone Far End Each FBR provides Red Zone alarm BRC collects network performance notification data and sends to the FBR in a BRC FBR receives and processes the BRC performance message performance messages which carry the network performance data Common Carrier Or Encryptor KG81 KG94 Local Exchange Network Red Zone Encryption Management System REMS User Manual 7 1 Performance monitoring For detailed general information on using AM2000 see Access Manager 2000 User Manual AS2000 New Features Manual contains updated information on Access Manager AM2000 See this manual as a supplement to Access Manager 2000 User Manual IMPORTANT CAUTION REM uses AM2000 displays and registers differently from standard AS2000 products This chapter describes the REMS usage System In REMS both the FBR and the BRC incorporate NCC 2020 modules communication of The NCC 2020 provides a management port that connects to the COM performance port of a PC The management port is located on
76. the AM2000 manual 1 Start the AM2000 and call up the Main Menu Figure 7 3 Access Manager 2000 Main Menu Main Menu Utilities revise administrative data Alarm status review acknowledged alarms Configuration revise system configuration tables Online access performance data inquiry and testing Database access stored performance data analysis Press f or ist char Enter to select Esc to cancel 2 From the Main Menu select Configuration to revise the system configuration tables This step assures that AM2000 is properly modeling your existing REMS circuit 3 display the performance data select Online access You are presented with an element selection menu 4 Select the element NCC 2020 The Retrieve CSU performance data menu appears 7 4 Red Zone Encryption Management System REMS User Manual Calling up 2000 performance displays Figure 7 4 Retrieve Performance Data Menu Retrieve performance data 1 Hour USER data 1 Hour Additional data 1 Hour EQP data 1 Hour TELCO data 24 Hour USER data 24 Hour Additional data 24 Hour EQP data 24 Hour TELCO data Press f or ist char Enter to select Esc to cancel 5 Select the type of report you wish to see The following reports are available in REMS USER data reports selections and E In REMS USER data maps to the RCV signal at the near end BRC point A See Figure 7 2 Origination and Flow of Performance Data
77. the testset in loop timing mode Using the thumbwheel interface set the re sync timing on the FBR See Chapter 6 Configuring and starting REMS Start with 6 seconds command 71 Timing may vary depending on the encryptor and the type of transmission facility used If the circuit is not working as indicated by the REMS LEDs the problem maybe in the network Verify the T1 line by plugging an ASCII terminal into the Craft interface on the near end BRC NCC 2020 front panel For details see AS2000 ASCII Terminal Interface Manual Red Zone Encryption Management System REMS User Manual 5 7 Connecting REMS components Setting up external timing This section describes how to provide external timing to the external input of the BRC The timing source must be the same one that provides CLK to the rest of the equipment in the circuit See Figur e5 5 External Timing Block Diagram of Near end and Table5 1 REMS External Timing Configuration NOTE Master and Remote configuration refer to the FBR only LES Internal external timing refer to the BRC only 1 Set the Multiplexers to loop timing If loop timing is not possible you can set the end Multiplexers for external timing and use the same external timing source provided to BRC EXT input or the RSC from the encryptor Or 2 Set the Multiplexers timing to external timing and connect the FBR 64 KHz reference which is synchronized with RSC See Figur e5 5 External Timing
78. tor re sync lead and occurs in spite of the BRC frame bit insertion discussed above After the encryptors synchronize a 1 544 Mbps path is provided through the framed BRCs and synchronized encryptors from the near to the far end FBR The following steps provide an abbreviated description of the FBR alignment process It is this alignment process that eliminates the errors mentioned above in the BRC sync process Assume that the position of the D4 ESF frame bit entering the near end FBR from its DTE is not initially aligned with the arbitrarily overwritten ESF frame bit generated by the near end BRC The decrypted plain text signal delivered to the far end FBR then would contain the original unerrored FBR code which replaces the DA ESF frame pattern in its original position and random errors every 386 bits in some other as yet undetermined bit position Receipt of unerrored FBR code signals the far end FBR that the near end FBR is not properly aligned This initiates the FBR alignment process The end result of this alignment process is that the near end DTE D4 ESF bit position will be shifted in time to correspond to the arbitrarily generated ESF bit position in the Black Zone Any errors caused by the overwriting process in the Black Zone are then limited to the FBR code instead of the payload and are then simple to correct because the FBR code is redundant The net result is wm errors on any payload bits a errors in th
79. ure the FBR and the BRC separately as if they were two separate AS2000 nodes Figur e6 1 NCC Thumbwheel Switches shows the top section of the master NCC 2020 front panel Red Zone Encryption Management System REMS User Manual 6 1 Configuring and starting REMS CAUTION Do not attempt to use AM2000 or ASCII Terminal Interface ATI to configure REMS There are some exceptions which are noted Use only the thumbwheel interface If you accidentally change configuration using the AM2000 or theATI reconfigure the system using the thumbwheel interface Do not use other thumbwheel commands that you may find in AS2000 manuals Unspecified results may ensue Figure 6 1 NCC Thumbwheel Switches Using the thumbwheel switches overview 6 2 Press this button twice within 1 second to First digi execute the command command TENs Value Second digit of command ONEs Value NOILONNA Push the buttons on this side to decrement the digit values Push the buttons on this side to increment the digit values The system must be powered up before you use the thumbwheel switch interface The thumbwheel switch interface is enabled by default You can log into Access Manager 2000 AM2000 to verify that the thumbwheel switches are enabled Before entering thumbwheel commands you must address the appropriate FBR or BRC NCC 2020 by entering its slot address number into the thumbwheel switches Slo

Verilink Red Zone Encryption Management System (REMS) User

Contents

Download Pdf Manuals

Related Search

Related Contents